Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
File:                     98Dr2f99xugfjDVIx8LozceWfW8.mft (raw, json)
Hash identifier:          LiGa+k/pMWXbdf1377IHh6wFmkc3joYW54nitx8KKVM=
Subject key identifier:   AA:CC:AF:39:56:51:C5:AE:15:10:ED:71:8E:45:A0:C1:0D:D6:AC:65
Authority key identifier: F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F
Certificate issuer:       /CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
Certificate serial:       01964A466B68B180829CD2803845E79DD196
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
Manifest number:          0CCE
Signing time:             Fri 18 Apr 2025 19:00:51 +0000
Manifest this update:     Fri 18 Apr 2025 19:00:51 +0000
Manifest next update:     Sat 19 Apr 2025 19:00:51 +0000
Files and hashes:         1: 98Dr2f99xugfjDVIx8LozceWfW8.crl (hash: ZpKYaYNF/vZsCv83oXzEXRjIYLsMITX/f940tBxhM3Y=)
                          2: xGM69jz3lBB1TpIDVJ5nLe6CA9c.roa (hash: SYU2Je8e6GjpcEI+Nr3BgTNyIlBoXqCEqRNdDn2ooEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:46:6b:68:b1:80:82:9c:d2:80:38:45:e7:9d:d1:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
        Validity
            Not Before: Apr 18 19:00:51 2025 GMT
            Not After : Apr 19 19:00:51 2025 GMT
        Subject: CN=aaccaf395651c5ae1510ed718e45a0c10dd6ac65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fa:f5:c6:6a:a1:cf:d7:be:f5:f0:6a:c4:81:
                    cd:42:38:3c:5b:3d:45:67:ce:05:2f:88:db:c3:87:
                    1c:47:c4:e4:f7:c9:25:2e:0c:cf:d3:58:fb:29:cb:
                    d9:ba:5a:92:59:54:79:15:82:35:4e:42:94:1f:0a:
                    9d:d0:a6:26:5c:64:be:f3:b9:e1:b4:0f:12:1b:c5:
                    e4:44:db:bd:69:8c:e1:d6:42:7f:7d:e0:7e:c7:a5:
                    36:6b:a5:c4:de:0a:a6:55:d7:69:c9:bd:a0:a9:a7:
                    ff:2f:c2:c7:bb:12:f8:27:91:06:35:b6:ed:75:8b:
                    c8:91:f3:06:33:c6:9f:2f:14:dd:1f:58:01:33:c4:
                    fa:bd:30:ce:f0:fd:93:54:e2:0c:cc:13:7b:23:36:
                    e7:24:ae:86:48:db:b4:52:23:11:3a:d1:d4:da:f1:
                    89:87:60:39:7e:8f:87:96:96:c9:08:8e:59:5d:5b:
                    3a:d4:14:54:c4:1b:5c:05:34:49:bf:de:fd:a5:a1:
                    85:59:05:df:f6:48:b2:23:5f:7b:2e:61:a4:45:81:
                    76:1b:73:01:ba:42:d9:63:66:5b:82:2a:e9:7e:79:
                    59:2e:67:bc:2f:07:c1:0e:a4:d9:31:aa:b2:a2:fa:
                    c7:27:7b:e6:84:e6:39:37:2d:b7:69:01:2e:7b:a2:
                    1d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CC:AF:39:56:51:C5:AE:15:10:ED:71:8E:45:A0:C1:0D:D6:AC:65
            X509v3 Authority Key Identifier:
                keyid:F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b7:44:94:03:a5:c9:70:c9:4b:d7:f6:45:c4:9f:dd:ac:f2:
         0f:7f:85:7d:13:40:43:e1:95:9a:f9:1d:47:08:51:1a:7a:db:
         e1:01:1c:0e:a7:27:46:b1:28:11:b5:fc:61:63:b2:62:df:5e:
         4e:b2:4d:73:1e:42:68:fc:49:8a:e9:3f:3c:1f:c1:cb:e5:87:
         12:de:50:2f:8d:d6:45:cc:ca:f5:1a:40:ba:f8:40:de:ca:dd:
         58:41:ae:f6:9f:81:ae:32:0d:73:dd:c9:9d:cf:85:29:1a:82:
         13:b8:0f:3c:1f:c4:25:89:ad:2e:81:68:07:9a:70:a4:46:85:
         de:48:d7:81:2b:a9:a9:4f:56:b6:e5:fd:65:6b:55:26:0b:c8:
         c2:85:74:19:2b:38:60:27:2e:df:41:93:bd:80:d8:42:d6:5b:
         85:d3:57:48:9a:b7:85:4b:02:74:55:a9:fa:c9:4b:76:fa:88:
         ad:71:f5:2c:26:1e:03:1e:50:40:98:fe:3c:53:71:bb:e3:4d:
         9a:b3:15:89:de:b3:9d:b8:ea:15:07:b7:ad:99:0e:7c:58:ee:
         12:b2:21:0c:6b:84:4a:b8:d4:c4:06:d7:07:c0:a9:c8:35:57:
         62:27:09:8e:d7:98:ff:27:c7:a8:dc:44:bc:d6:b5:e1:95:63:
         02:51:37:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:40:17 2025 by rpki-client