Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
File:                     FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft (raw, json)
Hash identifier:          Uy4uXM4nbJor0jOeTAv7BNWaT5L+08z1VEr/Arjqa9A=
Subject key identifier:   79:AF:03:66:28:47:0F:51:88:7B:CB:84:AD:C8:EE:11:2D:2D:A2:96
Authority key identifier: 15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
Certificate issuer:       /CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Certificate serial:       01963F5448C26909DCBDDDD5AF9179B65148
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
Manifest number:          029F
Signing time:             Wed 16 Apr 2025 16:00:10 +0000
Manifest this update:     Wed 16 Apr 2025 16:00:10 +0000
Manifest next update:     Thu 17 Apr 2025 16:00:10 +0000
Files and hashes:         1: AQb4NA0iIwYMaS4khoDyVt9RCG4.roa (hash: 58LXgLCBDudul5koOz+4VHQS0wDCBrVYTUIAiNkgAxo=)
                          2: FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl (hash: lfe/nRHnpeEKNLfUAiHRKikPsjX4/V6/E24+M9lNQ7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:54:48:c2:69:09:dc:bd:dd:d5:af:91:79:b6:51:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
        Validity
            Not Before: Apr 16 16:00:10 2025 GMT
            Not After : Apr 17 16:00:10 2025 GMT
        Subject: CN=79af036628470f51887bcb84adc8ee112d2da296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:30:64:e7:02:d1:1d:b1:47:f2:8d:fd:7f:e0:
                    e1:93:ab:ea:e4:52:41:4b:c0:b4:39:3e:a7:1f:d2:
                    4a:7e:4c:02:4b:b9:b3:ef:38:c0:02:ce:8e:23:55:
                    c1:2c:fa:99:7e:e7:ba:40:7e:3b:e5:01:10:6c:b1:
                    96:2c:43:52:9f:ae:da:4e:2f:4a:bb:4e:bf:17:e8:
                    da:d1:70:c6:f0:8b:4b:86:7a:0e:1b:7c:e4:36:d4:
                    21:da:dc:6b:f2:92:55:4e:27:39:d6:16:de:f5:d5:
                    10:ea:b1:a3:85:52:b6:81:59:d6:db:7d:b3:90:a1:
                    a0:a0:ae:34:15:a7:40:a7:fc:63:81:ff:92:3f:8c:
                    e8:d7:65:26:d9:0a:91:1d:e1:47:90:d9:ec:8b:0b:
                    ab:a8:0f:b9:54:6e:18:fd:75:ab:67:1c:f7:28:75:
                    0e:ed:e6:b7:29:ea:b4:c3:aa:7b:04:b2:e8:15:e6:
                    d6:a1:dd:6c:de:85:d4:a4:28:54:63:db:52:0d:1d:
                    5a:35:d0:26:fa:e3:31:1c:b8:bd:0a:ac:c9:68:ad:
                    85:2b:eb:02:5d:0c:5a:17:a3:60:d6:70:e9:f0:dd:
                    7a:eb:1a:6f:6e:d2:32:e5:84:76:25:83:42:37:c1:
                    a8:61:d6:01:3e:88:91:22:77:47:e7:72:28:6b:ce:
                    34:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AF:03:66:28:47:0F:51:88:7B:CB:84:AD:C8:EE:11:2D:2D:A2:96
            X509v3 Authority Key Identifier:
                keyid:15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:41:df:7a:2b:c7:f8:cd:6a:76:b0:a4:11:ff:db:82:be:39:
         72:b4:de:7f:22:c6:1c:8c:23:b8:50:ff:95:e5:85:84:8f:3d:
         66:56:44:01:2f:1b:aa:6c:e5:ce:e0:71:af:28:e6:00:0f:e3:
         74:3e:ef:31:2d:e2:4d:9b:ff:d8:f6:df:6b:a7:8f:da:2c:ef:
         b6:b1:96:ef:ed:90:8a:90:f6:de:18:99:9c:f2:d8:c4:b6:ad:
         51:92:da:07:9a:0b:9b:82:58:8e:17:51:e3:ea:9a:b3:c9:8b:
         5f:c9:ce:93:09:7d:19:be:5c:cb:8a:1a:09:c0:8f:fa:c6:3c:
         66:43:10:bb:c7:cf:30:14:79:43:b0:b1:bf:b6:14:ef:50:19:
         87:55:cc:04:30:6b:92:ac:f9:41:e3:91:ba:f7:84:a7:a1:79:
         fa:32:fa:75:f0:a4:d0:2d:7d:1c:09:44:1f:a7:c8:e7:2a:e6:
         cc:37:e1:da:34:46:c4:18:a7:a7:3f:cd:5a:fe:49:28:c5:67:
         5b:82:ce:c1:c6:51:73:a4:7f:eb:da:a6:4e:0b:72:40:7e:48:
         05:1d:98:7e:7e:39:58:3e:d4:86:5c:ee:5a:6b:e0:69:95:ba:
         09:8b:35:34:8e:d1:9c:50:6f:a0:e2:c5:10:d7:59:c5:ec:bb:
         10:95:66:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:04:52 2025 by rpki-client