Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
File:                     femPSOmIeQ0OB5NTeUG0E9LmAwY.mft (raw, json)
Hash identifier:          s9nXDv0Ywv02pEXwQCKbevJbptl73yzRJ+5TdSzWX4A=
Subject key identifier:   5F:4B:74:4C:E2:6D:AE:40:F0:04:C5:FE:FA:EE:00:02:B7:8D:B3:EE
Authority key identifier: 7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
Certificate issuer:       /CN=7de98f48e988790d0e0793537941b413d2e60306
Certificate serial:       01964EC7FE66A2C9B494ECFE0B441597F8EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
Manifest number:          1500
Signing time:             Sat 19 Apr 2025 16:00:51 +0000
Manifest this update:     Sat 19 Apr 2025 16:00:51 +0000
Manifest next update:     Sun 20 Apr 2025 16:00:51 +0000
Files and hashes:         1: L1sOGUpC5vf81IjAWo9yjqNWdoc.roa (hash: qAhDSU9NhG7HL0VsMDn5fszVhTOJb2FN5MRmMe3Ne7s=)
                          2: VGUAWcdE_uWGBzoEXuUWxSaeofE.roa (hash: ldYqKdQLO9amLNP7UTQrP4DX3OqZoopvjfltJwygHwg=)
                          3: akdoIFbGGphPsOua6vOPfJFx_n8.roa (hash: r5YdXtt32oyVRXJKLiujx5qPKEB9WTaTcVsGTt7qfvg=)
                          4: femPSOmIeQ0OB5NTeUG0E9LmAwY.crl (hash: cZodpuzDJEmWeuL72ooV9n0FutT3XtAlGPDOVfFLcsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:c7:fe:66:a2:c9:b4:94:ec:fe:0b:44:15:97:f8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7de98f48e988790d0e0793537941b413d2e60306
        Validity
            Not Before: Apr 19 16:00:51 2025 GMT
            Not After : Apr 20 16:00:51 2025 GMT
        Subject: CN=5f4b744ce26dae40f004c5fefaee0002b78db3ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7c:75:f5:1e:78:46:f4:e6:44:90:19:fa:ad:
                    02:bb:fd:f6:fe:05:fd:c1:03:08:14:f5:6d:a0:58:
                    16:fe:87:9c:76:f2:7a:cb:dd:7a:8c:86:d6:a4:19:
                    db:f3:eb:f6:18:03:33:d0:b3:22:e8:b4:7a:4c:f8:
                    9e:23:22:a3:3d:ab:de:3a:57:c7:f1:8b:3a:3b:c2:
                    6b:c3:8c:39:53:6d:db:5b:eb:f7:c3:8f:91:66:e1:
                    3b:80:a2:d3:d4:b7:52:03:2e:e4:87:e1:73:a1:4b:
                    c1:9a:8b:16:e4:03:b2:52:5e:c4:e3:38:69:e3:ee:
                    e1:93:a1:b6:77:a4:e6:3d:ee:0f:79:fb:63:c6:2f:
                    06:2a:51:89:ae:56:52:27:25:c7:3a:9a:33:6f:c5:
                    ad:f3:1b:8a:2d:4c:dc:bc:03:a0:f3:d7:43:4d:6d:
                    25:d8:a9:7b:d0:5a:26:94:d9:4b:64:27:10:8a:9c:
                    cc:7c:78:af:72:f4:63:c3:ef:21:34:6e:d2:15:77:
                    a6:74:af:23:73:e8:2d:f1:02:df:f8:ed:65:92:9d:
                    a7:9d:80:f5:11:97:38:4c:08:46:1f:3a:79:40:44:
                    02:de:19:3e:88:59:bb:8b:27:e7:f5:33:c4:12:94:
                    3f:85:35:85:2b:cd:da:26:65:08:e8:e6:2e:e6:ed:
                    36:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4B:74:4C:E2:6D:AE:40:F0:04:C5:FE:FA:EE:00:02:B7:8D:B3:EE
            X509v3 Authority Key Identifier:
                keyid:7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f3:17:c3:e9:d6:a1:9a:02:2d:a5:61:28:86:4a:64:b0:73:
         21:ea:91:eb:54:7f:43:f8:58:25:dc:9f:67:4e:ab:d5:fd:f9:
         9a:70:e9:6f:d6:af:1a:e9:64:0a:61:bb:c4:f4:54:c9:bc:53:
         86:e9:25:31:92:94:cc:39:f1:25:d7:2c:dd:ed:89:a2:d6:cc:
         34:b2:38:10:19:9a:76:5b:8e:6f:b2:16:f0:55:6e:28:81:97:
         ad:b8:10:a6:fd:8a:d2:bb:89:c1:c7:4c:16:d9:c7:48:32:0c:
         43:9d:fc:ff:dd:99:f9:fc:74:ac:03:bf:ce:e5:6f:21:91:3d:
         cd:70:cd:88:08:09:f3:20:6e:75:11:34:b1:3e:1d:e9:29:5b:
         a9:36:d1:78:b4:6e:6f:0a:5b:17:c9:fd:1b:ad:33:87:17:71:
         ae:0d:45:3a:09:71:28:14:78:17:56:ef:9a:8e:5f:d4:4c:25:
         76:07:d9:91:dd:28:19:44:b8:ea:a3:df:90:36:32:d1:a3:06:
         8f:8e:2c:92:0f:0f:9c:f6:95:88:ef:bf:e8:a2:5a:b6:36:6d:
         5e:e8:fc:8b:44:e2:81:ce:43:f3:66:ac:48:7f:00:03:9d:8e:
         fe:f0:c4:80:b4:71:59:aa:ee:e1:4c:d7:0a:51:9d:2c:14:cd:
         28:ac:87:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:37:16 2025 by rpki-client