Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
File:                     _sTvIAvJ0n6e1_O8a1wFKS2EMro.mft (raw, json)
Hash identifier:          O6/etTu0y4G7t9+FCO5PNCY4NvTy3KRM+4MrdbvrnwA=
Subject key identifier:   C7:B3:81:8E:FC:14:C0:E6:B7:25:32:B7:6A:B8:4F:71:12:B3:48:51
Authority key identifier: FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
Certificate issuer:       /CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Certificate serial:       01958EF38BAB0464ECA5C58AA528F10A5D12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
Manifest number:          01B5
Signing time:             Thu 13 Mar 2025 10:01:20 +0000
Manifest this update:     Thu 13 Mar 2025 10:01:20 +0000
Manifest next update:     Fri 14 Mar 2025 10:01:20 +0000
Files and hashes:         1: A-WEqq-qnquQ-k-HUeyR2Ta7Ai0.roa (hash: ulBE+6XQU+CVKwFHEP6pOstPObSTz9LyM8DJtWKzepw=)
                          2: _sTvIAvJ0n6e1_O8a1wFKS2EMro.crl (hash: A2ZBvXBbEvR1yU9nCqejY4K+LYM/dOZaw3Kq9IObu4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 10:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8e:f3:8b:ab:04:64:ec:a5:c5:8a:a5:28:f1:0a:5d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
        Validity
            Not Before: Mar 13 10:01:20 2025 GMT
            Not After : Mar 14 10:01:20 2025 GMT
        Subject: CN=c7b3818efc14c0e6b72532b76ab84f7112b34851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:48:bc:4e:61:d9:26:61:5c:d4:4d:fa:13:d6:
                    f2:ea:da:da:bb:d8:d3:0c:a9:e2:0b:32:b7:50:51:
                    7b:52:ec:a1:99:4b:fb:1b:29:d0:c8:c7:12:0a:60:
                    f4:62:d1:64:8c:c3:20:79:4b:be:7c:6d:5f:14:20:
                    19:69:89:13:75:a6:58:70:7e:1f:3f:a8:cc:9b:75:
                    d8:91:ae:d9:7c:0a:df:77:34:e0:ad:bc:dc:b6:23:
                    9b:db:62:9d:41:cc:33:e9:a0:fb:82:63:08:f8:5a:
                    48:a2:fe:ea:db:77:ef:11:ae:10:22:ec:d9:63:83:
                    ba:e7:90:59:33:5e:00:4a:6b:8b:1b:2d:f6:0d:3f:
                    a7:91:1c:1b:53:6d:49:ad:55:55:01:b4:8d:11:21:
                    a8:0d:4f:e6:ae:0e:ce:98:07:a9:5c:cf:53:16:b5:
                    61:ee:a4:32:d4:9f:bb:4e:91:a4:b8:2d:a9:85:5b:
                    af:8c:f0:33:ee:8d:b9:4e:81:09:a0:f0:a9:f9:af:
                    c7:47:4f:8b:76:99:3a:e3:08:8f:82:fc:6a:97:75:
                    90:ec:06:ca:00:54:10:75:a9:05:87:dd:3b:26:55:
                    93:85:b5:64:ee:fd:d4:17:ff:2d:f3:c9:a3:b4:81:
                    ad:1a:42:a2:01:40:04:66:00:34:8f:a7:e6:88:59:
                    63:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B3:81:8E:FC:14:C0:E6:B7:25:32:B7:6A:B8:4F:71:12:B3:48:51
            X509v3 Authority Key Identifier:
                keyid:FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:47:ac:46:f7:83:da:8d:f0:5d:a8:df:1c:bc:4e:0e:7f:9f:
         4a:a6:b9:2e:47:5d:99:d8:0b:e8:1a:5c:a8:86:cd:90:a7:1a:
         9e:c6:d6:28:db:8f:2e:7f:62:63:eb:5b:ff:d3:73:61:3c:be:
         40:42:63:ba:aa:ee:7d:5a:c2:94:a5:ad:07:c3:d1:20:da:f0:
         85:4a:37:b3:70:92:70:0e:c2:1b:86:de:be:b6:0a:12:a0:7d:
         d1:17:96:00:11:06:38:27:69:ca:3a:93:5b:f1:76:8d:5b:dc:
         1e:91:90:db:23:8c:28:e4:80:63:cc:79:b9:1a:09:b5:cb:a4:
         cb:cb:9c:d4:23:4d:96:47:dd:7c:4d:5c:06:b9:c5:72:62:8a:
         32:ea:95:c4:62:a6:85:a7:33:b0:13:8f:3b:94:90:a6:e0:37:
         a3:db:c8:a9:4e:d6:51:65:12:14:31:e5:11:5f:51:98:20:ce:
         02:74:7b:ab:39:ed:a8:1e:bd:eb:c0:13:a4:c8:8c:c2:61:e8:
         3c:54:2b:66:ca:10:90:46:69:b4:49:4b:72:d3:ea:db:17:68:
         df:c0:02:c0:ac:c8:55:16:88:5a:7c:ac:42:3b:db:ff:7f:89:
         77:d7:5f:67:fe:0d:3b:98:d2:ad:13:05:df:fb:53:d8:bf:81:
         1c:57:9b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:30 2025 by rpki-client