Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
File:                     _PXwgDHjWvlUXTrT0TjK0QOW4so.mft (raw, json)
Hash identifier:          W6BVxMpMWVMoXad+n72259cFXLoOBwu1Zalecn1v2HQ=
Subject key identifier:   E9:74:18:3C:F9:39:95:AC:A7:B7:9A:9E:2D:34:07:61:28:64:33:67
Authority key identifier: FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
Certificate issuer:       /CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Certificate serial:       019645568711D2A21689CEF908F86A5093F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
Manifest number:          14F4
Signing time:             Thu 17 Apr 2025 20:00:20 +0000
Manifest this update:     Thu 17 Apr 2025 20:00:20 +0000
Manifest next update:     Fri 18 Apr 2025 20:00:20 +0000
Files and hashes:         1: 27ql0pmKcM7odOuyt-r9IUbz8H0.roa (hash: 8BtUKmV8OD/wNsVNWexZC4Gh5lDDpl/q9sI4sznft7k=)
                          2: _PXwgDHjWvlUXTrT0TjK0QOW4so.crl (hash: z/wojpOnSMRk5pHWJbGDJv8/zRLZ/VQQ4+Nz1JwJd0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 20:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:56:87:11:d2:a2:16:89:ce:f9:08:f8:6a:50:93:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
        Validity
            Not Before: Apr 17 20:00:20 2025 GMT
            Not After : Apr 18 20:00:20 2025 GMT
        Subject: CN=e974183cf93995aca7b79a9e2d34076128643367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:23:62:02:7c:12:db:84:07:0c:c1:ad:02:2d:
                    fa:ee:51:d7:3b:fa:26:19:26:45:22:fc:51:4a:cb:
                    a5:f7:7a:52:fb:f5:e9:bd:f5:ad:28:7c:55:30:1b:
                    47:07:e7:51:45:85:98:e1:b8:e7:67:31:f1:b8:df:
                    9c:79:f8:ca:68:15:a4:5f:0c:d7:dd:73:32:92:0f:
                    a1:1f:95:e5:dd:f6:ef:f8:f3:19:fb:fa:0e:65:cb:
                    64:7e:7b:7b:8a:48:7a:6c:10:3e:d6:06:b9:d2:78:
                    c6:ac:e8:86:58:1d:ba:bc:f2:f2:ef:bd:6d:5a:f6:
                    aa:4c:cc:cb:6d:3d:b1:9b:54:53:a5:27:57:c2:b1:
                    4f:42:1f:bc:65:bf:ca:29:38:c6:98:bd:aa:28:ca:
                    f9:76:fe:1c:15:f1:1e:97:b0:7d:f6:1e:e8:a5:ae:
                    0d:71:52:a9:a1:3a:ab:0b:f2:9d:8c:13:7c:67:e1:
                    73:7a:24:26:cd:5e:16:cc:e2:d6:19:03:2b:fb:4f:
                    2e:5c:9f:94:24:71:52:0b:7b:96:aa:60:f3:be:53:
                    e8:e7:2f:ea:f3:51:cc:e7:8d:e0:3b:ce:b4:d5:15:
                    e9:50:6b:78:9d:e7:3f:28:45:ad:89:62:4c:2e:46:
                    c8:7b:98:e5:ef:52:62:31:a6:be:fa:df:d0:4b:1f:
                    77:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:74:18:3C:F9:39:95:AC:A7:B7:9A:9E:2D:34:07:61:28:64:33:67
            X509v3 Authority Key Identifier:
                keyid:FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:3e:44:85:7f:a2:56:27:0e:97:2a:94:d0:5a:0b:d5:a0:7f:
         7b:b3:75:cc:28:6b:05:83:2d:0b:84:ee:7d:d9:b6:d1:81:0e:
         08:f8:07:ca:c6:7e:ca:e4:1c:e3:3a:18:60:28:03:c8:94:ba:
         2e:df:4f:92:ef:48:84:3a:29:13:16:4c:f1:79:3f:78:47:7b:
         37:d9:29:11:6c:7b:0c:22:50:e7:bb:72:8c:c2:7f:1b:4d:3d:
         0d:e2:fd:e6:ef:89:ff:5e:67:98:10:cc:2f:f6:65:f8:6f:4c:
         f8:63:3f:02:55:21:3b:24:a3:6f:c8:71:6c:6b:9f:24:8a:6b:
         62:90:2d:98:6f:d1:8d:8a:da:a6:61:47:56:9e:4d:e7:a7:ba:
         13:3d:00:50:68:d8:93:b3:54:ff:af:b8:ca:f8:d2:bc:b8:c4:
         66:56:a4:f9:e6:9f:4f:96:31:46:3d:d1:bd:79:28:97:b2:e7:
         2e:d2:a1:11:37:e9:94:c8:cc:cf:c8:61:c4:a1:a6:2c:ab:da:
         66:b9:ea:88:f5:f9:26:2a:ca:92:d4:bc:5f:18:c9:df:6c:7e:
         e8:a3:5f:99:9a:7f:69:7a:d5:57:12:a1:bc:c6:37:e5:8c:8b:
         6b:65:e9:10:80:3d:e6:39:3c:7d:fb:b4:ec:a5:e8:fa:44:8c:
         24:ea:95:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:27:45 2025 by rpki-client