Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
File:                     FTtGcCg5p5W6uo2NFezcymN-M2w.mft (raw, json)
Hash identifier:          ICH1Obl7o6Jo32hFsP56rPbCWux0KYvnaR5dzjcrG7c=
Subject key identifier:   A9:AF:D0:8C:F3:3F:44:C8:9B:65:72:50:FE:43:6E:DA:76:F7:17:B3
Authority key identifier: 15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C
Certificate issuer:       /CN=153b46702839a795baba8d8d15ecdcca637e336c
Certificate serial:       01964556B48313203542B1BCACEFF7E686B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
Manifest number:          14F6
Signing time:             Thu 17 Apr 2025 20:00:32 +0000
Manifest this update:     Thu 17 Apr 2025 20:00:32 +0000
Manifest next update:     Fri 18 Apr 2025 20:00:32 +0000
Files and hashes:         1: 7LfdpybXjkO1zp9O6nzu1fNfc88.roa (hash: QAPjHN/iZlfmzhgOwFaV5zDBEKY0r/wVKeB2R6gKrqA=)
                          2: FTtGcCg5p5W6uo2NFezcymN-M2w.crl (hash: swxMy69FIKxxLh5OgdbpAFbpY+35t1owT5EiaOyyOIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 20:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:56:b4:83:13:20:35:42:b1:bc:ac:ef:f7:e6:86:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153b46702839a795baba8d8d15ecdcca637e336c
        Validity
            Not Before: Apr 17 20:00:32 2025 GMT
            Not After : Apr 18 20:00:32 2025 GMT
        Subject: CN=a9afd08cf33f44c89b657250fe436eda76f717b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a9:90:c2:25:c6:69:19:50:ef:2f:f4:28:c0:
                    20:d7:16:c9:11:2e:b4:27:32:30:57:b8:a5:b1:6e:
                    1c:16:af:fe:c2:b0:62:7f:41:23:bc:c7:c7:bd:f4:
                    26:52:30:33:7e:31:23:e9:fd:36:a2:8a:13:69:32:
                    b7:fc:25:d8:05:50:b5:08:75:b9:b9:31:8a:fd:76:
                    7d:5f:68:07:0b:d2:70:68:70:14:3c:fc:60:54:c0:
                    16:a1:39:10:f4:34:01:cb:de:19:30:d2:66:c1:c7:
                    3b:ee:a6:88:e4:ce:9e:6e:22:9c:fa:a6:60:26:26:
                    fb:f2:b6:9d:87:31:cd:b9:ea:e5:55:2c:1e:18:6e:
                    67:1d:01:89:4b:a2:21:1b:ee:7d:8e:e3:27:ee:5b:
                    7d:19:1b:19:5e:c5:c0:4a:52:18:bc:9c:ec:c6:d1:
                    52:06:de:06:98:00:fb:ca:f4:ba:74:0c:61:42:35:
                    30:1a:4c:42:93:82:4e:de:35:b5:0d:21:0e:f7:b3:
                    cc:e9:43:ac:c7:b4:7f:be:37:20:8b:ad:10:68:05:
                    62:86:7e:59:83:9c:f1:78:c4:3a:66:ce:ca:ac:59:
                    96:61:32:ed:ca:f8:d1:be:c6:5d:b6:f7:21:81:6b:
                    b9:63:5b:a0:48:86:16:52:f9:f6:59:0d:7a:1e:1f:
                    14:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AF:D0:8C:F3:3F:44:C8:9B:65:72:50:FE:43:6E:DA:76:F7:17:B3
            X509v3 Authority Key Identifier:
                keyid:15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a4:21:2a:89:6b:85:b8:08:50:43:75:bc:8c:40:d8:19:9a:
         1b:de:61:b8:62:19:49:4f:c4:ae:94:c7:d0:80:de:8d:0e:a2:
         2d:be:f7:c8:29:d1:23:03:78:8c:4e:9b:42:61:cf:d9:ac:eb:
         03:0f:55:ae:eb:20:4f:7e:98:2a:e9:43:56:35:58:50:d3:db:
         a7:11:47:62:89:0a:11:3b:72:a1:29:fa:e7:4c:71:17:ad:40:
         5d:05:b6:30:14:b3:3d:24:8b:dc:d1:c3:98:28:1a:bd:9d:18:
         fe:3f:4e:b0:ba:cc:26:b6:38:f2:73:eb:43:99:af:d5:60:7f:
         e7:02:1e:ea:8e:d8:85:68:bd:73:8b:4c:ef:93:8d:ef:ae:a0:
         51:1f:46:a8:ab:20:3e:cc:76:f6:04:e0:03:57:d1:e3:3b:04:
         da:ca:e8:ad:50:2e:6d:aa:08:f4:db:03:ad:11:80:c7:50:e0:
         47:0e:df:c7:6e:a4:76:e1:d6:b4:4d:a6:de:76:de:19:39:46:
         7d:47:91:b8:b4:85:22:c0:f1:3e:0f:6b:30:59:f2:e2:7c:65:
         86:72:6d:fd:67:19:93:a9:b4:9f:a7:96:17:c6:3c:ae:33:20:
         72:52:a5:8f:91:75:fc:10:51:80:a1:c5:c6:65:1c:bd:bf:31:
         8a:78:cc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:39:45 2025 by rpki-client