Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
File:                     1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft (raw, json)
Hash identifier:          +0DDwEDSIb7zwdtrsp7JRQo/20oZC1n1LWOWyTkItb0=
Subject key identifier:   96:B0:EE:0E:22:E7:E1:E2:88:29:0A:17:4C:03:E1:94:2D:41:75:1E
Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
Certificate issuer:       /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Certificate serial:       01964D4752407C6368593AF2258245769CB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
Manifest number:          14FA
Signing time:             Sat 19 Apr 2025 09:00:41 +0000
Manifest this update:     Sat 19 Apr 2025 09:00:41 +0000
Manifest next update:     Sun 20 Apr 2025 09:00:41 +0000
Files and hashes:         1: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl (hash: 3eKUQf/xB2KUih/F0ByllQA9dcVyx6Or+F4kB6ZU4Iw=)
                          2: uSVVlqHZvV5YEhwqY0z-9BTB1zI.roa (hash: AWa2RaP+hTglbbgDdOdlnFQ+mgvTTY8nknDwYB/qQE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:47:52:40:7c:63:68:59:3a:f2:25:82:45:76:9c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
        Validity
            Not Before: Apr 19 09:00:41 2025 GMT
            Not After : Apr 20 09:00:41 2025 GMT
        Subject: CN=96b0ee0e22e7e1e288290a174c03e1942d41751e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:28:a3:87:a5:be:f9:49:1b:a8:a8:c5:08:37:
                    2f:a9:d0:85:c1:ac:59:6c:cb:59:3b:a4:31:fd:c6:
                    92:a7:36:65:23:a4:ea:95:1f:d2:48:42:1d:43:ec:
                    70:3a:79:79:ef:7e:33:f9:82:f9:70:46:c4:81:0d:
                    94:8a:e5:b0:9b:98:c4:95:4f:74:c0:44:c2:da:7e:
                    51:cc:d1:f1:95:65:99:f1:14:98:0b:b3:95:48:02:
                    09:a5:ec:c4:6b:0d:20:40:03:3c:83:ba:35:54:52:
                    f7:ed:ee:0a:eb:94:f9:25:e9:8b:21:ed:7d:2c:10:
                    43:59:9c:3a:2d:a5:ad:f7:15:0b:e2:52:ac:a4:3f:
                    dd:6f:82:9b:9e:c6:6c:f7:cc:0d:94:a9:d4:99:b3:
                    b6:29:a3:e0:bb:c4:02:27:ad:dc:b6:20:df:5d:2a:
                    0e:34:77:45:07:ee:10:00:25:1f:0c:90:4c:64:09:
                    75:9f:99:95:37:88:32:61:f3:f7:9c:1a:db:c6:0f:
                    03:84:ae:1b:61:2a:d4:47:b0:fd:62:9a:58:2f:4d:
                    4f:95:63:fe:c4:8f:8b:b9:64:e2:0e:6a:34:7c:6e:
                    ed:60:b7:f4:6d:49:00:27:8c:5c:b0:9c:e5:04:03:
                    d3:78:6e:cd:1f:ee:fc:db:14:10:49:1c:38:96:04:
                    35:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B0:EE:0E:22:E7:E1:E2:88:29:0A:17:4C:03:E1:94:2D:41:75:1E
            X509v3 Authority Key Identifier:
                keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:d2:3a:a0:23:4a:e9:be:c6:2b:38:0f:2d:e2:d0:82:b1:dd:
         57:78:8d:0e:41:be:89:e5:5f:4e:9a:0c:7c:11:20:f8:ec:6b:
         68:21:37:2b:88:79:69:f2:2f:72:75:57:99:58:9b:91:e7:0d:
         f4:6e:e0:77:dc:2d:d4:3f:08:f4:72:31:10:fa:26:c3:7e:f3:
         5c:24:86:de:3a:4a:76:bf:bd:7b:52:3c:ca:34:a7:e9:95:c7:
         de:01:a9:0a:25:5d:95:57:c6:fb:8b:82:4f:a4:96:e7:63:4e:
         4a:52:49:a2:1f:9a:9e:36:49:e7:1f:ac:6b:ff:44:80:aa:0c:
         61:d1:9e:d8:b9:ed:c7:aa:6c:fc:a0:4e:03:eb:2e:73:29:06:
         0d:e4:e9:19:70:14:df:8f:29:d0:bc:35:60:b4:2e:72:d0:5a:
         4c:41:4b:83:c1:01:25:95:cb:bf:a6:20:32:66:0b:29:77:10:
         3e:e7:76:d9:58:68:cd:c2:70:6d:2a:d5:4d:51:d1:ae:ca:7d:
         0f:99:c7:58:9e:77:ff:72:89:c0:71:7e:be:5e:31:16:83:21:
         85:09:aa:d8:f5:db:4f:38:c2:6c:1d:93:58:a9:f9:5e:6c:68:
         f3:f6:e1:fe:d8:98:96:7a:bc:f7:40:c6:f1:1b:33:c4:6c:fe:
         18:5a:8e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:38:53 2025 by rpki-client