Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
File:                     fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft (raw, json)
Hash identifier:          bXgR0fqIqC558dgCV5W2iz+bo/q+KYg/K2D2GvHS/mI=
Subject key identifier:   A8:BE:09:FF:FA:E4:69:31:DA:90:46:4E:88:0F:62:00:FF:C5:49:39
Authority key identifier: 7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC
Certificate issuer:       /CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
Certificate serial:       019609E7300FFC2B39C7B89E8559A5ECE601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
Manifest number:          05B0
Signing time:             Sun 06 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 06 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 07 Apr 2025 07:01:08 +0000
Files and hashes:         1: Jd1eIDGJl1QDh5fslVgvr-P3ab4.roa (hash: 9NueyDXROvnNhsWjg24Z8AlYJzokwM8j1MgR7VDXl1s=)
                          2: fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl (hash: oRxxDN9pFhzKa8VoWLPJUpPMj3U6ZNvNVmuDbmQDlKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:09:e7:30:0f:fc:2b:39:c7:b8:9e:85:59:a5:ec:e6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
        Validity
            Not Before: Apr  6 07:01:08 2025 GMT
            Not After : Apr  7 07:01:08 2025 GMT
        Subject: CN=a8be09fffae46931da90464e880f6200ffc54939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:81:d4:9a:9b:cb:a3:34:09:fa:52:cc:1e:df:
                    c6:c4:a6:55:06:a0:38:5e:18:fd:2a:cf:67:18:4b:
                    06:f7:4d:71:da:aa:89:1f:1d:a5:0d:76:1d:de:52:
                    3f:d4:cd:ce:d1:12:a2:8f:9e:66:64:6c:a1:ac:1c:
                    fc:73:ac:9f:12:2c:05:f7:af:20:c7:28:31:e7:9e:
                    eb:de:2c:08:b5:7e:49:c5:c3:0a:2e:ce:e2:9a:2f:
                    8e:5c:09:53:b8:fe:aa:0e:95:ce:6a:1c:70:01:76:
                    02:24:4b:68:62:c4:d7:ff:ce:c3:f8:38:be:82:79:
                    c7:eb:9b:9b:0e:70:72:cc:85:fe:7f:64:4e:cc:ef:
                    7f:44:eb:d5:ee:7b:00:9c:85:be:3f:95:77:d3:7b:
                    4f:7d:c2:a3:10:73:ca:e3:33:92:1f:5d:d1:d2:dc:
                    f8:9f:ae:c9:50:48:78:61:e5:12:a0:59:b5:bc:97:
                    c2:24:71:ec:68:37:13:45:a4:0d:d6:b1:17:45:98:
                    ec:6d:82:0e:57:31:f0:2e:52:f3:35:cd:4a:55:b4:
                    9b:5a:1b:e4:7f:da:43:2a:91:4b:63:f3:0c:09:c9:
                    d5:12:9c:c7:ed:da:ff:0b:ff:1b:38:47:b5:e1:88:
                    59:51:45:3b:02:20:ec:37:12:8c:e4:31:70:eb:27:
                    bf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BE:09:FF:FA:E4:69:31:DA:90:46:4E:88:0F:62:00:FF:C5:49:39
            X509v3 Authority Key Identifier:
                keyid:7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:40:1a:f2:0d:5e:7c:26:2c:3b:9b:c8:fd:09:90:a8:7e:f1:
         3a:22:b1:37:53:d5:67:20:0e:53:4f:1e:a2:46:32:42:3a:b3:
         f9:c9:2c:cf:e7:2e:38:69:97:25:89:88:b1:e6:b7:20:86:64:
         cc:fb:f0:c0:fb:28:74:ce:3e:71:84:c2:c2:65:82:3c:47:33:
         98:fe:c4:5a:3b:02:5c:6a:df:d4:c9:9b:37:8e:92:f2:05:62:
         f7:53:e4:a4:0c:7e:33:cd:ad:7b:34:60:44:b1:e9:72:51:53:
         fc:89:a1:50:36:20:66:d7:91:28:57:12:3e:38:a0:a0:ff:ee:
         5b:c2:f8:f0:2a:a7:ea:4b:b9:ed:eb:b7:b2:3e:67:ea:b4:eb:
         5d:36:ef:c9:67:02:20:23:69:ed:79:bc:e1:8c:04:bf:8d:b2:
         15:13:c7:4e:43:83:8b:f9:38:8f:90:ad:b0:42:59:12:78:67:
         d2:9b:95:e7:ba:96:35:3e:a1:b8:96:7a:b1:17:4a:8f:bc:4c:
         bb:8f:fc:eb:f3:64:d6:79:ee:ed:64:b4:6b:25:ed:40:66:8f:
         9e:13:28:5c:f9:51:e7:a2:88:18:60:59:65:ab:96:27:a4:c0:
         52:fb:e9:f9:a0:76:26:b7:c0:2f:3a:ca:99:f3:23:8e:03:8c:
         ab:1c:16:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:00 2025 by rpki-client