Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
File:                     97nZe5f9TLrO2oHEQG50rW1TkyY.mft (raw, json)
Hash identifier:          YBBzQDixX9erSeMbB7SQn9elDo4eqmAVVF5gcy5xiys=
Subject key identifier:   F2:80:32:C2:CE:69:4E:1C:50:0C:46:A6:6C:9B:5A:24:0C:13:00:7C
Authority key identifier: F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26
Certificate issuer:       /CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
Certificate serial:       01951247853CADAF578D3C614745BF804578
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
Manifest number:          019B
Signing time:             Mon 17 Feb 2025 05:00:31 +0000
Manifest this update:     Mon 17 Feb 2025 05:00:31 +0000
Manifest next update:     Tue 18 Feb 2025 05:00:31 +0000
Files and hashes:         1: 3D1LcAiWoPnrG9JWE-KCaj8GnaY.roa (hash: QQ8CGEhMzNTkX8ItpWHOx8O61BfEnQ/MeKp6nfXeFwo=)
                          2: 97nZe5f9TLrO2oHEQG50rW1TkyY.crl (hash: 1t7CpVeruQcYr+1tocZA4GtkN6he5zAsPLg7nnay3F8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:47:85:3c:ad:af:57:8d:3c:61:47:45:bf:80:45:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
        Validity
            Not Before: Feb 17 05:00:31 2025 GMT
            Not After : Feb 18 05:00:31 2025 GMT
        Subject: CN=f28032c2ce694e1c500c46a66c9b5a240c13007c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e1:ee:27:0e:97:34:5d:68:de:99:d2:87:be:
                    af:de:b4:ab:20:7b:cf:80:ed:88:49:57:02:80:4c:
                    0b:13:4f:26:69:a9:87:f5:70:3c:b4:c8:07:ef:53:
                    86:bf:87:67:8e:d7:f0:03:ec:d5:5a:77:fe:ed:d5:
                    85:88:2e:a7:11:a0:e2:f0:b1:4b:93:c9:9a:0a:6c:
                    e4:7e:9f:19:5c:8e:6c:5f:11:68:1b:6a:41:2f:56:
                    cb:ff:37:ae:7d:f0:1b:13:52:38:2c:6a:c4:6f:18:
                    4b:a6:28:7d:58:70:fa:b5:6f:b4:9f:66:78:f6:60:
                    a6:30:d3:ed:1f:39:49:33:31:08:0b:3a:50:f2:37:
                    78:08:4b:de:df:47:9f:5e:73:5d:b6:0b:be:1f:bb:
                    96:16:db:66:27:94:26:d9:85:e9:2b:45:9b:e3:8c:
                    17:85:63:83:6c:ca:e1:d7:bb:83:e5:06:ff:7f:0b:
                    7e:be:75:db:be:cd:b7:15:da:10:34:a2:9d:3b:39:
                    9b:5c:23:e2:24:0c:64:5b:3b:05:98:ed:06:b3:ed:
                    90:2d:43:c3:0f:f8:51:11:10:f2:09:32:76:be:dc:
                    72:96:bc:fd:9b:97:bd:6f:a8:0f:2b:d0:e6:c8:df:
                    a6:6a:15:fe:8e:9d:41:f6:f9:d0:10:d4:8c:07:56:
                    0a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:80:32:C2:CE:69:4E:1C:50:0C:46:A6:6C:9B:5A:24:0C:13:00:7C
            X509v3 Authority Key Identifier:
                keyid:F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:8e:e3:17:80:bf:4d:fd:18:fd:fb:0e:6b:a9:24:e3:6b:f7:
         94:8c:33:fa:66:75:74:bc:e5:ef:6e:3c:90:28:f0:76:25:96:
         32:a0:64:b8:88:41:1b:9a:71:1c:e9:4f:6f:a3:97:ae:22:f9:
         dc:97:e6:74:e1:e5:fe:d3:81:3f:d8:4d:4e:d4:ae:86:64:38:
         41:cc:85:4d:78:44:8f:6c:79:a2:6f:ee:f2:84:fd:32:2c:73:
         66:3e:a6:92:35:be:c4:46:9c:7f:cd:50:8c:b8:64:fe:38:94:
         aa:5e:2d:4b:90:f2:6d:f2:b6:73:41:2b:8c:dc:fe:91:13:c1:
         60:53:78:83:9e:cf:4d:95:16:df:6a:e9:9b:3e:05:86:e4:88:
         9e:f2:10:c1:6f:35:d4:23:3c:f1:99:1a:a3:8b:aa:69:c7:f3:
         62:2a:f6:49:ab:88:6a:a0:ba:70:20:da:b2:07:8e:76:fd:38:
         1e:cd:9a:4a:ec:c2:21:4c:63:70:ac:14:6b:11:73:e4:84:e8:
         b0:ca:56:02:c0:f0:e7:a7:4d:b8:e3:1e:87:2e:53:a6:f5:11:
         c3:a0:d4:af:6e:83:af:45:ec:65:24:dc:41:4e:76:a7:9b:10:
         f6:8e:ff:a6:5d:16:ec:92:ab:34:ff:27:1b:de:c3:52:59:d7:
         dc:00:65:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:28 2025 by rpki-client