Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
File:                     fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft (raw, json)
Hash identifier:          ENWU82DfMNO0eQ+snI/PxOFORc+mW5HteZoc6m9OFSs=
Subject key identifier:   5F:DC:3F:B4:9B:06:B9:9C:03:47:F1:A3:00:FD:11:F4:E8:5D:E7:72
Authority key identifier: 7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73
Certificate issuer:       /CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73
Certificate serial:       0196458D709922F850A0A29ABB42B29975A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
Manifest number:          14F6
Signing time:             Thu 17 Apr 2025 21:00:19 +0000
Manifest this update:     Thu 17 Apr 2025 21:00:19 +0000
Manifest next update:     Fri 18 Apr 2025 21:00:19 +0000
Files and hashes:         1: SpkdakB2OdIuVE348-y165owlz0.roa (hash: BnmPz2hkeMhPxWlEoJOTembsWZqO80f/J+3uznzMlq8=)
                          2: fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl (hash: vNTs4GwkQ2uOjQfw93zkpS6JhUaAPMvIGvQ2wNXY8EU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 21:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:8d:70:99:22:f8:50:a0:a2:9a:bb:42:b2:99:75:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73
        Validity
            Not Before: Apr 17 21:00:19 2025 GMT
            Not After : Apr 18 21:00:19 2025 GMT
        Subject: CN=5fdc3fb49b06b99c0347f1a300fd11f4e85de772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c7:0b:6f:01:ab:d6:2e:1f:f7:fe:37:a3:19:
                    b0:82:2d:37:fb:5e:88:79:26:2c:ef:7d:04:8c:70:
                    4b:49:f8:3d:ff:02:d4:74:fa:20:47:59:90:51:fa:
                    3a:09:f3:50:5b:e0:fb:29:70:ce:75:93:84:b6:ba:
                    0b:12:f8:86:75:8c:59:7a:e4:ef:58:9e:0c:dd:75:
                    31:15:8c:94:d9:ed:83:30:fa:82:5b:18:ac:f4:17:
                    3f:d4:82:44:49:1b:d3:0a:67:f3:84:52:ff:c0:bc:
                    3d:72:81:a5:8a:ec:27:05:66:73:87:e3:b7:b5:b4:
                    1b:89:ea:ce:8a:bd:86:b8:48:54:3c:22:48:76:50:
                    1a:8f:9c:5f:7e:60:da:e9:a0:74:94:85:0b:42:8d:
                    9a:8e:24:7a:81:b3:f6:6d:17:e9:84:f1:7e:ca:09:
                    48:dd:1a:3a:61:25:1b:23:82:7f:75:35:ad:e1:76:
                    d3:67:a1:43:7b:60:1d:74:fc:5e:0b:15:d4:fb:4f:
                    a2:20:d3:89:ed:cc:8a:65:50:67:a0:d8:27:4d:a7:
                    72:aa:18:c6:af:5b:e3:37:3f:ab:c4:ce:11:15:a4:
                    dc:66:f7:19:b6:db:9e:28:d1:7f:98:a1:78:fa:19:
                    00:76:4b:10:4c:fe:5d:0d:66:30:ee:3e:7c:7f:eb:
                    64:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DC:3F:B4:9B:06:B9:9C:03:47:F1:A3:00:FD:11:F4:E8:5D:E7:72
            X509v3 Authority Key Identifier:
                keyid:7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:bb:b1:f3:f2:62:17:c4:ca:e3:a2:92:5c:22:b5:e6:f3:ca:
         28:77:9f:8f:67:77:f5:7d:dd:53:c5:a5:2a:4c:dd:09:c6:dc:
         a7:66:03:f2:11:17:8c:97:24:2a:37:07:99:33:8f:92:33:f6:
         31:62:2c:ba:35:ea:d4:b8:3e:31:4b:dc:35:bd:32:d5:7e:46:
         b8:d1:72:95:53:b9:e0:38:f8:0e:e2:71:bd:08:bd:42:60:76:
         f5:41:62:ba:31:8d:e4:8a:d5:15:ca:57:bf:ee:c9:7f:5c:05:
         1f:e7:f7:e9:e7:8a:14:59:a6:f1:fc:86:6e:7f:46:c2:3a:1f:
         08:71:f7:e3:5c:3d:c6:5a:1b:8d:72:e9:3e:ec:a4:50:a4:3d:
         be:67:6b:e4:a6:12:2b:35:f7:3c:70:fe:fd:41:cd:d4:8c:25:
         98:cd:28:3d:57:63:ef:ae:e5:fe:c7:05:b9:47:bf:68:69:c9:
         7b:60:72:93:32:c1:26:fa:13:3f:4e:b4:60:0d:34:c7:28:31:
         19:ae:b2:78:dd:4e:f8:ee:d7:8f:30:c6:18:21:4b:7c:21:ab:
         c1:77:cc:96:9a:96:6a:76:e2:36:57:5d:58:64:8f:3f:49:5b:
         38:e9:5d:dd:1c:10:9b:46:7f:f6:e3:e9:1d:6f:55:d2:41:22:
         82:e9:64:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:35:35 2025 by rpki-client