Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
File:                     FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft (raw, json)
Hash identifier:          6Ff+jj5MKV4kR7S/4kwLyoD1L7jQuKL0b2RXwq1b2ak=
Subject key identifier:   DE:C3:97:77:19:F1:62:13:C5:2A:E3:1E:DD:D8:59:2B:6D:43:06:B7
Authority key identifier: 15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
Certificate issuer:       /CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Certificate serial:       01965CF1D06D53F733C49B20A46CA75D7B7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
Manifest number:          1503
Signing time:             Tue 22 Apr 2025 10:01:13 +0000
Manifest this update:     Tue 22 Apr 2025 10:01:13 +0000
Manifest next update:     Wed 23 Apr 2025 10:01:13 +0000
Files and hashes:         1: 7avwX6wLfCubdHbZyz0nLS_e-eU.roa (hash: pGwwGuIWJ6QSCg6gVVG8woBK5kghKUCbnUTlff7iqb8=)
                          2: 9DMJzw07rRfF-igR7wqKT9KeDa8.roa (hash: ABLdTL2q0KpCPDDFSNDGIpACFRfb6QE136WIpKW4qXM=)
                          3: FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl (hash: y4oulqP8omXfMkVyJBhyRs8H+crGBYZFeHCpTQZSZDw=)
                          4: UT0I3-20WjgyE861B6nG5TG1yMk.roa (hash: YUnPY3ov9u17ugGwQgEKlldHoKyzjUpe3RRFSJYdmsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 10:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5c:f1:d0:6d:53:f7:33:c4:9b:20:a4:6c:a7:5d:7b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1517d4f58af84f50ce42f13293ede4aff12d173f
        Validity
            Not Before: Apr 22 10:01:13 2025 GMT
            Not After : Apr 23 10:01:13 2025 GMT
        Subject: CN=dec3977719f16213c52ae31eddd8592b6d4306b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:54:9a:e8:94:5d:38:04:d8:76:f3:91:18:4c:
                    a3:07:09:9e:6b:39:45:5f:eb:e7:f5:4c:01:c1:5b:
                    17:c4:a1:8f:14:fa:eb:a0:69:fd:82:d1:3d:0c:bb:
                    78:5a:1e:d6:c4:d9:48:3d:50:09:bb:dc:a0:26:98:
                    d7:4b:e3:87:8d:f3:fb:42:27:b1:08:dc:19:d7:40:
                    ff:32:3a:0a:7a:e9:b7:ff:db:7a:f8:f7:b2:03:f0:
                    fc:d5:2a:e8:5d:2c:94:9c:17:0b:b8:cd:2b:55:5c:
                    0d:fd:e8:15:1a:71:b7:db:dd:3f:8a:f9:b4:0a:c0:
                    34:65:5d:5b:b0:08:b4:fd:e8:39:5f:97:df:f4:ce:
                    f6:a1:bb:29:7c:55:fd:ac:86:d8:f2:d3:d6:73:e5:
                    af:a7:bb:bb:31:01:02:57:3d:12:4f:72:9e:d1:56:
                    2c:db:14:ce:85:8c:d6:54:a0:55:cc:47:71:6b:2e:
                    46:62:47:7b:6b:f6:96:f7:81:79:93:62:c0:5b:2c:
                    62:7d:69:e4:6e:fb:65:13:05:e8:63:6e:9d:f0:57:
                    6a:da:67:6b:e6:b2:60:9a:f8:97:27:d5:af:8d:ea:
                    1f:b0:97:e9:b1:70:ae:5e:b6:42:55:5a:27:60:60:
                    6e:b9:8f:3e:63:60:dd:ff:fa:34:9a:61:ed:30:d0:
                    0d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C3:97:77:19:F1:62:13:C5:2A:E3:1E:DD:D8:59:2B:6D:43:06:B7
            X509v3 Authority Key Identifier:
                keyid:15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:56:10:36:b1:f2:62:ee:bc:63:c9:7c:2d:92:8c:d2:c1:05:
         95:e5:3b:34:66:ed:5e:8a:85:6d:b2:43:6a:56:52:89:3a:a2:
         82:22:1a:f5:5d:b5:5e:cc:6e:d2:5b:b8:97:0a:26:0e:7e:61:
         5b:29:c2:58:78:fe:53:ea:5a:06:a9:a4:0e:bb:e0:f0:f7:a9:
         47:04:30:c9:a0:3b:fe:60:0a:b2:e0:1f:7a:3c:18:92:bf:44:
         33:18:bf:01:cb:29:0c:16:0d:5d:18:17:74:ef:b8:c0:53:fe:
         d5:c7:bd:dd:a4:9d:22:d2:a2:b0:a3:87:ee:06:6f:18:c2:86:
         8c:df:d5:46:8b:d0:f6:9c:ce:f0:27:f3:64:73:50:cf:df:16:
         28:46:3c:c7:d5:a6:5a:de:67:4c:a7:d2:b2:66:6f:d5:bc:ae:
         1b:2e:2d:dd:16:00:44:d2:68:f9:11:59:8c:dc:b7:cc:ea:40:
         c0:38:55:5e:c4:75:52:24:96:4c:f4:9f:27:30:7f:86:41:70:
         88:c4:87:a7:c9:ba:d5:0f:8f:98:f3:30:74:c0:c4:f2:b2:10:
         aa:bf:b4:df:14:f6:b7:76:1f:26:c2:d4:3f:db:6a:7b:aa:39:
         81:0f:e9:ae:9f:00:d8:55:ae:10:a3:de:11:34:03:bb:97:df:
         23:70:b5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:43:35 2025 by rpki-client