Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
File:                     fmdQ5YygordfLFO99vYf9j7IMcs.mft (raw, json)
Hash identifier:          HrSkhglu5TBy4X3Q7kmhzI02IDqSuZ5tIsbQy/TkcIo=
Subject key identifier:   6A:24:38:44:C1:C1:33:A3:84:4D:7E:D8:D9:6D:7F:8B:67:7C:3B:33
Authority key identifier: 7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB
Certificate issuer:       /CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb
Certificate serial:       0196458DCF24BEFB414A9C3715DFD9E7BDFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
Manifest number:          14F6
Signing time:             Thu 17 Apr 2025 21:00:43 +0000
Manifest this update:     Thu 17 Apr 2025 21:00:43 +0000
Manifest next update:     Fri 18 Apr 2025 21:00:43 +0000
Files and hashes:         1: 1jPmqvt1ilYlmNcTs9vv0mQwV2Y.roa (hash: eLo4dRJvSmA8RvGBVuxw5fjwL9gDtsf1LW0xwTy98e0=)
                          2: fmdQ5YygordfLFO99vYf9j7IMcs.crl (hash: rRRgogLbXDC9QBn842ZKx8KlhlnatPOuqTIX1+NIlm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:8d:cf:24:be:fb:41:4a:9c:37:15:df:d9:e7:bd:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb
        Validity
            Not Before: Apr 17 21:00:43 2025 GMT
            Not After : Apr 18 21:00:43 2025 GMT
        Subject: CN=6a243844c1c133a3844d7ed8d96d7f8b677c3b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a8:7d:8a:60:7b:a5:20:63:08:2e:1b:5f:21:
                    6b:e7:97:0a:09:ad:8a:ca:f7:d6:a6:17:a3:11:f3:
                    e0:b7:f9:57:53:07:e3:6c:c3:9f:81:e1:32:93:df:
                    03:19:d0:d7:99:7c:b0:c5:03:cb:b5:52:2f:5a:be:
                    e5:25:ef:49:9e:88:bc:31:f7:c3:cd:98:9a:40:fc:
                    cc:be:4e:c2:cf:2d:a4:0d:99:03:36:ae:80:b2:07:
                    2c:78:c9:ef:b9:38:9c:19:c2:11:1d:bd:f3:ac:93:
                    03:59:de:ae:3b:2a:95:f6:88:3c:76:94:92:73:82:
                    6d:18:ff:0b:5c:a8:7a:93:de:a9:d3:32:92:b5:b6:
                    8c:f2:da:d3:2e:cb:75:a3:50:07:49:7d:22:cb:14:
                    95:9f:d5:ed:91:49:37:71:1d:17:2d:f7:63:60:03:
                    61:48:29:9d:1c:fa:c2:f1:9d:3d:e3:72:52:01:f8:
                    38:21:8b:e5:83:c0:79:62:87:29:2a:61:fd:bc:53:
                    5c:4f:53:c1:47:8c:3c:b1:8f:45:96:05:02:24:f0:
                    47:29:ae:83:83:f7:3d:38:b0:71:fc:04:42:00:75:
                    7b:65:c0:d8:0e:4e:74:ae:5b:3e:ab:87:db:39:cd:
                    eb:a6:56:02:ed:86:b4:f5:ba:ae:58:22:1d:04:22:
                    1d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:24:38:44:C1:C1:33:A3:84:4D:7E:D8:D9:6D:7F:8B:67:7C:3B:33
            X509v3 Authority Key Identifier:
                keyid:7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:71:ab:cc:a2:f6:f5:4c:7e:2e:b3:47:ab:8d:f7:0e:09:46:
         90:c2:d0:47:77:32:bf:07:eb:ee:8e:c1:10:6e:4a:d4:47:a5:
         80:9a:a1:20:8d:aa:14:b2:e8:0f:68:48:a2:33:cf:b7:77:a5:
         54:65:cc:78:c6:c2:6b:38:6f:90:6c:58:2d:a8:ec:a0:37:24:
         b4:34:c8:d6:ff:14:64:9b:9d:fd:42:4f:f9:1b:d7:fb:47:6b:
         33:3b:d5:72:32:0d:98:9d:9c:52:cf:d0:ba:15:ba:92:cf:83:
         5c:88:a0:ad:69:be:8d:87:75:ca:7c:3f:df:b5:a8:6f:6d:69:
         2d:be:c1:95:c3:42:9b:e8:f8:16:65:99:7d:10:53:e0:2d:f6:
         fc:29:fe:b5:ba:6a:cc:a6:d0:bc:28:ff:3e:cc:38:34:0e:d7:
         cc:9b:d8:f6:26:8d:5e:e9:d2:4e:79:6b:db:82:6c:06:3a:2e:
         35:e0:5c:97:64:75:d5:4e:bf:64:f6:88:c0:f7:cc:98:8c:75:
         5d:66:ae:ca:bf:b3:1b:16:30:da:28:53:36:28:c4:44:a7:c6:
         7c:f0:bd:10:e1:48:c0:8c:ec:3d:3f:ea:95:6d:dd:66:9f:5d:
         78:e9:79:b4:7d:f2:cb:9b:06:0a:2d:11:0c:11:65:60:83:34:
         02:c0:88:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:34:47 2025 by rpki-client