Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
File:                     aVxTfSZW203Qw8Mv6YGzx3FEPls.mft (raw, json)
Hash identifier:          edpcUelNO538kZwvRbO81M1oVSTi5KYYniIvg7LhMhA=
Subject key identifier:   FB:52:F8:4B:6A:CF:5B:80:56:0A:CF:09:48:8D:82:42:E1:7B:82:19
Authority key identifier: 69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
Certificate issuer:       /CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Certificate serial:       01964D4725EE30D48D009CFBAEFB32B59D35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
Manifest number:          0C16
Signing time:             Sat 19 Apr 2025 09:00:30 +0000
Manifest this update:     Sat 19 Apr 2025 09:00:30 +0000
Manifest next update:     Sun 20 Apr 2025 09:00:30 +0000
Files and hashes:         1: Hk8OntQ5zqlTFn040DQPSldzYiE.roa (hash: KP+8WLsncYNj0fRydYrCKf8Ah12qAHLXgrBdfpvlTN0=)
                          2: aVxTfSZW203Qw8Mv6YGzx3FEPls.crl (hash: 0vT90/v/HE2QGB8BA6eFXYVT0+QLRgJQLajENBFlEHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:47:25:ee:30:d4:8d:00:9c:fb:ae:fb:32:b5:9d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
        Validity
            Not Before: Apr 19 09:00:30 2025 GMT
            Not After : Apr 20 09:00:30 2025 GMT
        Subject: CN=fb52f84b6acf5b80560acf09488d8242e17b8219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:44:58:f5:1a:0a:8f:29:65:69:98:44:95:60:
                    79:d6:a8:03:dd:c5:8c:58:55:c5:22:cc:c9:de:fb:
                    62:b2:70:2d:00:2d:87:15:db:39:c2:2b:3e:76:ff:
                    71:d0:b3:9c:d5:5c:8c:98:2a:22:77:04:d7:43:ed:
                    87:de:fa:d7:3e:c7:7b:55:43:34:af:c2:96:5e:3c:
                    18:cf:c0:80:de:d5:46:8c:bb:9c:5a:89:a6:76:ce:
                    66:e3:7a:d9:96:b2:ff:06:51:8a:05:ce:dd:9e:cb:
                    97:54:9d:11:6a:c2:b8:f9:31:4f:7d:fc:7b:7d:36:
                    f3:f1:97:96:b0:75:bb:58:96:a8:a1:24:b2:67:1c:
                    df:b9:14:a9:a9:2d:2a:ff:46:25:65:3d:d4:01:49:
                    b7:2f:5e:5a:91:14:35:71:24:25:29:e0:1a:5a:51:
                    5e:05:42:61:10:01:66:af:4b:8a:28:87:02:f9:a4:
                    80:6d:4d:08:c1:a4:77:be:48:d3:55:91:e7:cc:c9:
                    58:ba:bd:62:43:e6:8e:b3:11:bc:59:3c:ad:8b:e1:
                    69:35:af:33:d5:37:80:d9:44:6e:0f:3b:46:c9:96:
                    0d:af:f3:d6:1d:93:a6:4e:df:dc:ac:5a:ce:08:67:
                    e3:b2:72:86:7f:7a:5c:b1:2f:18:fb:2d:45:a2:7c:
                    aa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:52:F8:4B:6A:CF:5B:80:56:0A:CF:09:48:8D:82:42:E1:7B:82:19
            X509v3 Authority Key Identifier:
                keyid:69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:91:fb:54:3f:1a:94:d0:7f:86:ec:2c:29:78:4c:a4:02:fc:
         4e:59:89:d8:86:e6:51:45:20:2c:4a:fe:aa:40:b8:9b:22:5f:
         96:8e:35:3b:03:65:d9:92:98:c1:94:89:e7:be:0a:64:9f:4c:
         44:70:34:b8:7a:f3:f4:19:39:60:13:94:11:45:67:f6:ac:17:
         3a:33:3f:5b:b6:b7:46:1b:4a:b7:4d:9c:95:8e:58:b3:57:c0:
         70:9c:17:87:ca:14:03:cb:e6:ae:ba:9b:a2:6f:52:9a:09:23:
         90:2e:5e:02:4c:18:f1:48:6e:fd:31:9e:b0:2a:20:8a:1c:64:
         12:a3:e1:09:ca:23:4b:fb:03:85:be:c1:ec:93:14:56:60:b0:
         ba:17:40:84:6e:81:7e:e2:b6:38:1d:f8:c3:6f:33:7e:44:85:
         6a:3e:ef:9a:8d:db:a2:21:55:22:70:9c:ad:51:09:2d:c3:91:
         92:39:c3:47:44:cd:67:85:a7:e4:db:10:f4:b7:d3:6b:f7:cc:
         b4:0f:fe:80:e8:03:ac:01:f0:bc:85:64:ef:43:2c:40:d2:63:
         77:4b:3a:bb:b5:ca:bd:72:8e:b2:0b:1e:72:ef:b4:99:5c:82:
         82:e7:4b:07:1d:f7:f8:34:3b:a3:df:59:1c:bb:50:e6:af:65:
         8a:74:55:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:47 2025 by rpki-client