Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File:                     1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier:          gj3Y1gK1Ahu9OMcOXbawtGGPmYaeTepkrf79WReSyyY=
Subject key identifier:   DE:4F:78:94:D6:7E:F8:79:9C:61:91:69:0B:62:70:35:FE:25:FB:27
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer:       /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial:       0196015236083C8908DD5DB1897587C619AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number:          14DE
Signing time:             Fri 04 Apr 2025 15:01:27 +0000
Manifest this update:     Fri 04 Apr 2025 15:01:27 +0000
Manifest next update:     Sat 05 Apr 2025 15:01:27 +0000
Files and hashes:         1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: SGKJsk3mwsR2pM4/6gIoJQ6hTgAad8IeeQL46XJWkqw=)
                          2: 1-vIuocsySS4hCLwPwzSGGi0Y9tc.roa (hash: +g5xAqCWTvxo7PyMWD8c44r3EF7O21NmsWOjSdPveho=)
                          3: 6xCL5BtIX0Zw-bEyK4PbFZQ3IoU.roa (hash: nI7BiO9oHKEpbeXY5Oxc7XDGorODwyRSr7ofWs5lz2E=)
                          4: CCa8r2qpCvCDgqqDcfo4PuokNhg.roa (hash: kaZQfZ66nJ9UAy07CUOVheGM2eaFszN0P5WDSIi6z7o=)
                          5: L_Dg0on8d5LaF_HjlpEXS7IQZ4o.roa (hash: hPCKAEOYOgu3sLuyZtqWs1ysCg/phNwXs4ZElEe0znQ=)
                          6: VLB7zCgm9pvaqKu6mzLINMfkozA.roa (hash: 47IXsdsMymeSm5xy4aWnRGiTVKD1XHMeiXkhj2C3NVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 10:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:01:52:36:08:3c:89:08:dd:5d:b1:89:75:87:c6:19:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
        Validity
            Not Before: Apr  4 15:01:27 2025 GMT
            Not After : Apr  5 15:01:27 2025 GMT
        Subject: CN=de4f7894d67ef8799c6191690b627035fe25fb27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d6:13:74:35:5f:d9:ce:6e:37:db:18:d0:77:
                    9c:cf:db:8d:cc:cc:f3:6e:3d:27:5d:2e:91:88:26:
                    c5:0f:65:1a:d7:99:0c:13:56:cd:6f:91:14:9d:78:
                    49:5d:08:93:92:ab:0d:58:ac:f2:02:0f:d0:21:16:
                    f6:57:5a:db:d3:01:4f:88:f6:86:90:eb:eb:d7:b6:
                    66:91:30:39:a2:be:97:f2:07:7a:12:82:33:4a:84:
                    74:a6:f5:64:cd:f6:0b:22:06:31:2d:2c:2d:3b:64:
                    fa:bf:66:6c:53:87:5f:6d:f4:dd:e2:3e:38:f7:28:
                    2d:0a:77:72:a5:20:a9:f7:1f:f8:69:3b:6b:36:79:
                    76:9a:b6:5b:fc:92:f8:ca:8b:47:ca:69:18:a0:6e:
                    c0:be:8d:b5:66:77:4f:f1:91:da:2f:1a:df:b3:69:
                    e6:d8:a0:8a:23:a5:cc:da:5c:63:34:9d:7e:43:e8:
                    c5:c2:5b:f6:a5:ed:01:1a:aa:25:3a:1d:c6:04:5f:
                    20:a4:9c:12:d8:d5:77:84:d7:44:ea:e0:6a:3d:29:
                    27:78:86:55:03:b8:16:76:ba:f2:f7:d4:84:ef:26:
                    f5:fd:9f:a8:b4:de:dc:0a:63:3b:06:e8:b4:83:e4:
                    fb:c2:d8:fc:67:ca:ea:e3:1e:04:7c:9b:e0:95:9e:
                    e5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4F:78:94:D6:7E:F8:79:9C:61:91:69:0B:62:70:35:FE:25:FB:27
            X509v3 Authority Key Identifier:
                keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:94:1d:cf:96:4d:78:e2:05:b6:e3:5e:b2:c3:25:d7:71:54:
         c3:ea:8e:da:c6:1d:ac:35:c1:e2:8a:c3:9c:17:6e:1f:c5:8f:
         cc:9e:da:ae:2b:41:cd:9f:6a:b1:cc:24:d9:32:5e:b8:8e:e5:
         23:66:9c:b3:f6:64:ff:c4:94:88:a2:c4:90:a1:ed:63:27:9f:
         66:5a:42:dd:57:c5:3b:16:11:30:8a:96:7e:26:7d:15:7a:86:
         26:42:bd:ae:ec:94:53:5f:d5:02:37:47:33:25:a4:07:fa:55:
         98:02:13:b9:e3:46:61:1e:45:27:6c:74:1a:d4:26:da:a2:6a:
         b5:df:30:b4:8c:a5:c5:31:cb:92:60:34:84:d7:65:9c:45:88:
         ae:eb:9e:cc:d4:38:14:bc:19:4a:76:d3:3c:5c:74:fb:63:b1:
         fa:c2:b0:36:dd:44:88:53:8a:c0:cc:49:c5:8f:92:fb:5c:31:
         33:dc:69:86:c8:24:5e:1b:fa:e9:fc:d5:63:a3:70:d5:df:3f:
         8f:22:d7:93:ea:07:fd:42:0b:61:27:83:00:57:f7:ed:12:12:
         f5:3c:32:1d:51:5c:94:48:25:09:2a:8e:8d:ff:21:be:d2:05:
         b9:cc:19:50:4c:57:9f:e0:06:b5:bf:35:e0:8f:64:f7:1a:2e:
         b0:0f:89:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:33 2025 by rpki-client