Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
File:                     F564e9wyeT2_7RhKb_vBTtFdMqQ.mft (raw, json)
Hash identifier:          lzDZgB963nRO88GX80wWv6CH72FsP4/GmPCxParyG/0=
Subject key identifier:   75:2E:78:FD:CF:BA:15:BA:BA:15:0C:72:80:0C:F9:E7:F4:E5:52:44
Authority key identifier: 17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4
Certificate issuer:       /CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4
Certificate serial:       01965B7092372667AA9DD439CE8BF35E43EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
Manifest number:          0221
Signing time:             Tue 22 Apr 2025 03:00:26 +0000
Manifest this update:     Tue 22 Apr 2025 03:00:26 +0000
Manifest next update:     Wed 23 Apr 2025 03:00:26 +0000
Files and hashes:         1: F564e9wyeT2_7RhKb_vBTtFdMqQ.crl (hash: 1jzbUB6ZD9niTyWwf9S3UBcLyCdB3u4S73APlYnvnP4=)
                          2: YYdbZAN7pN6TVTepPYBGugFjphQ.roa (hash: NsxHuGOHh0xg9XbBNwi/wuinAUzVezbbbYAR6J2U768=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 03:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5b:70:92:37:26:67:aa:9d:d4:39:ce:8b:f3:5e:43:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4
        Validity
            Not Before: Apr 22 03:00:26 2025 GMT
            Not After : Apr 23 03:00:26 2025 GMT
        Subject: CN=752e78fdcfba15baba150c72800cf9e7f4e55244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ff:fd:f6:2d:2a:4c:ed:a4:fd:6c:73:08:20:
                    bf:36:91:ab:20:01:55:9a:9f:c4:07:27:fb:a3:62:
                    2a:31:40:94:45:ff:e1:c8:3d:01:f1:1f:54:e0:c2:
                    ea:d8:f4:63:63:ae:11:d8:62:9d:ef:5c:ab:54:b0:
                    a8:a5:92:94:c6:84:be:66:cc:c0:30:5c:46:80:a0:
                    04:39:6e:c1:56:96:b9:93:ec:b1:83:90:c1:16:f6:
                    25:a2:29:17:5c:39:a2:7b:55:44:32:dc:2f:e0:e5:
                    3e:09:02:c5:ab:29:45:11:d3:b0:8f:87:91:78:2e:
                    fd:1d:e4:75:f4:ea:29:28:da:3e:45:68:e2:dd:b7:
                    6e:9b:5c:30:c0:47:52:56:d7:84:a3:12:81:42:e5:
                    dd:44:3f:57:df:aa:b1:11:6f:e5:01:6d:86:33:4e:
                    28:90:80:bd:fd:26:4c:0d:19:4f:9e:d7:d7:3c:73:
                    4a:e2:17:73:3b:fe:cc:2b:6e:fe:68:d8:33:76:9e:
                    52:36:ff:dc:ef:5e:af:1e:53:34:ce:0b:04:39:6c:
                    71:c2:07:32:2b:a6:86:27:8c:01:cd:28:eb:6f:7f:
                    b1:ea:11:82:ef:5f:60:0a:26:c0:66:7a:28:2f:f0:
                    78:7b:a5:87:ae:8b:83:48:15:f3:7c:d4:8a:d1:19:
                    0d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2E:78:FD:CF:BA:15:BA:BA:15:0C:72:80:0C:F9:E7:F4:E5:52:44
            X509v3 Authority Key Identifier:
                keyid:17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:df:d2:0c:a8:e7:72:5f:90:fa:4f:b0:02:5a:9f:e6:a2:ff:
         e4:cf:23:12:c2:05:f2:ca:f6:cd:bd:55:04:5d:c5:56:f2:48:
         b2:f4:1d:62:bf:9c:64:e6:d7:98:69:e5:f2:53:d7:df:b0:11:
         68:1e:a5:4a:68:fa:7d:f7:b0:2c:e0:51:84:1d:88:52:a9:d0:
         17:cf:87:81:ae:65:2b:b9:2c:9a:a3:b5:6e:98:97:e1:1a:6b:
         04:a6:43:87:58:4e:99:67:0a:ce:5e:b4:a1:00:a6:60:c9:b4:
         47:36:e8:d0:6c:62:e3:c6:c8:04:fe:d1:c9:db:47:72:57:45:
         8c:a4:2e:80:bb:6e:e2:8d:73:93:74:26:54:fd:ce:ca:9c:75:
         f2:f8:92:11:33:72:3d:63:bf:db:33:e8:66:3c:fe:16:69:b2:
         3f:55:f8:c0:63:1f:09:6a:f2:02:91:7c:7f:51:10:36:25:4f:
         f6:16:ad:64:12:c7:c8:f8:e0:4e:1e:96:d9:42:95:90:f3:fc:
         b2:11:19:93:6d:83:b6:89:78:eb:a5:27:09:61:a3:40:16:fe:
         70:36:ed:53:d6:a7:51:2e:c7:49:f2:2b:13:e8:70:2b:a5:a2:
         47:04:2b:f5:e3:cc:44:67:a5:ae:fa:41:2e:91:10:3c:e4:ff:
         de:ac:87:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:17:35 2025 by rpki-client