Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
File:                     1u7ifzwsXJ7FeArNorbrBAptJaE.mft (raw, json)
Hash identifier:          juxEb6GgXQ37lC68GVoSNacF5ELrppN74z/kGqrXVKk=
Subject key identifier:   FA:D8:E3:B8:5C:62:46:E5:3B:C8:C3:17:48:79:B1:98:74:2E:E7:A7
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Certificate issuer:       /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial:       01964D106C36D902451C7B405416AE78F9F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
Manifest number:          12DF
Signing time:             Sat 19 Apr 2025 08:00:44 +0000
Manifest this update:     Sat 19 Apr 2025 08:00:44 +0000
Manifest next update:     Sun 20 Apr 2025 08:00:44 +0000
Files and hashes:         1: 1u7ifzwsXJ7FeArNorbrBAptJaE.crl (hash: g1SruhrTE4se2Z5rOU8sELMxjDuoM+QtBX1NRw3zv/U=)
                          2: pBQcYACEJFgZkwBTNup11LKnTk8.roa (hash: Y8ti6NLIY+LJpCwKrSvXBDtmqYcWgUzXZKj2i28mql4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:10:6c:36:d9:02:45:1c:7b:40:54:16:ae:78:f9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
        Validity
            Not Before: Apr 19 08:00:44 2025 GMT
            Not After : Apr 20 08:00:44 2025 GMT
        Subject: CN=fad8e3b85c6246e53bc8c3174879b198742ee7a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6b:17:a3:28:8b:dd:aa:28:eb:cd:f9:d8:5b:
                    c9:ca:58:e2:f2:68:ed:3d:bc:91:ff:cb:8a:b8:ce:
                    5f:72:89:ee:39:d6:71:f6:59:e2:c1:a5:8d:b0:ad:
                    75:d7:f2:a4:dc:ea:cd:03:52:21:c1:1f:58:39:39:
                    da:17:29:d6:73:c8:fd:57:8e:94:0e:0e:35:d2:77:
                    c0:93:05:b2:74:f9:5d:d3:b9:6c:8a:ba:d4:d6:e6:
                    5d:fc:1c:02:43:ea:ef:86:cf:03:89:2f:3a:2c:c8:
                    9d:cd:6d:73:2e:df:ed:7d:c8:f4:5b:ce:60:f1:ff:
                    24:fb:64:de:23:f2:fe:8e:4f:d9:4b:e2:e7:94:ce:
                    00:38:20:98:41:d2:4b:c1:85:55:f3:f8:da:38:4b:
                    7c:a6:67:fe:82:ac:a1:e3:0f:53:49:cf:2c:1b:54:
                    3e:18:b0:8a:63:d4:a4:c4:17:a2:1a:47:72:92:ce:
                    bc:6d:16:8d:5a:23:75:b3:80:00:54:ad:21:13:22:
                    fe:27:88:89:ee:40:0e:ab:dd:fe:92:83:4e:d4:1f:
                    a4:4e:02:e8:fb:78:48:0d:f6:81:5e:3c:8f:26:4c:
                    16:29:8f:13:24:76:a3:70:ab:e6:8c:b8:42:41:66:
                    fe:2c:1d:91:91:b9:31:da:cf:8c:fe:85:94:61:3b:
                    3a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D8:E3:B8:5C:62:46:E5:3B:C8:C3:17:48:79:B1:98:74:2E:E7:A7
            X509v3 Authority Key Identifier:
                keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c4:da:9b:1f:56:cd:38:f5:e9:12:f4:05:a6:88:61:a3:fe:
         c3:44:87:0b:cf:c0:2d:2a:cf:49:1d:60:9e:35:cb:e0:b3:f4:
         87:20:5a:ca:c6:bf:86:61:e2:a6:d8:95:ab:70:41:d4:4d:4d:
         ff:b9:d2:23:13:bd:d9:a2:01:0d:b4:e6:bc:57:52:50:a6:e2:
         ef:a4:bc:0c:01:5e:27:0b:70:78:00:99:e1:1e:f0:18:30:d4:
         af:af:53:a1:0a:53:0b:eb:e3:4d:39:3c:92:fc:90:b3:7d:0c:
         c9:6f:da:33:4b:c1:7e:8e:a4:2a:61:32:fb:a6:2d:8b:77:2c:
         42:02:c1:9b:55:a5:c3:93:ae:53:44:cb:63:20:80:f7:63:83:
         3a:64:53:89:45:67:c2:c0:c3:2a:3d:2f:14:f3:70:03:f7:8a:
         99:51:fd:12:27:09:eb:e5:ca:05:d8:02:c8:31:de:c7:b2:07:
         a6:7f:e6:33:54:28:b6:43:50:4b:ef:ee:04:1c:aa:43:22:37:
         31:d2:e4:0a:da:c3:60:36:db:20:81:15:46:cf:e5:29:2d:a4:
         61:db:69:9a:36:cc:df:16:c6:20:93:82:2c:fe:de:82:32:6c:
         64:82:00:b9:e7:35:e9:0f:e1:d9:a2:8b:6c:33:12:3a:7c:51:
         ce:dd:64:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:16:52 2025 by rpki-client