Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
File:                     fEuRfckEagZWeK4N9NPjA2nFnGk.mft (raw, json)
Hash identifier:          NNoAw7RTUe5zRR8wB1fUKVkKU9jiWl1YKkBfwC3aGUU=
Subject key identifier:   01:8E:AE:D2:BF:D4:71:03:C4:D7:16:6C:E8:7D:E2:4C:22:1E:00:F7
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Certificate issuer:       /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial:       01964179ED93FF53C653D6D4FD7B13959304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
Manifest number:          14FB
Signing time:             Thu 17 Apr 2025 02:00:31 +0000
Manifest this update:     Thu 17 Apr 2025 02:00:31 +0000
Manifest next update:     Fri 18 Apr 2025 02:00:31 +0000
Files and hashes:         1: HHlEIHLaS3GMguRjiZVeXZtaB1U.roa (hash: YlDlqGcFKkVbm+bI6++WiC8vTEcJ4i7q+bRlRvHQvDM=)
                          2: JFfXWjIJHVSFeGbySM8n0cwBw74.roa (hash: kgkONWoOOrXSbcj6bdCOVH5+Q3j9I/JtMm/NZI6wPhU=)
                          3: YWh_o51jvYOy_7yJxKWIzC6AjVw.roa (hash: 5h6ADSbcLhyyb1o530CRr7FXSLev1xEONn8X3G0ic1Y=)
                          4: f0wCPyNuTeQIvdOaxmoM9zgS-yA.roa (hash: f/FLhL5iK4w35mAjQuNFPLV5x3iPtqx+dEGqwTvpyc4=)
                          5: fEuRfckEagZWeK4N9NPjA2nFnGk.crl (hash: Kiv/sB91fzf4gT7/DLj95xOjtxENutEHBzf73c5TU0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:41:79:ed:93:ff:53:c6:53:d6:d4:fd:7b:13:95:93:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
        Validity
            Not Before: Apr 17 02:00:31 2025 GMT
            Not After : Apr 18 02:00:31 2025 GMT
        Subject: CN=018eaed2bfd47103c4d7166ce87de24c221e00f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:80:98:5b:08:69:ab:af:d1:46:6f:ab:b6:8d:
                    37:57:51:51:86:38:06:c4:4b:51:73:b6:3f:38:1b:
                    b6:1e:f7:56:07:fd:a1:50:3e:d0:d8:33:22:37:65:
                    1e:d4:16:25:1b:75:57:ad:c5:48:4c:69:e5:8b:25:
                    89:91:b1:5c:93:fa:10:64:fc:c8:a3:3a:35:b2:78:
                    3e:72:dd:e4:c3:c3:b9:cb:50:f5:39:82:51:97:b3:
                    8f:80:5e:e5:e5:fc:f7:42:35:21:45:92:fe:87:b7:
                    58:b0:3c:8b:8b:d5:69:83:46:de:46:6e:79:62:68:
                    16:61:37:eb:bb:87:76:d7:49:4e:90:0c:94:16:b8:
                    1b:fd:64:f8:97:b9:04:21:ee:0c:32:c6:dd:46:40:
                    83:87:ad:a6:af:09:0c:49:e5:89:d8:c2:c3:93:fe:
                    09:45:1a:d7:02:78:10:98:b8:97:37:5f:ec:2a:d5:
                    14:98:b9:71:04:24:7b:31:92:07:2d:08:0e:42:a0:
                    a2:b7:3c:d5:75:9e:e9:98:cc:61:08:49:8a:74:e8:
                    b1:95:b0:fb:0c:6a:c2:a3:80:46:ba:bf:5f:1a:11:
                    d8:ed:d0:26:36:3d:57:9e:ec:95:3a:98:91:3e:32:
                    10:6c:1b:4a:ba:4a:6d:98:ae:66:c5:82:3a:16:cf:
                    ca:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8E:AE:D2:BF:D4:71:03:C4:D7:16:6C:E8:7D:E2:4C:22:1E:00:F7
            X509v3 Authority Key Identifier:
                keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:17:ba:46:f7:b1:85:90:c6:8e:a3:8a:3d:0c:32:bd:1a:2f:
         15:e8:ea:d7:b5:38:0a:06:8c:c7:e3:03:11:8a:a8:5f:ad:a3:
         b0:cd:f2:fc:11:e4:1c:a6:62:36:3a:4d:49:e3:c4:d5:d0:e6:
         5c:3a:91:4b:77:a1:e6:9a:5c:37:25:27:42:cb:bf:4e:97:9f:
         da:ef:19:6b:49:5b:79:4b:13:b9:6c:27:5d:29:1b:ee:6f:3e:
         8a:5c:05:f4:e9:d1:d2:51:ee:be:f1:02:2d:23:47:eb:04:28:
         c7:03:7e:59:19:8e:b1:e6:31:b7:8c:5c:9f:c2:fa:a1:54:db:
         ac:cc:f3:e7:16:84:24:25:4e:7a:f9:5e:2b:13:fa:db:aa:49:
         30:48:85:22:7e:ed:44:e4:cb:c8:06:40:ce:98:2a:5d:2a:8b:
         a9:5b:cc:68:af:60:9d:76:8c:d4:1d:f2:f1:56:f0:be:19:d6:
         bf:dd:3f:19:d4:ea:57:f8:a1:77:c9:19:af:6d:b9:78:43:b7:
         82:b3:8a:c2:9a:b1:e2:b2:98:45:30:e6:b8:14:b5:8d:f3:dd:
         bc:85:7f:2c:0e:6b:af:c2:97:bb:6f:e1:4f:b6:1d:ed:91:e8:
         8b:c4:54:9e:c1:70:ff:8c:40:46:01:a0:bf:79:f5:39:a8:90:
         82:1b:13:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:03:16 2025 by rpki-client