Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
File:                     fNFi3seCCbwDrdCBUn1Usn6E0m4.mft (raw, json)
Hash identifier:          1VJovJWH2RPajZoFuVZeInQ1cZnsdp8YsOAaLX2utgg=
Subject key identifier:   35:48:B6:75:E5:0B:B8:C7:DD:44:CC:EB:A6:07:A8:3F:AD:46:46:2B
Authority key identifier: 7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E
Certificate issuer:       /CN=7cd162dec78209bc03add081527d54b27e84d26e
Certificate serial:       019659F078866B34F4C941A98997765F7357
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
Manifest number:          1504
Signing time:             Mon 21 Apr 2025 20:00:53 +0000
Manifest this update:     Mon 21 Apr 2025 20:00:53 +0000
Manifest next update:     Tue 22 Apr 2025 20:00:53 +0000
Files and hashes:         1: fNFi3seCCbwDrdCBUn1Usn6E0m4.crl (hash: 5lV6zh4r1pQRd9miq8sAt1pbAWz6FyCKilaELSgx5Kw=)
                          2: p62St_0MRIeBUvHxqOmIuKO2S0g.roa (hash: V3Cr5hnF6tOsq5Vm2VEjfSqOP5RKmdhFpUZAhs7o/b4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:f0:78:86:6b:34:f4:c9:41:a9:89:97:76:5f:73:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cd162dec78209bc03add081527d54b27e84d26e
        Validity
            Not Before: Apr 21 20:00:53 2025 GMT
            Not After : Apr 22 20:00:53 2025 GMT
        Subject: CN=3548b675e50bb8c7dd44cceba607a83fad46462b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ab:43:e0:73:d0:1d:57:bd:89:73:c5:c8:1a:
                    d0:8a:83:1e:f0:fe:dd:ef:39:05:66:b6:f7:8e:cc:
                    28:44:33:b7:8c:bb:18:4a:26:73:13:0e:d4:66:dd:
                    0b:ef:bc:fd:b9:20:81:0e:79:5e:fb:eb:73:dd:9e:
                    7c:3f:01:8e:47:a1:8b:97:3d:ff:1b:6e:f3:55:b4:
                    84:37:65:5f:fb:34:d8:f7:93:19:d6:5d:e9:8c:3f:
                    df:79:5b:d2:86:5a:c6:c0:f1:20:3d:09:df:f0:ae:
                    ce:26:65:2a:c3:66:3c:cb:00:73:54:50:1f:67:f5:
                    64:7c:e1:fe:3a:e9:17:67:21:8f:23:2f:f5:e9:af:
                    49:63:f8:b5:d8:32:33:66:bf:d0:70:94:47:d0:67:
                    7e:f0:3e:4c:f6:af:d6:6e:c8:29:9c:12:e6:3a:0f:
                    fb:6e:c7:e8:d8:db:e6:75:28:ed:12:43:08:95:b8:
                    eb:8b:14:26:e0:8d:39:f4:ac:d7:af:d8:72:97:f2:
                    0b:f6:86:24:99:49:8d:f6:03:bb:b3:38:39:2b:83:
                    90:6d:da:39:4e:ce:e6:e2:4c:4d:a6:88:0c:b5:69:
                    9b:d0:e6:b8:b4:f9:ae:99:82:40:6f:c7:e5:67:a4:
                    89:eb:07:69:ae:b1:31:56:26:f3:e4:d6:7d:4b:e6:
                    e3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:48:B6:75:E5:0B:B8:C7:DD:44:CC:EB:A6:07:A8:3F:AD:46:46:2B
            X509v3 Authority Key Identifier:
                keyid:7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f6:7b:06:a0:f6:f4:e3:3d:23:db:60:25:7e:64:cf:e8:34:
         d1:47:bb:43:54:51:c4:3d:7c:8a:8d:b8:de:c5:12:73:0d:cd:
         7b:29:1d:e4:94:8e:7a:53:3f:0e:b9:d5:03:9b:17:73:4d:6f:
         e4:2f:c5:b1:4e:e4:91:a8:e8:b7:de:e2:36:bd:50:2f:90:69:
         5c:0c:06:7f:07:4c:5b:bc:c9:95:3e:fe:fa:a1:52:d3:a3:bc:
         0c:d1:cd:97:9a:52:dc:11:e2:6f:f7:5a:49:d3:ae:b8:0a:44:
         26:d8:ee:03:e9:54:0d:a2:72:14:27:c4:dd:69:25:9b:c4:ca:
         7b:a9:de:52:7d:57:15:da:08:c7:f0:fa:6b:ba:43:3b:c7:65:
         f0:bf:7b:8c:34:4b:ad:16:58:cb:8e:e0:17:77:d0:51:9b:69:
         18:78:2f:24:d5:ff:95:56:27:02:1d:1a:26:cb:44:34:5b:eb:
         cb:b6:95:f4:83:20:41:64:b1:05:ec:8c:2d:86:af:6a:46:65:
         a0:ad:fb:0b:c1:58:9a:69:87:f7:1c:a2:f3:ad:21:f4:40:cb:
         66:02:e7:6c:20:df:e6:30:83:5a:81:1c:0e:46:52:37:dd:42:
         8f:42:13:d1:4a:85:33:10:95:fc:d5:59:10:b1:89:53:87:aa:
         5c:20:7b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:55:50 2025 by rpki-client