Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
File:                     fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft (raw, json)
Hash identifier:          Y2Uwi3jnHcKATmBd+JKyQLJX4fKuOOCo0t6It7+VdVY=
Subject key identifier:   49:CE:C8:E2:98:AC:0F:DF:85:A3:26:51:7A:27:AD:FE:B2:FC:CD:D1
Authority key identifier: 7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4
Certificate issuer:       /CN=7e9360205b48af4954566314230e6b1296d9aec4
Certificate serial:       01958B8469BB258A47FD09BC2FD455079A0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
Manifest number:          0354
Signing time:             Wed 12 Mar 2025 18:01:05 +0000
Manifest this update:     Wed 12 Mar 2025 18:01:05 +0000
Manifest next update:     Thu 13 Mar 2025 18:01:05 +0000
Files and hashes:         1: 6Hs21ZDEU36A7XzHFbni9nG1_gs.roa (hash: uHRCtaCqTT6lc9BE9eOvMv5KtMPToXYAuWUFVX2JuWU=)
                          2: fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl (hash: 23qFUMIFbHw+uMPew2fxZDCy4k1zSIuBMu+BZumRsvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 18:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:84:69:bb:25:8a:47:fd:09:bc:2f:d4:55:07:9a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9360205b48af4954566314230e6b1296d9aec4
        Validity
            Not Before: Mar 12 18:01:05 2025 GMT
            Not After : Mar 13 18:01:05 2025 GMT
        Subject: CN=49cec8e298ac0fdf85a326517a27adfeb2fccdd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:83:17:8b:9c:fc:6d:1a:a7:89:e2:6e:41:db:
                    53:18:99:be:e9:83:36:8c:ee:e9:8d:9d:90:e4:d8:
                    65:b7:9d:55:87:87:b4:58:5a:33:51:24:9d:5a:bc:
                    ae:e6:b7:2a:fd:6a:97:e5:b2:a6:bd:06:d8:5b:ca:
                    24:12:12:61:98:c0:e3:9a:04:31:05:bc:24:5e:5a:
                    b3:e9:f2:1f:2d:15:ba:35:12:be:b5:c7:e7:7c:0c:
                    f4:0f:fe:f1:48:fb:9c:e7:66:ea:a2:9d:84:53:e8:
                    10:34:50:68:2d:5a:99:f5:74:70:35:87:63:f0:a7:
                    a0:20:14:11:e3:88:7d:1e:12:4f:58:51:ac:c8:44:
                    b5:38:17:eb:86:3a:c1:7e:1a:69:27:fa:12:e4:cd:
                    da:e6:d7:c0:d1:91:09:c2:3b:35:14:5b:28:89:e0:
                    94:24:d1:99:1b:dc:c3:35:90:08:26:5a:0f:7a:d7:
                    1d:b9:52:ac:52:4c:dd:b5:4a:4c:29:cc:80:ef:31:
                    b6:d8:50:d4:2d:ad:df:b5:4d:28:7f:d8:a7:c6:4d:
                    56:35:12:57:ba:4c:21:12:8f:92:6a:bb:87:f8:1a:
                    eb:fe:42:31:90:5b:a9:04:db:5a:9c:06:64:71:a8:
                    84:f0:66:47:80:4b:08:87:51:7e:c2:38:8d:72:d1:
                    12:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CE:C8:E2:98:AC:0F:DF:85:A3:26:51:7A:27:AD:FE:B2:FC:CD:D1
            X509v3 Authority Key Identifier:
                keyid:7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:67:e8:b4:c7:aa:00:88:57:70:51:bb:24:40:6f:75:44:71:
         10:07:e6:9b:18:ff:a7:4b:9d:96:04:0d:e4:e6:27:75:6d:71:
         89:12:27:82:e6:5f:87:91:76:95:0e:26:3d:1f:d0:3a:f1:84:
         0d:b3:e7:34:5d:c2:a9:23:0c:bb:cd:e8:54:69:c8:39:7a:bf:
         55:4d:a9:f5:38:66:79:5d:0b:9a:8d:2b:44:85:6e:b5:87:d2:
         35:b8:05:e2:14:9f:3f:8b:67:62:15:e6:83:8f:27:2c:fe:6f:
         7c:6e:8e:c8:9e:bf:57:c5:f5:dd:9c:91:23:e5:f2:cf:ae:78:
         7a:bd:1a:4e:98:b6:85:9a:e9:8e:a7:86:cd:6e:bc:eb:1c:8d:
         a9:1a:fd:26:82:38:f4:25:17:38:8c:68:f6:7b:d3:a9:48:34:
         e5:8b:a4:53:2f:70:d6:7a:fa:a0:11:c1:fc:b5:bc:11:b3:fb:
         cf:5e:6f:1a:eb:79:80:10:8d:44:27:b6:ec:78:0f:07:2e:2a:
         b0:d8:0e:b6:4f:f2:1c:b8:26:3f:20:50:1f:bb:e9:63:1c:84:
         85:25:cc:60:8d:54:a7:18:5f:6d:70:94:78:9a:39:55:42:de:
         05:3b:5c:35:c5:f0:62:53:52:3f:d4:9a:4b:da:ea:b3:5c:47:
         7c:e3:b8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:48 2025 by rpki-client