Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft
File:                     fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft (raw, json)
Hash identifier:          yYHYjBKS1WMUmh1tHOKVu3pHDlLPdMpn/ENMDbT7+AI=
Subject key identifier:   A8:55:9C:DD:8D:15:D2:A6:8B:3E:A3:E4:CB:2A:B8:C4:5B:06:FB:B1
Authority key identifier: 7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59
Certificate issuer:       /CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359
Certificate serial:       01963275AC793099A3BC5095051B142FCC5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft
Manifest number:          090D
Signing time:             Mon 14 Apr 2025 04:01:34 +0000
Manifest this update:     Mon 14 Apr 2025 04:01:34 +0000
Manifest next update:     Tue 15 Apr 2025 04:01:34 +0000
Files and hashes:         1: 592QE4e5wcWss3bcgpe0118a4o8.roa (hash: yC3/nLVWBZfIP94drGS0GWcqBe2jUht68itw5CKk0vc=)
                          2: J06OgSRvPXWRTEncuFxsKEeSz8k.roa (hash: q4U3gprZEclQCDc7ah7VpmWTw4NUG0NXMbh/c06uR5g=)
                          3: JGBf-HSBUO7hgbq8X1OnBUjDyVQ.roa (hash: MtZT8bLkQTUgeFwypbcTgOQkoRE3SGspSU9gsC7WWCE=)
                          4: fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl (hash: i90kx9Dq7Fg8fKXGsTWZt+8+53TwOsQ4/2wtlw1I6Ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Apr 2025 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:32:75:ac:79:30:99:a3:bc:50:95:05:1b:14:2f:cc:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359
        Validity
            Not Before: Apr 14 04:01:34 2025 GMT
            Not After : Apr 15 04:01:34 2025 GMT
        Subject: CN=a8559cdd8d15d2a68b3ea3e4cb2ab8c45b06fbb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e3:b7:8a:6d:b8:51:f3:98:3e:23:0a:1b:1c:
                    41:10:af:a7:f9:47:4d:b1:43:dc:fe:20:c5:1f:05:
                    db:92:60:ab:b5:9d:b8:a4:df:ad:fe:35:09:e7:bb:
                    ca:ec:1c:d4:98:55:86:bb:3e:c6:97:e1:0a:e6:d7:
                    c9:be:fe:67:93:68:6a:4a:ff:93:fa:f0:de:37:c7:
                    8a:42:76:37:0b:1a:23:98:de:a8:15:4f:45:36:c6:
                    f3:5a:73:a1:75:bf:d5:24:b7:33:3a:5e:15:bf:14:
                    64:31:9a:17:2f:ad:74:2f:53:8c:95:dc:63:d9:5c:
                    16:01:0b:19:7b:43:bc:ce:77:e1:46:92:c1:40:13:
                    df:65:58:20:ea:90:ba:9f:74:f7:11:0c:01:a4:90:
                    64:41:4a:a9:60:d5:36:38:24:a2:62:b0:40:f0:1f:
                    63:86:69:1e:00:6d:c0:06:61:b3:59:0d:b6:5d:2d:
                    47:99:1a:b1:35:88:71:72:ec:6a:4f:c1:c3:be:63:
                    19:8f:80:a2:fa:82:02:91:f4:a1:ce:d1:3a:cd:97:
                    cc:a9:52:46:d9:09:4c:d5:dd:b1:76:7e:57:05:8c:
                    54:7c:1c:c0:1f:8d:1d:48:a3:9c:67:d0:73:ca:be:
                    2b:91:36:ab:8f:51:fb:20:3e:c6:87:bb:30:21:c8:
                    80:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:55:9C:DD:8D:15:D2:A6:8B:3E:A3:E4:CB:2A:B8:C4:5B:06:FB:B1
            X509v3 Authority Key Identifier:
                keyid:7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:f3:ee:39:61:5a:96:9e:f1:6f:26:ca:1f:dc:96:bb:12:09:
         87:93:b6:67:ca:3b:7f:9d:72:5b:32:bf:3f:22:84:32:78:30:
         a0:93:f2:48:dd:94:cf:c9:75:c5:f2:9a:eb:d6:23:34:0c:db:
         62:d0:12:86:47:6a:1c:3a:af:ce:d9:4d:82:1c:a0:3d:49:d1:
         55:4f:e4:85:73:cf:df:40:e7:da:16:ee:c1:a9:15:7d:ac:0d:
         7f:66:90:ca:29:77:26:90:83:87:f8:ac:69:89:e1:4b:ef:29:
         49:55:86:ed:cc:8f:a8:74:31:21:17:6c:fa:e9:da:67:48:5d:
         b7:f9:f6:e6:65:70:7b:eb:d3:9f:e7:3d:87:75:0f:eb:8b:05:
         f0:a5:e1:98:7f:3d:19:e5:c5:3e:04:a6:6b:c5:cd:c6:d6:33:
         89:5b:87:0b:b2:64:a7:36:97:32:0b:b5:e5:f5:b1:a5:58:ba:
         7f:45:39:5e:ec:1a:e5:2b:f0:fc:4f:9d:f5:e5:c0:8b:2c:11:
         ec:a3:83:84:a4:75:c2:ab:bb:ad:dd:a2:10:46:2d:0d:8b:e7:
         81:ee:ab:da:33:03:61:5c:84:40:14:6d:25:19:ba:aa:9e:61:
         1e:df:58:b9:10:82:b4:8f:c7:cb:81:81:87:6e:d2:6d:52:09:
         43:77:9d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 08:16:55 2025 by rpki-client