Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
File:                     F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft (raw, json)
Hash identifier:          O8yvbsC22NBdt4wCp098stCov3srcPMjIXbk7heAv50=
Subject key identifier:   03:E9:D6:ED:0F:85:AF:FD:80:98:D9:AA:E2:DD:74:50:67:32:80:08
Authority key identifier: 17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99
Certificate issuer:       /CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
Certificate serial:       019628964D09B10C888705FF71820EE7C669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
Manifest number:          1026
Signing time:             Sat 12 Apr 2025 06:01:00 +0000
Manifest this update:     Sat 12 Apr 2025 06:01:00 +0000
Manifest next update:     Sun 13 Apr 2025 06:01:00 +0000
Files and hashes:         1: F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl (hash: Xz4RoYMI6e7tOTf30shgfXPLPvNUDkIoSCMy4IC9W0M=)
                          2: HBsNTRQXWcPQbzWUzkWwFIJ-NiY.roa (hash: 8k01+u0bD23piBX5SKFalRiJFYskfuHtxEUxOGIwUkM=)
                          3: fGbepzb9A-L4azmxjWxp1naTF6A.roa (hash: YEQd3tPPpxJq6x0hqnOfDaa3PQq/39+zTmClKwCJDxI=)
                          4: i5Z-UkQ8_GCMdTDvdRVzZJd1s3E.roa (hash: hFp0HQZXTf6e9rwGzdmb+2RH6Ma6X1h19nbiCrFmx6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 06:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:28:96:4d:09:b1:0c:88:87:05:ff:71:82:0e:e7:c6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
        Validity
            Not Before: Apr 12 06:01:00 2025 GMT
            Not After : Apr 13 06:01:00 2025 GMT
        Subject: CN=03e9d6ed0f85affd8098d9aae2dd745067328008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fd:89:8c:2f:36:13:b9:dd:54:c7:ff:18:85:
                    e5:96:20:f8:bd:ad:64:1c:21:75:57:17:47:59:c9:
                    00:0b:66:54:16:d6:37:4d:e5:92:59:39:80:55:99:
                    68:09:52:33:d1:f6:7f:c0:ae:04:c3:a4:6a:df:1b:
                    ca:2f:00:a4:e9:5a:f6:bc:bb:98:f9:51:de:3a:43:
                    01:1a:1e:02:24:bb:0c:dc:bd:3b:2f:d1:86:df:80:
                    73:7c:68:35:46:78:74:62:da:41:a1:7e:fc:e0:15:
                    ef:57:60:e5:34:eb:33:17:e8:b8:dc:e3:86:5f:24:
                    a0:5f:8d:45:f1:2f:4c:7b:aa:92:dd:a9:4a:6b:23:
                    d5:d0:e6:25:25:b4:50:58:70:b3:11:6e:17:de:30:
                    b1:83:17:c3:12:0f:76:28:87:bc:b9:cf:2e:c1:10:
                    78:b3:ee:3a:20:fe:89:a4:21:b3:8e:d6:6e:a1:f0:
                    f5:e2:b9:d4:65:ab:88:40:67:2d:f8:91:2f:cb:45:
                    75:66:3e:fc:e2:47:33:a9:80:3e:d8:1e:e7:5a:60:
                    11:e3:12:60:4b:0c:89:9e:15:1e:15:2e:52:d9:74:
                    96:33:7b:fb:a3:24:2b:6a:65:3b:ec:d4:e7:63:22:
                    e1:c7:ac:58:e2:4f:c6:0f:83:e6:f8:5e:dd:17:64:
                    4d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E9:D6:ED:0F:85:AF:FD:80:98:D9:AA:E2:DD:74:50:67:32:80:08
            X509v3 Authority Key Identifier:
                keyid:17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b1:b6:46:55:af:bd:1f:20:c4:4f:26:18:ac:36:b6:41:3c:
         6f:44:49:4a:6f:17:d3:2e:d6:63:f5:be:ac:58:ea:42:e2:d5:
         93:2a:34:a7:9a:a6:93:15:1b:11:43:5b:13:db:14:d4:16:78:
         ad:d6:33:63:2e:1f:d4:19:d3:31:a1:3a:ea:8a:e3:e7:5f:e2:
         2b:46:ed:ad:f6:ac:05:cc:97:a2:c3:53:17:99:07:97:36:10:
         32:d5:58:40:ea:24:f1:ae:be:6f:9f:66:80:ed:a1:ab:93:e4:
         52:50:4a:b3:8a:51:c9:9b:44:0b:9c:f1:e2:e0:b1:ea:8b:06:
         29:63:5f:4a:b8:1e:64:f5:9e:62:e3:c4:fa:ab:ee:5a:fa:dc:
         8a:af:be:45:f4:f0:2f:57:0c:6e:d5:bc:4b:6d:73:cd:a0:12:
         bc:8a:d4:2b:9c:ac:ad:d4:cb:8d:f3:a9:2b:da:77:56:5a:26:
         bd:81:a5:b1:0b:50:b6:fa:ae:a9:f2:11:79:ce:0d:77:3b:57:
         15:b9:c9:16:96:1d:f4:7f:1e:f2:99:ca:ed:d7:a1:0b:52:cf:
         f7:e4:5d:a3:1b:35:58:03:6a:d6:35:b1:55:1f:8d:b3:e5:5c:
         b0:8b:84:6a:05:0c:26:91:f2:d4:f4:c8:82:41:0f:46:14:29:
         e7:df:fd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:26:04 2025 by rpki-client