Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
File:                     1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft (raw, json)
Hash identifier:          a93uM06xHua3rcrTcl22sa2lqQlBnUUlmg/16dbpoLo=
Subject key identifier:   7B:26:2F:09:C5:63:A5:0F:61:4C:B4:48:E5:9F:F8:AE:EE:97:A0:05
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Certificate issuer:       /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial:       019603AE0B40413BD1C31B2B3CC3F1163367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
Manifest number:          145C
Signing time:             Sat 05 Apr 2025 02:00:59 +0000
Manifest this update:     Sat 05 Apr 2025 02:00:59 +0000
Manifest next update:     Sun 06 Apr 2025 02:00:59 +0000
Files and hashes:         1: 1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl (hash: 2ZdkH69GUKsX4KsTvc38OPq84LrY+//zeKSR+1IOt9I=)
                          2: 3snRbpN2IGbVOo0FBzCUwBaJ8fA.roa (hash: 3Oueo8OlDtIcQuATt+YhMGVuFQeK2ksk6bcPZePfS/4=)
                          3: KMXluT6TOsSlWcB3G1q4rPwDNcA.roa (hash: R/5jz/dg8ARqO/CDKEd0xCdgxtFCjK3wYj6Mgv/XE8c=)
                          4: O_0uARvnlGBsnK2YoqVoSrDpqrg.roa (hash: 6A40cJhwnS2HIcaMt2E3Okdtazof/ELlLEJTOh8u/cA=)
                          5: Vy_8OYOh1TkU0Trz5L0_pUaLaDQ.roa (hash: 45fnTuIrYPX+ZgzLb3UCCORtFF74in0AsBskP4DlDf0=)
                          6: X_b5fRlGB5_ZGnavxwWcohLpdb8.roa (hash: NV/i40dbe/RWF5a3GR2TEqHnwJD/Zk1jQKUldDbbe6A=)
                          7: nBiSvI3CgibyhdCc-vXnlYd4Qos.roa (hash: lB+X4Z+d5bHs9BP0hCzXYJGLhwG5CXPhaoH5VNrFQ7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:03:ae:0b:40:41:3b:d1:c3:1b:2b:3c:c3:f1:16:33:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
        Validity
            Not Before: Apr  5 02:00:59 2025 GMT
            Not After : Apr  6 02:00:59 2025 GMT
        Subject: CN=7b262f09c563a50f614cb448e59ff8aeee97a005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:46:f6:7a:3e:19:14:6b:fe:04:24:31:26:73:
                    27:2a:61:b8:86:4b:c4:f0:dc:64:01:3f:64:0b:fa:
                    80:a0:9a:e8:d4:72:f0:8b:ca:ad:aa:34:45:2e:fd:
                    f9:5d:15:e6:c0:a4:96:27:65:da:c1:09:59:31:db:
                    ee:29:38:5f:ae:e3:b1:6a:7d:13:af:36:98:f3:af:
                    23:b8:dd:d8:62:01:23:5e:f6:5d:16:20:10:b1:30:
                    a6:d9:23:3f:2e:e6:65:28:ed:41:0b:5d:53:ab:00:
                    c5:be:d4:c1:84:1a:c7:83:0d:2b:20:7b:7e:db:43:
                    18:9e:9a:7e:41:7a:a4:09:d1:65:2e:d9:3a:ba:60:
                    97:8e:af:92:fc:fa:33:25:08:5d:e0:cc:b6:09:09:
                    f6:08:7c:7b:a9:38:64:0d:bb:34:17:49:65:59:e0:
                    52:d6:b6:c0:57:2f:0d:98:f4:a9:f1:36:5a:21:b2:
                    6f:cd:be:0f:8c:05:f0:c2:10:0e:be:f1:79:08:d3:
                    53:4a:3f:44:63:f6:36:7c:34:0b:11:12:62:19:eb:
                    a7:a0:ad:7d:9b:68:7d:28:1e:ff:87:e6:03:54:4b:
                    14:c1:f3:b8:e0:d9:63:50:80:9f:e5:b5:c3:78:bb:
                    7c:15:7c:88:38:c2:7e:4b:28:54:5b:fa:43:e0:7b:
                    28:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:26:2F:09:C5:63:A5:0F:61:4C:B4:48:E5:9F:F8:AE:EE:97:A0:05
            X509v3 Authority Key Identifier:
                keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:fd:e6:01:a9:28:0e:2d:fa:eb:38:e4:f5:be:a8:d2:0d:04:
         c6:7c:43:b4:b8:90:2e:d0:c9:c1:5c:f9:e7:b0:e5:65:3d:42:
         21:0c:aa:91:6a:8f:b0:a8:e5:6a:8d:60:7a:05:e3:6d:13:ba:
         08:01:ad:72:fe:ce:8e:aa:51:76:62:7d:8f:c0:a8:88:90:ab:
         93:99:6b:7a:70:8a:79:72:c4:17:03:5b:da:db:99:21:d9:aa:
         32:bb:52:ae:32:4a:62:83:26:f5:18:0c:46:a4:1a:eb:59:11:
         5b:c3:85:33:3c:2e:a5:5c:81:36:65:39:a7:d7:5d:ad:a5:06:
         50:f4:73:7a:c4:05:03:be:66:5e:f2:45:20:ce:ed:e4:22:97:
         e9:13:af:30:7d:87:e1:05:2a:b7:17:df:06:a5:dd:17:37:d5:
         4f:e0:4d:1e:b9:66:ea:2f:7a:b5:f2:ca:8e:08:63:44:3b:c5:
         c4:ec:48:d9:a8:85:4b:b8:b3:03:58:79:65:a9:04:f8:6e:b1:
         f5:d4:63:09:78:c7:20:bc:1a:ba:dd:0a:2a:53:91:24:b8:7c:
         27:c0:92:4e:d1:7c:ab:ee:6a:ff:4c:28:ad:40:98:5b:bb:1a:
         6c:d5:ab:00:11:51:a5:96:b2:13:47:a7:7b:aa:76:0d:99:3d:
         8c:5e:a1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:11:02 2025 by rpki-client