Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
File:                     f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft (raw, json)
Hash identifier:          NIKD5C3borwN3U6h1opr00ZJNAfNvBtSzoEsty/mofQ=
Subject key identifier:   C6:4E:F6:89:C3:80:6B:F1:1D:2F:36:E2:F1:9C:8F:C4:32:9D:34:1F
Authority key identifier: 7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20
Certificate issuer:       /CN=7fefebd15fbc651487acaf67424f4783d43eb420
Certificate serial:       019643D6F5179CAAB9CE210C14EC7A8EBF87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
Manifest number:          14F0
Signing time:             Thu 17 Apr 2025 13:01:22 +0000
Manifest this update:     Thu 17 Apr 2025 13:01:22 +0000
Manifest next update:     Fri 18 Apr 2025 13:01:22 +0000
Files and hashes:         1: f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl (hash: SVozBmHmZQT9+Qzwt6aYutW/DCWWKVMHoXo6L2gkhrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 13:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:43:d6:f5:17:9c:aa:b9:ce:21:0c:14:ec:7a:8e:bf:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fefebd15fbc651487acaf67424f4783d43eb420
        Validity
            Not Before: Apr 17 13:01:22 2025 GMT
            Not After : Apr 18 13:01:22 2025 GMT
        Subject: CN=c64ef689c3806bf11d2f36e2f19c8fc4329d341f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8b:fe:f8:11:f8:84:57:51:de:6c:ad:ad:60:
                    e7:9f:96:1d:e3:34:83:65:fe:f1:7b:65:54:ef:35:
                    2d:5f:03:25:6f:8b:d0:82:49:c8:17:8e:bb:b9:5f:
                    42:a4:46:a4:8b:90:79:bd:3b:d1:6c:55:1e:c3:f0:
                    18:c6:01:c2:e4:f0:97:49:a0:a5:e3:24:5c:78:fd:
                    af:fc:c7:09:df:79:f4:01:ee:84:62:42:bb:f7:8c:
                    1b:4a:8b:db:b3:3b:b1:56:3e:c0:43:1f:77:47:c3:
                    b1:b3:d9:25:46:b2:22:7f:b9:94:3b:a9:a8:a7:5c:
                    79:03:9d:46:2c:c7:99:84:8f:a3:73:2b:10:9a:e2:
                    3f:28:a5:28:47:35:c8:c1:b0:ee:5d:82:ce:ea:cc:
                    b0:bd:d7:9c:28:fb:dc:f9:d3:1f:c9:ed:1f:13:59:
                    12:a4:b5:28:c7:af:28:96:5c:d7:de:4c:d7:f0:76:
                    42:54:28:eb:81:63:96:d5:6f:fd:f2:88:ce:77:71:
                    cd:f6:64:11:9b:ab:ba:0c:de:e6:a8:0a:bc:0d:7a:
                    55:c7:0e:cb:5a:75:4c:50:0f:42:63:fc:08:2a:3b:
                    1e:c4:e7:f3:cd:0a:ef:6d:36:1f:4b:6e:fc:4c:f0:
                    e4:52:65:95:83:55:69:08:a5:a3:8f:24:1f:75:7b:
                    9f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4E:F6:89:C3:80:6B:F1:1D:2F:36:E2:F1:9C:8F:C4:32:9D:34:1F
            X509v3 Authority Key Identifier:
                keyid:7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8c:3e:b8:fe:d8:07:ee:d0:ac:21:ab:c4:dc:47:04:43:a8:
         82:4b:e5:4c:20:f6:db:af:5d:cd:6e:73:1b:9a:eb:d4:6f:30:
         a1:b2:1b:09:55:b5:62:65:92:cc:54:6d:9f:68:29:c4:f0:70:
         4b:34:10:df:b9:71:c6:a6:57:3f:8c:86:65:83:3d:f2:00:ca:
         fb:79:5c:a8:eb:0b:a3:5b:28:07:c6:15:80:0d:e2:4d:8c:cb:
         d5:85:7a:22:7e:52:62:20:e4:3f:0b:a5:16:f9:b7:07:56:f4:
         91:65:5f:6f:b4:cd:cc:61:09:cb:3a:4a:78:4e:8e:0e:59:40:
         ee:8e:f7:15:70:79:c5:d9:67:ea:5c:85:c4:4e:db:46:38:92:
         b6:50:ea:75:c7:d3:73:04:68:a9:0a:a5:f0:c7:6e:34:97:26:
         18:01:5c:ea:a7:0a:20:28:82:2b:6d:67:75:87:a5:2c:45:84:
         d4:67:63:fc:69:5b:c1:86:3d:90:16:1d:f4:0e:6f:92:67:72:
         82:dc:05:42:fe:92:c5:c8:e7:7c:c5:d1:20:9c:09:8b:32:d3:
         88:7c:c8:bf:40:bb:b8:05:e9:cd:5f:7b:aa:72:8a:26:32:95:
         0d:92:cc:33:ee:ff:42:1a:5d:3d:d9:35:14:1f:7d:8e:08:fa:
         44:c5:0c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:25:29 2025 by rpki-client