Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
File:                     mFrmxZw15GA4fa68-4Zvih67NoY.mft (raw, json)
Hash identifier:          QPPCnOSsDdBfP/7vkhhVtMLeYnxiz5MB9fwDytfjnM4=
Subject key identifier:   05:A7:45:BF:6F:15:78:4C:9C:00:08:99:1E:0E:1F:F4:F8:5D:F2:F1
Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
Certificate issuer:       /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Certificate serial:       019647B3F5875B1D8F09270C074BE28B54DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
Manifest number:          14F8
Signing time:             Fri 18 Apr 2025 07:01:38 +0000
Manifest this update:     Fri 18 Apr 2025 07:01:38 +0000
Manifest next update:     Sat 19 Apr 2025 07:01:38 +0000
Files and hashes:         1: 5qz81vMuyN5eYJ6zyRRelyT4XK0.roa (hash: 0LizoQ7sooXP56qjV8fYtL2cZDWoYFEUv70QcevbSss=)
                          2: Oo8Lhh4RlCa7xttIyBwx5LDEUoc.roa (hash: wrOx7qjHfGVS+J5guJXeAV7Who7QhhesA0WvqwwUSt0=)
                          3: bred8jKnNPms1BCagsD8kMQFkWQ.roa (hash: VvTTWuUY3ocSZzeJdjIHCKMe7BquJDgv+iCTQ7eJzuc=)
                          4: mFrmxZw15GA4fa68-4Zvih67NoY.crl (hash: bT/S+nT51DfFgw3QxE6qQCjNAlghmyPJDB4oyIfvbWQ=)
                          5: orjkFnmOp2fkt5BOjfHTUe1SFM8.roa (hash: VR0THqWhrxUSaUWx/H66JHdMtnv+5/NgmHEPJq0RqoM=)
                          6: vHN5MXtzccXdspQhStY4Z57CoPM.roa (hash: 4HXRwfo/a7HGgHSGpok7A4ldu5noCeEQDTLX8aICufE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 07:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:47:b3:f5:87:5b:1d:8f:09:27:0c:07:4b:e2:8b:54:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
        Validity
            Not Before: Apr 18 07:01:38 2025 GMT
            Not After : Apr 19 07:01:38 2025 GMT
        Subject: CN=05a745bf6f15784c9c0008991e0e1ff4f85df2f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:17:79:38:fc:bc:00:54:8a:20:78:54:95:94:
                    6e:65:59:42:d3:d6:19:22:62:92:8d:c0:ed:1d:a4:
                    fc:ef:9b:88:1a:a4:82:6a:90:cc:e3:b1:42:b1:57:
                    d9:8c:8a:92:c8:7b:bd:1c:65:cc:71:32:dc:49:f8:
                    0a:62:97:cf:09:4a:ed:d8:e5:48:28:49:f6:6a:75:
                    ff:d4:4d:d2:f2:77:51:f9:98:bb:61:43:55:b9:b9:
                    15:95:e6:10:19:45:ad:e9:7a:5f:ed:92:ac:78:be:
                    b2:d9:b8:a1:af:a1:30:29:db:77:82:d5:22:4f:19:
                    18:bd:0c:16:63:bd:92:4e:1b:d7:08:5b:f3:a8:ba:
                    bf:d8:5e:8b:e9:24:36:5d:8d:7c:6f:d8:14:2b:f1:
                    97:ac:fd:51:35:30:47:a4:94:be:23:f6:61:cb:1e:
                    fe:49:ed:7d:f6:a4:27:56:24:76:dd:a8:a5:28:98:
                    5d:b9:0b:96:79:f5:c9:f4:f8:c8:4a:cb:0d:61:76:
                    09:eb:66:3b:7f:05:e5:1e:e4:20:2e:66:bf:0d:3a:
                    07:83:e0:8a:b9:78:d0:3f:af:2a:ae:0c:89:54:7b:
                    7c:27:c0:1c:60:b3:ca:2b:5c:1f:5d:ea:e1:5c:01:
                    3b:bf:55:23:56:5a:95:39:99:0c:29:57:17:f0:bf:
                    61:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A7:45:BF:6F:15:78:4C:9C:00:08:99:1E:0E:1F:F4:F8:5D:F2:F1
            X509v3 Authority Key Identifier:
                keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:35:b7:3e:1e:05:c1:75:7f:f3:d3:fd:7e:e2:99:0b:21:df:
         13:4f:ee:49:65:55:5d:5c:d8:20:03:8f:e8:a8:28:69:76:61:
         25:c2:f2:6d:a4:09:49:0a:2d:56:4c:bb:a5:09:a1:4a:d1:ba:
         9f:70:ba:99:79:3e:26:26:b6:1d:e2:a7:ec:cf:72:bc:d8:02:
         c0:25:a9:74:89:66:5f:ad:52:c2:66:c2:ad:13:ca:4c:1b:f2:
         ba:7f:43:2c:20:c0:0e:bf:96:65:aa:85:9d:78:39:61:32:be:
         b7:c7:69:b3:98:51:92:52:78:ce:fe:78:aa:a5:d8:50:1f:b2:
         d2:9e:3e:a3:ee:d4:60:b6:0c:2a:b7:d2:1f:8e:eb:54:d5:92:
         52:88:f1:b6:08:12:64:45:c0:3a:28:3f:33:97:02:d8:b0:0f:
         72:aa:d5:f8:70:ab:6a:af:7f:fc:f8:92:96:3b:95:0a:66:70:
         4b:42:02:56:9c:37:c7:e4:97:f9:fe:70:93:6a:88:67:c3:dd:
         2e:24:17:2e:0e:b0:a0:4a:09:09:29:d1:8d:56:14:6f:e1:46:
         81:62:66:0f:9c:c4:e0:68:2f:b2:f5:84:f0:ed:92:70:9f:3c:
         dd:76:3d:af:08:44:2a:63:00:f9:db:ba:0a:c7:d4:8d:97:7e:
         13:0a:17:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 17:02:24 2025 by rpki-client