Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
File:                     F92cI69p7Czbb-K5k260lM_RYh8.mft (raw, json)
Hash identifier:          RGyxVCmgjz19Rq5/sqR5POsVCBL5VBzC5MFYz50WgCs=
Subject key identifier:   78:8B:11:48:BC:1D:5F:95:DD:93:7B:36:95:0B:58:B1:AF:04:86:A7
Authority key identifier: 17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
Certificate issuer:       /CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Certificate serial:       01960E323F5E7B9BED1388F5FA3E747FCF01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
Manifest number:          14E7
Signing time:             Mon 07 Apr 2025 03:01:36 +0000
Manifest this update:     Mon 07 Apr 2025 03:01:36 +0000
Manifest next update:     Tue 08 Apr 2025 03:01:36 +0000
Files and hashes:         1: F92cI69p7Czbb-K5k260lM_RYh8.crl (hash: /gpS+TTpPUqHQBw5hIljGOedcW/OQniUDqzZmYXJs4s=)
                          2: Kj5ZZT_QMGV8ggXHA75R7vnwc-Y.roa (hash: p+eVg1Sb75Egr4y3obi4lrz5P3sy7D8NwnWNwRsHb70=)
                          3: NIDKHm7_cZUNMihpKQDzfd-ZjRA.roa (hash: kaf5wyEDhcWh11clAHcF36F7W+dfPnAjUXKofTGxPck=)
                          4: PGLRT7UqxBVt5ZGCBsJhv8rP6qQ.roa (hash: RTH/rFrhQw74U5knflYk2x+P7ymGF/LwjJP/pIPOpvM=)
                          5: amXihoIti_1rSNyGXmBzzCK307E.roa (hash: nLmxvSWML2dah+dCWe4SPAyANy3yKBIMLrJwHa4DIEM=)
                          6: cmnKESnx3pYzc_9zB3Nnd1QMDJ8.roa (hash: yO89D9gVpePds41T+w6tzQYVY3S3xzIRop0YPL+B3+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 03:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0e:32:3f:5e:7b:9b:ed:13:88:f5:fa:3e:74:7f:cf:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
        Validity
            Not Before: Apr  7 03:01:36 2025 GMT
            Not After : Apr  8 03:01:36 2025 GMT
        Subject: CN=788b1148bc1d5f95dd937b36950b58b1af0486a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:24:8c:23:89:07:c8:01:6f:a1:90:25:db:7d:
                    3c:3a:e9:b6:e8:3d:8d:46:09:d4:f1:ba:36:12:79:
                    0f:08:09:ad:f5:7f:6a:7a:a7:d4:20:a7:7b:b6:31:
                    eb:c7:08:4e:09:6c:1c:86:da:02:5e:9f:0a:c0:40:
                    f8:89:f9:2b:62:7a:0e:de:40:0f:8d:bf:a5:58:98:
                    cb:37:5b:97:f1:06:30:fe:ab:43:f0:b7:a6:26:ac:
                    ca:6f:10:3c:a7:70:6c:f1:84:12:35:04:24:b2:79:
                    38:0a:1c:ea:1b:68:c2:c4:cc:56:b5:a6:44:f7:b5:
                    22:c6:da:fa:b4:38:25:37:3b:d8:af:55:f0:56:5a:
                    29:f2:8d:0d:a1:da:ab:81:e3:73:92:ad:23:a1:9b:
                    31:7f:ba:5d:b1:1c:3b:55:f5:00:4e:6e:d3:a1:4f:
                    0c:4f:c9:3b:ae:58:25:ab:61:d3:08:2f:8a:11:10:
                    33:dc:96:48:65:a3:0a:46:a9:8d:83:34:59:62:0b:
                    05:87:df:c5:f1:b1:2c:e7:dc:11:53:45:70:9b:b2:
                    68:ef:1c:8c:05:bc:e7:9c:a9:30:b4:d2:60:94:d3:
                    1b:49:8b:bb:df:87:65:0c:3d:5a:d6:ae:b1:40:4c:
                    66:5a:36:1c:36:16:d1:9d:23:68:99:f2:38:2f:26:
                    16:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8B:11:48:BC:1D:5F:95:DD:93:7B:36:95:0B:58:B1:AF:04:86:A7
            X509v3 Authority Key Identifier:
                keyid:17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:6b:27:bc:60:e6:20:e3:c4:7a:7e:9c:5a:09:0f:ac:f1:ab:
         4e:22:81:f2:a6:24:d0:2f:64:f5:e6:f1:39:32:4b:e2:40:c2:
         9f:7e:52:cc:91:82:a2:68:ed:03:a0:ff:77:dd:6f:b8:32:0a:
         3a:80:3a:ef:91:23:7a:bb:7c:03:23:9b:c2:d3:82:73:ac:8d:
         c1:06:d4:c4:07:0d:89:72:0f:52:5c:ed:e8:34:f8:93:00:b5:
         ee:c4:91:f7:68:8a:97:68:a7:26:5e:78:1e:80:db:d9:e2:cf:
         9f:cb:5f:53:ab:99:3f:b8:09:57:68:78:17:d1:a3:df:d6:ce:
         e9:04:97:7e:22:5c:db:51:06:38:d3:f5:66:fa:d0:33:1f:01:
         91:5b:28:be:bd:37:0f:e4:66:b1:67:db:bc:5e:66:1b:c5:28:
         ec:98:e0:ad:f6:8d:9f:94:d9:bd:d6:c3:e6:67:59:f7:b1:5c:
         24:b0:c3:64:b7:28:af:6c:d6:75:a7:3b:20:af:48:3f:a0:55:
         ad:8d:94:1e:c5:35:c5:64:97:01:7d:d6:92:f3:fc:de:be:8f:
         75:25:fa:2e:ef:d9:a8:e4:3c:6d:90:bb:c9:57:11:9a:ac:21:
         35:78:80:22:07:62:59:e6:02:0a:d5:1a:fb:c4:62:a7:ee:eb:
         52:c3:2d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:55:49 2025 by rpki-client