Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
File:                     ccFpDvV6_P-uc725k0MJ-LcOu2E.mft (raw, json)
Hash identifier:          0Gi1lnkDR7jr80UqSAZD/Sc3GEyyj5hX5qrSQoMmDOM=
Subject key identifier:   98:F0:A6:85:60:E6:9D:AD:01:5B:B4:1C:A4:5A:0B:0D:2D:DB:3A:B7
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Certificate issuer:       /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial:       019640670DF415FD22D543ED1A73DD6957AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
Manifest number:          1447
Signing time:             Wed 16 Apr 2025 21:00:17 +0000
Manifest this update:     Wed 16 Apr 2025 21:00:17 +0000
Manifest next update:     Thu 17 Apr 2025 21:00:17 +0000
Files and hashes:         1: T2Ms0IsK2hwIWCpu2VyNXMVfGqg.roa (hash: I5IAteZyEq5YzDFXdNGjAqCsBN2dhyO1KERPjxCLefk=)
                          2: ccFpDvV6_P-uc725k0MJ-LcOu2E.crl (hash: cxPfIIzJ+tZdpG7reeAAynDgZ5HY+SOz2B1ZV5kIRno=)
                          3: gIUgoRTyJmRfCQYS7uklAVhDlWU.roa (hash: K7KWFvQ91COOPs2G9/YPr+v2xa3Bl9m3cSR+0EKlTlQ=)
                          4: ghc4MPH3vTiYP5rga0h6BtqPh6A.roa (hash: +n/mGZaNW3qMvM/6+1HZZ0mUd3q3k/RCYwms9UGlFSw=)
                          5: h8NM3QNMAy3JQUb-72WEZdGpGjA.roa (hash: Lxvl2etM6iQ3TxJnQc+Uy0mpsnRIUxQq3ad2YMjelB0=)
                          6: rWTlkbZNrrsZjKWZTJP_rkzWTv0.roa (hash: OOrIatFR59tEQa9JkYCnHVEOWGvvetBIFgDhOWDZNAQ=)
                          7: v0zBDXFOccttRX2cT7fDoONDswQ.roa (hash: 4vPi5VK0C1d8kjVecT9rugkIfwxa9eC7Ww52TXS0hqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:40:67:0d:f4:15:fd:22:d5:43:ed:1a:73:dd:69:57:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
        Validity
            Not Before: Apr 16 21:00:17 2025 GMT
            Not After : Apr 17 21:00:17 2025 GMT
        Subject: CN=98f0a68560e69dad015bb41ca45a0b0d2ddb3ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0c:b2:e6:16:ee:2d:c3:95:6b:cc:73:e4:1e:
                    22:13:e4:57:ca:12:6d:4e:86:63:08:8e:c7:25:2b:
                    52:98:c4:84:ec:d0:00:e4:a8:8a:25:f8:5b:cd:fb:
                    8e:39:99:8e:1b:de:3d:ec:a3:dc:5a:d0:51:55:4d:
                    7a:aa:bb:d5:6e:0e:b8:3c:e6:97:53:5f:89:1e:79:
                    50:84:42:8e:fb:35:55:c0:6e:cf:a3:f0:3b:a5:73:
                    c1:ff:7e:06:ef:df:37:62:77:a3:9e:f7:1b:9a:ec:
                    73:c6:b9:15:f2:db:00:21:87:22:0e:fd:69:4d:5e:
                    76:92:42:42:34:b5:35:0f:29:4e:ed:90:7f:a1:19:
                    fd:59:4b:a7:fc:5f:7a:00:6e:23:09:f9:c2:92:10:
                    e2:6b:51:9f:1c:db:28:22:2b:f2:ea:52:3b:0d:3a:
                    ed:cb:a4:73:ec:46:91:95:7d:5f:f1:67:c1:81:12:
                    20:78:cd:ba:a5:9a:e9:ef:7f:fa:4e:2c:37:8d:1f:
                    05:11:43:18:a3:56:e3:d2:53:16:c5:63:c4:0f:d8:
                    24:ff:eb:2a:0f:c1:8e:cd:fc:9f:5f:39:4a:f9:61:
                    c2:72:20:38:fd:c4:f9:b4:91:01:fd:d1:5e:d4:58:
                    f1:ef:b5:b3:cd:35:7d:b5:47:bb:c5:b6:15:05:fe:
                    54:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F0:A6:85:60:E6:9D:AD:01:5B:B4:1C:A4:5A:0B:0D:2D:DB:3A:B7
            X509v3 Authority Key Identifier:
                keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a9:6b:ce:59:86:11:70:28:ba:84:b2:7c:b8:95:0e:49:7f:
         97:a9:6e:de:49:c5:67:67:c3:9c:8f:fd:7f:b1:16:07:62:72:
         c7:e9:26:cf:c6:48:f1:d8:a1:df:df:f2:09:83:4f:9d:32:23:
         01:63:8f:fe:c4:e1:a7:58:04:4c:79:d3:b0:c7:29:ce:80:58:
         3f:f7:e1:52:ed:76:68:f4:69:4e:42:15:55:e5:aa:41:4c:8d:
         31:1d:ef:57:a1:fa:2a:45:2b:5f:a3:85:d1:7c:15:92:b9:5a:
         2c:77:82:41:a6:4d:8e:02:d4:60:ea:3d:20:67:dd:a8:17:56:
         17:4e:ab:0f:96:b8:de:b1:5f:61:9a:0f:ea:73:d9:ed:e8:d2:
         ff:4a:e0:78:31:1e:08:54:53:b6:bd:ec:d4:10:f3:5c:96:ed:
         35:bf:6e:ee:ca:c2:07:e3:4b:67:71:3a:12:03:a0:47:ce:88:
         a8:49:6d:1c:3e:95:d0:6c:42:35:84:82:72:bb:9d:b2:6a:af:
         85:64:f5:d9:15:33:0c:a2:3c:5a:b2:74:b2:70:5a:43:a6:df:
         09:02:11:8d:bf:91:74:a2:fc:cb:55:24:26:7f:b1:23:53:c6:
         2d:d8:55:2e:39:5c:88:4b:5d:98:63:4c:b7:07:28:0e:04:48:
         52:48:68:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:34:25 2025 by rpki-client