Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
File:                     fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft (raw, json)
Hash identifier:          SKz7JkTExa4X4rehpWcpi/OqoHNb4W/Rhq65UdhbgZo=
Subject key identifier:   BF:56:1C:35:39:CC:C4:0B:92:07:6C:77:C4:63:8D:7F:F1:B9:D5:D1
Authority key identifier: 7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85
Certificate issuer:       /CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
Certificate serial:       0196545C62E1F0C0786D8BDA3346965ACD2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
Manifest number:          09DF
Signing time:             Sun 20 Apr 2025 18:01:02 +0000
Manifest this update:     Sun 20 Apr 2025 18:01:02 +0000
Manifest next update:     Mon 21 Apr 2025 18:01:02 +0000
Files and hashes:         1: fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl (hash: jKd/TehDf0VxBW9vV7Dd+h/3D+7IM5dUzuQSubJEjQA=)
                          2: mCKGYv7Hn8VpwzSrofG5k1K1u28.roa (hash: LkkBVbT8cmI52OeplrbujyTxipUcCUujJaGi2zW5iDw=)
                          3: o74rBkwgi-OLyw8qLeq0VZnWs9M.roa (hash: XmOmIlqK0EcHoxKDnpHB1Iv3cjgrTtgXMu4pU/uNCvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:5c:62:e1:f0:c0:78:6d:8b:da:33:46:96:5a:cd:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
        Validity
            Not Before: Apr 20 18:01:02 2025 GMT
            Not After : Apr 21 18:01:02 2025 GMT
        Subject: CN=bf561c3539ccc40b92076c77c4638d7ff1b9d5d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3b:f4:c6:d3:de:d3:7d:22:e7:8a:9e:ce:d5:
                    4d:8e:a1:c2:be:cd:08:a5:fa:35:b5:56:26:0b:29:
                    88:f6:9b:77:eb:9c:e5:75:bb:c8:53:59:99:6c:b6:
                    84:a2:81:c9:07:07:2c:92:1e:08:80:1b:e8:0e:8d:
                    36:b3:f2:30:b8:b9:e6:ec:1a:df:aa:a7:a1:26:67:
                    67:b9:ab:76:03:67:9c:e2:d8:c8:07:a4:73:c2:a1:
                    9c:94:7a:d3:19:a2:66:43:b3:e8:3f:d2:99:57:14:
                    ff:42:da:a7:db:a2:cb:6a:e6:65:ed:93:ed:09:cb:
                    2e:b5:7f:8b:52:20:dc:f3:84:42:12:46:f5:a2:db:
                    3a:93:8d:2b:a1:1e:a6:f2:a3:92:5c:a2:fc:d9:40:
                    43:3a:ef:7b:f0:f5:be:91:a5:a7:c5:4a:7e:bd:80:
                    28:6c:2a:da:36:b5:30:a5:f6:6d:61:a8:5a:a2:5a:
                    2f:7a:9f:4e:5f:a4:56:68:fa:cf:8a:61:8d:87:05:
                    cc:b6:b2:d1:f6:83:a5:ae:b0:b4:ff:63:47:88:b2:
                    7e:ef:2f:6f:25:a9:eb:d3:c3:ed:80:6d:69:e5:c7:
                    5b:10:94:0e:e4:99:8a:bc:ab:97:f4:ca:fc:97:03:
                    f4:13:dd:a6:cc:4d:0e:ff:09:a4:c7:5d:8b:85:69:
                    39:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:56:1C:35:39:CC:C4:0B:92:07:6C:77:C4:63:8D:7F:F1:B9:D5:D1
            X509v3 Authority Key Identifier:
                keyid:7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:30:89:3b:c4:a2:32:79:45:84:47:fe:6c:dc:02:57:34:f7:
         1a:0e:08:33:fa:ab:93:74:7d:39:39:9c:5e:3c:36:37:d3:2e:
         e7:49:5b:c4:fe:02:49:f3:ba:d2:1b:b3:3e:7c:bb:f9:91:4e:
         87:44:e2:c0:11:59:d3:9b:f6:12:a9:ff:3b:f7:8f:5c:bf:61:
         c9:76:a2:19:4f:a1:6b:c8:82:a2:9c:39:31:da:1d:32:7b:d3:
         03:e6:73:4b:dc:3d:f1:2a:6d:0c:b7:b5:58:31:2c:d4:82:1f:
         3e:dd:31:5d:0f:ee:4e:89:67:59:59:58:ad:b7:ca:89:e2:b7:
         17:f3:bd:b4:16:ce:ed:ea:67:56:32:7a:9e:4d:9e:a3:e2:ea:
         90:91:35:4f:e9:83:83:7c:d3:19:e7:f7:1f:9e:43:7a:a2:4e:
         c7:64:1f:76:6e:31:79:cf:3b:34:cc:61:ed:33:3f:8c:b1:50:
         e9:c4:99:e7:92:e3:ff:5f:2e:c9:2e:5b:ff:fc:43:64:cf:3e:
         d3:85:fc:df:c1:10:44:6a:7f:ef:ec:cb:f0:48:22:cc:cb:f0:
         01:bc:a4:78:78:ea:9c:22:50:cd:ae:75:f0:7b:93:d6:5e:52:
         cc:e1:6f:0b:85:85:4a:31:43:28:1f:95:93:ba:fe:15:f7:e1:
         2c:c2:6b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:36:06 2025 by rpki-client