Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
File:                     F-s-AEUBmMitRev4PhMCGbk2Q6U.mft (raw, json)
Hash identifier:          f9iVGww+jXtTiE25x8NQLAXxXx6n53HHikLNc90rhAc=
Subject key identifier:   A3:0D:26:59:D5:67:D5:DC:2E:22:99:F7:AD:71:50:52:EA:EF:02:9A
Authority key identifier: 17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5
Certificate issuer:       /CN=17eb3e00450198c8ad45ebf83e130219b93643a5
Certificate serial:       01964B90BC53A4E0A7C9D17B9E82608CCDFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
Manifest number:          0979
Signing time:             Sat 19 Apr 2025 01:01:38 +0000
Manifest this update:     Sat 19 Apr 2025 01:01:38 +0000
Manifest next update:     Sun 20 Apr 2025 01:01:38 +0000
Files and hashes:         1: 1-NglftYb2V7rgWaj06UP-4Fbxaw.roa (hash: zvrixR1OfM7l+BuV+ILz2uoXSyiF2KQB8j15busAZgQ=)
                          2: F-s-AEUBmMitRev4PhMCGbk2Q6U.crl (hash: AD0j4DR2WHZQQOP95T6U2eTto0pgLBINIVDhjDM1Upk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:90:bc:53:a4:e0:a7:c9:d1:7b:9e:82:60:8c:cd:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17eb3e00450198c8ad45ebf83e130219b93643a5
        Validity
            Not Before: Apr 19 01:01:38 2025 GMT
            Not After : Apr 20 01:01:38 2025 GMT
        Subject: CN=a30d2659d567d5dc2e2299f7ad715052eaef029a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6f:87:97:ab:80:07:f2:cf:be:a1:f8:49:7c:
                    4d:b1:44:82:21:36:26:3a:69:fd:d6:2d:0e:b0:0a:
                    3f:dc:2f:45:8b:fb:3d:d2:0d:90:f5:48:07:de:b2:
                    78:b3:e1:3f:a3:c9:33:94:02:b9:74:d6:63:9c:c0:
                    44:98:b9:89:38:c3:4a:9e:13:76:bb:cd:eb:d0:ad:
                    e5:3e:06:12:7a:93:d2:57:a9:cd:fc:c7:26:57:34:
                    9f:6c:79:5c:f7:c6:89:33:96:07:e1:b4:81:66:29:
                    e2:d9:49:9e:7f:e3:8e:b9:a1:b5:da:45:74:57:49:
                    b3:99:13:15:65:6a:e9:fb:96:1f:ef:cd:a8:e3:f6:
                    2b:6e:d7:16:83:b1:26:3d:6e:68:0c:47:61:a2:89:
                    4d:c3:81:72:bb:c9:bf:72:74:3c:97:5a:93:0c:b5:
                    47:da:fe:d6:82:86:d4:0c:b2:6e:8d:11:66:ef:6e:
                    17:46:ef:e7:d5:6e:52:5f:57:70:ce:2a:39:b4:84:
                    88:53:99:d4:dc:02:72:f7:07:06:56:50:5d:58:23:
                    6e:ad:56:ec:d8:18:ea:53:4c:a7:4a:e6:02:83:69:
                    47:43:e3:f4:ec:fb:a9:54:22:ff:2f:86:71:37:e6:
                    ae:0b:46:9f:0f:c5:96:de:a1:a3:8e:0c:4d:27:69:
                    74:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0D:26:59:D5:67:D5:DC:2E:22:99:F7:AD:71:50:52:EA:EF:02:9A
            X509v3 Authority Key Identifier:
                keyid:17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9d:0a:07:80:d2:98:dc:78:29:cc:41:7b:c6:31:0a:1a:b3:
         af:a2:8c:d3:23:18:3f:f3:af:66:7e:ac:04:7c:ba:5b:37:e3:
         ab:d9:fa:a2:56:e8:e3:9b:df:0f:42:37:1a:12:f7:0a:8e:a2:
         fb:9f:2e:17:c2:5e:52:50:4a:f3:ec:64:66:20:d2:27:13:73:
         7c:f1:1a:0f:a4:7b:52:b7:68:bd:da:b6:80:f0:f4:60:1c:3d:
         a5:0f:c7:79:4d:fe:10:2b:63:1f:fe:2b:46:4f:f7:a3:83:1d:
         b7:98:47:50:c3:fe:e0:76:37:4b:99:11:2b:3e:cb:3a:7f:ca:
         85:35:7b:77:64:78:8d:3d:32:62:62:70:bd:d1:4c:38:af:22:
         8c:de:1e:f1:55:df:af:8e:52:ec:d8:ce:c9:99:13:2d:5e:19:
         da:3d:e4:3a:68:bf:c2:1e:3d:46:50:79:a6:8a:7a:54:bb:9b:
         f2:f1:82:a7:2a:80:d8:4a:ed:3c:e4:cf:98:c7:74:2f:7d:ae:
         aa:ae:60:83:19:68:2e:ff:8b:44:ce:4b:5a:39:fe:0e:18:ed:
         0e:2b:e1:3f:b4:e1:a9:61:d8:82:68:da:83:57:2f:13:60:9e:
         38:6e:70:11:68:e2:b0:48:3b:a7:97:6e:a6:aa:23:cd:31:17:
         9d:12:4c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:14:40 2025 by rpki-client