Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
File:                     _Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft (raw, json)
Hash identifier:          9Mk0wkLoB8xAJXdP2SxqbRMaSmeE5L3AF3aki0fxUvw=
Subject key identifier:   39:B4:A6:B4:E1:18:E8:01:4B:11:3B:23:1C:81:8C:92:8E:F3:EB:7C
Authority key identifier: FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35
Certificate issuer:       /CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
Certificate serial:       01964BFD94AE425CC964C8F69D2625EA5177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
Manifest number:          14F7
Signing time:             Sat 19 Apr 2025 03:00:31 +0000
Manifest this update:     Sat 19 Apr 2025 03:00:31 +0000
Manifest next update:     Sun 20 Apr 2025 03:00:31 +0000
Files and hashes:         1: _Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl (hash: rcXZYLNLQnhZh215XArpZa2RLBtfrkqIRMEhvqHZ2Vk=)
                          2: gj7G_bFbDmDYpYp6GKUqBVaPkf0.roa (hash: 636LllEYf1p/aMnvVspv63btZ6guwyZEmYUh7DiMd9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:fd:94:ae:42:5c:c9:64:c8:f6:9d:26:25:ea:51:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
        Validity
            Not Before: Apr 19 03:00:31 2025 GMT
            Not After : Apr 20 03:00:31 2025 GMT
        Subject: CN=39b4a6b4e118e8014b113b231c818c928ef3eb7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:16:14:9f:91:73:c9:95:f7:fa:9e:29:2b:c4:
                    41:82:d6:06:f4:47:36:48:22:23:19:75:38:91:76:
                    23:94:9a:92:ef:2e:ce:27:b8:98:e5:6b:b3:62:d3:
                    5c:39:9e:74:50:a2:de:c7:29:fa:d3:a7:1a:c6:64:
                    f0:89:ba:3d:8e:5b:ee:b7:c6:8e:5a:64:b2:33:46:
                    c9:a3:48:6c:65:95:76:c9:26:16:7a:b3:da:e3:e6:
                    5e:17:d2:9c:e8:5d:45:6b:d3:a7:f6:64:0d:97:5a:
                    32:63:9f:3a:a0:d6:26:41:6c:5a:6d:9b:da:50:cd:
                    d7:e3:19:d5:d3:92:98:30:3c:b2:f5:91:54:6d:16:
                    c9:00:fe:42:d1:11:97:e1:f3:8a:dc:a0:e7:94:16:
                    84:96:49:06:9b:6e:b2:5a:66:9a:21:7b:bb:c0:c2:
                    e7:02:3c:4a:a4:2c:d2:ec:69:0c:53:af:48:df:5a:
                    02:ac:91:b9:9e:05:f8:66:8d:aa:59:d0:23:89:ce:
                    da:f2:5e:4d:b0:1d:0a:2a:a8:f5:f2:8d:3c:83:f7:
                    78:53:3c:5b:bb:a3:c3:36:b7:a3:52:31:c7:3a:b5:
                    a4:0c:dc:93:be:ea:9b:ec:ed:07:a7:b1:90:d6:93:
                    38:0f:66:c4:f6:3f:de:69:b0:34:0c:e2:1e:34:c4:
                    03:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B4:A6:B4:E1:18:E8:01:4B:11:3B:23:1C:81:8C:92:8E:F3:EB:7C
            X509v3 Authority Key Identifier:
                keyid:FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:5f:72:3a:65:25:b6:72:9f:38:56:af:e5:bf:71:ac:de:e7:
         30:c0:4a:00:68:6b:cc:da:a7:c7:8d:de:d0:fd:39:59:05:7b:
         e2:ef:f6:ec:fd:10:42:f2:19:1c:9e:69:15:19:f8:60:66:1f:
         a6:1f:9b:0b:d1:9f:ea:68:25:ce:90:08:50:02:54:11:14:8d:
         6f:b7:41:85:04:4d:1b:47:9b:b1:a6:50:c4:3f:ec:98:e2:6b:
         fa:5c:f3:c6:1f:98:1a:88:6d:9d:b4:47:de:f2:ee:5f:ae:5e:
         4e:df:99:74:69:bb:5e:c5:28:39:95:f2:5a:80:51:9a:61:0b:
         a8:67:9c:32:0f:33:3b:fb:00:dd:ea:cd:64:88:80:a1:db:c9:
         46:98:99:89:8b:2c:56:62:78:50:64:61:a4:43:28:37:ec:3f:
         20:77:43:a3:eb:26:20:7f:a4:48:c2:cb:a6:ca:10:45:04:62:
         0e:4f:92:5d:86:90:ef:9b:d1:33:e5:6d:4b:4a:34:33:28:a4:
         47:f8:ca:3e:0f:a9:8e:5c:48:79:95:10:17:50:5b:a6:00:bc:
         03:13:22:51:00:2c:34:82:08:ec:d1:1d:6a:a2:36:26:d7:fb:
         88:d1:f5:c1:e0:0e:a9:35:51:fe:dd:f5:28:51:1c:c2:62:61:
         0b:0e:99:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:31:02 2025 by rpki-client