Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
File:                     fFV1K31vznKGsaGi5DvIbUWE6D8.mft (raw, json)
Hash identifier:          RomHjbmUoKrazIZlq84RPXL9RNN8KIBe063md/uE67s=
Subject key identifier:   6E:F1:6D:B2:FF:91:11:CD:74:95:B8:89:00:8E:A8:47:AB:71:71:DF
Authority key identifier: 7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
Certificate issuer:       /CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Certificate serial:       01966028D9897C12E301E170D8EC2B3BBA44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
Manifest number:          0AB7
Signing time:             Wed 23 Apr 2025 01:00:11 +0000
Manifest this update:     Wed 23 Apr 2025 01:00:11 +0000
Manifest next update:     Thu 24 Apr 2025 01:00:11 +0000
Files and hashes:         1: 8IVwcCAer2YFK0PD_eW_7QPltRk.roa (hash: DtzwrJfpj+KzExIWMGXO37ECdwLmhMCQMNWrFN/oGf4=)
                          2: fFV1K31vznKGsaGi5DvIbUWE6D8.crl (hash: R3Kkw8ZEDvpReL9dGk5CiRbvdHqzhK0YVXeG9MkIsj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:60:28:d9:89:7c:12:e3:01:e1:70:d8:ec:2b:3b:ba:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
        Validity
            Not Before: Apr 23 01:00:11 2025 GMT
            Not After : Apr 24 01:00:11 2025 GMT
        Subject: CN=6ef16db2ff9111cd7495b889008ea847ab7171df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:01:7b:08:7c:f4:5b:94:e2:75:f9:23:4e:f5:
                    bb:e1:6b:48:a7:a7:2a:90:e3:b0:83:84:d5:a1:cc:
                    8e:45:5d:c7:30:1a:bd:10:5d:5e:c2:5a:99:97:a8:
                    37:f7:47:5e:cd:b7:82:3b:54:86:89:88:44:b6:ef:
                    c1:8e:36:a1:71:83:06:cc:9d:b5:e2:2c:b6:0d:a6:
                    c3:bb:38:49:e6:8d:e3:06:b9:de:ef:7c:db:ce:63:
                    e1:18:bb:93:33:6a:ff:73:9d:f1:33:d7:e4:74:a6:
                    cf:c2:6f:c4:71:e2:07:8a:2e:d7:72:3f:92:13:0d:
                    3c:96:ca:7d:ae:f2:5c:d4:cc:8b:b9:3d:69:06:30:
                    8c:21:59:7c:d3:5f:1d:5b:42:c0:a2:2f:07:e2:0f:
                    57:83:c0:22:9d:8c:2e:7f:85:e7:2b:65:ed:88:5c:
                    42:1d:51:e6:7f:b5:72:c9:68:6b:81:52:56:ee:2e:
                    f5:e2:d8:f4:6a:cb:55:02:3d:77:ce:75:42:99:b5:
                    96:78:39:cc:fc:8c:fd:d9:a8:0a:e4:59:0b:a1:9c:
                    86:be:3c:4f:b6:59:24:33:86:c3:16:92:36:e3:83:
                    99:95:0c:9e:8d:05:fe:7f:0e:3c:c6:19:52:db:b8:
                    7b:1c:81:54:a1:82:c5:b3:1e:48:26:37:54:bb:57:
                    77:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F1:6D:B2:FF:91:11:CD:74:95:B8:89:00:8E:A8:47:AB:71:71:DF
            X509v3 Authority Key Identifier:
                keyid:7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:7c:0d:d9:a3:12:9b:dc:2a:64:3d:80:b5:36:a9:5c:62:3a:
         cd:a2:e9:02:1b:fd:7f:f6:12:2c:86:40:e5:af:35:8e:cb:1a:
         3c:63:20:eb:9e:c4:ca:7a:69:1f:b4:48:d5:f4:2f:37:28:9f:
         1d:eb:be:24:f8:b1:8e:4b:34:70:3e:3d:35:a3:d9:34:9f:1e:
         d7:d1:fb:89:23:d6:2d:12:4f:fd:da:71:11:ac:48:99:af:be:
         55:0c:2d:db:13:be:0f:e4:b8:40:b8:c3:71:f9:37:da:b9:e6:
         07:3e:6f:90:e9:01:e1:eb:66:30:84:63:1e:69:d3:b5:84:26:
         62:2e:ef:86:c9:80:2a:b2:b7:a1:d7:d4:ac:83:6d:2b:54:11:
         a3:88:c8:c6:c5:bb:37:45:c0:fc:2c:bd:af:16:48:1d:b8:02:
         4c:9a:39:a0:46:45:fb:10:18:4d:0b:20:6e:49:08:86:41:4b:
         01:13:be:b4:47:7f:21:91:5f:6d:2a:b9:4e:2d:41:3b:e6:77:
         ea:a4:59:33:2e:4b:83:cd:3a:34:41:f8:b9:27:f6:50:e5:16:
         56:4a:56:a6:20:2c:e6:87:79:9f:6d:49:b4:eb:0a:86:2e:79:
         63:13:0b:79:b0:d1:77:ed:12:1e:8b:6b:9a:a8:88:89:0a:03:
         5d:1d:4d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:41:35 2025 by rpki-client