Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
File:                     FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft (raw, json)
Hash identifier:          feW1IQq1E7GpD9605hjmvHPKS21uzaOKWBhe3XfmYnE=
Subject key identifier:   F9:44:8F:09:40:F9:58:16:A7:8F:1F:BC:B9:C1:10:07:8C:E2:73:53
Authority key identifier: 17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C
Certificate issuer:       /CN=1702685b1a4ef6cd313980a42ffd95eed139772c
Certificate serial:       01964CD99BB624D58A7FBADD835D8AC4DE7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
Manifest number:          04B1
Signing time:             Sat 19 Apr 2025 07:00:51 +0000
Manifest this update:     Sat 19 Apr 2025 07:00:51 +0000
Manifest next update:     Sun 20 Apr 2025 07:00:51 +0000
Files and hashes:         1: FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl (hash: EbyO3xYI2ompvjSPdDbS+zaTuIK2qv0Z8o6f74I1Q+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:d9:9b:b6:24:d5:8a:7f:ba:dd:83:5d:8a:c4:de:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1702685b1a4ef6cd313980a42ffd95eed139772c
        Validity
            Not Before: Apr 19 07:00:51 2025 GMT
            Not After : Apr 20 07:00:51 2025 GMT
        Subject: CN=f9448f0940f95816a78f1fbcb9c110078ce27353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:53:ae:ce:8d:a3:90:fd:49:7a:ce:4d:7b:bf:
                    d5:a4:55:9b:fb:85:98:49:95:0b:b0:75:73:d6:89:
                    5b:56:23:ba:58:05:2e:01:24:d9:b6:7c:99:f8:b1:
                    78:5c:09:dc:f4:53:c9:3c:22:25:5d:95:18:d6:39:
                    77:ed:74:94:c9:ab:ed:b2:49:eb:10:c9:6c:a2:a5:
                    3c:e7:79:8a:ab:99:e6:d3:20:0e:79:5a:e0:0b:a2:
                    b4:27:c1:45:04:75:43:db:5c:bf:03:16:ae:a4:bb:
                    19:03:23:f0:fa:d1:3a:d5:97:fa:31:bd:3d:40:af:
                    9c:14:82:0b:70:5f:95:9b:6f:f7:4e:80:f8:e7:6f:
                    a2:fd:f2:17:19:49:1f:74:4f:2e:70:a4:4d:34:e1:
                    cb:94:e4:79:3a:96:ae:d9:b6:f2:d6:b1:f1:04:f7:
                    0a:8f:26:23:eb:c9:3c:29:6c:08:bb:43:b9:dd:38:
                    9e:f9:01:d0:37:d9:df:fd:b4:57:d4:ee:50:f7:07:
                    52:82:fc:5b:5b:18:18:7c:c4:b8:f7:bf:00:e8:bc:
                    a5:61:d2:39:ce:68:2c:52:49:aa:52:cb:52:63:8f:
                    84:a9:00:1a:7b:96:1a:72:47:c6:28:e2:ae:b3:2d:
                    27:f1:1e:26:0e:8e:11:87:41:3c:2c:d6:8e:2f:8a:
                    47:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:44:8F:09:40:F9:58:16:A7:8F:1F:BC:B9:C1:10:07:8C:E2:73:53
            X509v3 Authority Key Identifier:
                keyid:17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e0:c5:8e:46:62:7d:9d:19:fb:bc:4e:44:ef:33:db:9b:82:
         d0:cf:d8:47:6b:b7:aa:87:d0:96:d9:92:a6:1c:75:44:13:8e:
         ad:af:28:f3:8d:d6:04:8c:68:14:cc:e6:7d:4e:be:5d:7f:e0:
         76:39:a6:1e:cf:34:c0:21:8d:0e:e7:80:49:05:83:64:8c:21:
         2d:f7:b4:53:5f:36:23:36:f3:29:1c:83:51:26:b4:55:2a:03:
         73:6b:f3:37:7d:01:f2:e5:15:e2:e9:d1:e9:0f:4e:83:a3:74:
         85:32:54:bd:90:5b:92:40:d0:f8:1a:3c:ad:62:7d:3e:34:f7:
         ac:bc:ad:60:07:bf:09:3d:3f:b6:09:60:35:e3:1d:87:9f:bc:
         4e:ca:ee:fe:64:21:e8:ba:55:05:50:7a:39:74:4c:bc:16:dc:
         e8:31:38:25:11:cd:8a:40:93:89:d3:56:1d:4b:3d:8a:70:9f:
         6b:44:65:6c:57:a8:d8:b0:0d:ff:a7:11:73:60:29:f1:0f:9c:
         c9:0c:ca:fa:ca:9c:6f:a8:be:0c:99:e9:64:14:e3:bc:8b:bb:
         fc:9b:de:d9:dc:2c:05:92:29:27:d2:8d:3e:ae:71:f1:da:7b:
         26:f7:89:17:66:c5:8b:e7:09:b4:d3:1b:82:f8:42:06:a8:67:
         cf:40:41:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:30:20 2025 by rpki-client