Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
File:                     F2YCXZOeDHsc9GwCGez6JaGVOCU.mft (raw, json)
Hash identifier:          7nUQkj5KqtTy15zlyimiKFYvmyWwssy9L/yO7yqm1bg=
Subject key identifier:   74:50:F0:5F:94:F4:3D:38:FD:94:97:27:B4:1D:C5:FE:07:90:6D:19
Authority key identifier: 17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25
Certificate issuer:       /CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
Certificate serial:       01964E2389226A008B308796472B94BD7831
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
Manifest number:          14F8
Signing time:             Sat 19 Apr 2025 13:01:13 +0000
Manifest this update:     Sat 19 Apr 2025 13:01:13 +0000
Manifest next update:     Sun 20 Apr 2025 13:01:13 +0000
Files and hashes:         1: F2YCXZOeDHsc9GwCGez6JaGVOCU.crl (hash: QOxRX+VYZWofEcwqa8SRL4JOTc6mBnPIK4SXEXo6qg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:23:89:22:6a:00:8b:30:87:96:47:2b:94:bd:78:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
        Validity
            Not Before: Apr 19 13:01:13 2025 GMT
            Not After : Apr 20 13:01:13 2025 GMT
        Subject: CN=7450f05f94f43d38fd949727b41dc5fe07906d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:cc:a9:66:a2:b6:08:c5:4b:98:4e:10:da:
                    bf:fd:55:62:b0:37:47:b1:ad:9a:ca:d0:c8:a6:46:
                    d9:ff:7b:1d:ab:dd:6a:06:8b:33:fc:3c:c7:e9:65:
                    12:20:25:8e:59:79:46:18:ce:3b:90:c5:b8:29:47:
                    ed:69:e5:35:cc:0f:60:12:5b:88:69:97:79:d0:d6:
                    fb:26:13:c2:c2:59:ae:a7:fb:d4:80:75:5b:92:f7:
                    9e:57:4d:fb:70:77:4f:2d:cc:7f:ba:f7:5b:76:0d:
                    90:5d:6a:a9:0e:a8:cc:ea:b7:74:d8:7a:9c:4e:09:
                    6e:b2:7b:f9:3b:4a:2a:b7:0b:2d:2f:bd:da:a6:33:
                    0c:89:47:91:c7:18:84:33:0d:cb:cb:00:a6:df:7e:
                    da:45:64:6c:c7:2b:04:d7:d2:cf:d6:56:1a:5b:a7:
                    f7:90:11:65:d8:56:ab:79:bb:07:39:a8:05:7a:b7:
                    96:c3:df:a2:86:d2:79:99:a3:a4:d0:ae:a5:cf:17:
                    bc:7b:4c:a8:5f:c3:56:bc:d7:6b:9c:d7:26:cb:cd:
                    fb:5a:2a:e2:ef:61:ad:6b:99:f9:71:f1:3c:07:9a:
                    54:23:88:f6:63:f9:3c:65:8d:80:a7:63:da:1d:36:
                    e0:4f:05:83:cf:b2:2b:97:c4:5d:61:c1:20:4d:39:
                    6e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:50:F0:5F:94:F4:3D:38:FD:94:97:27:B4:1D:C5:FE:07:90:6D:19
            X509v3 Authority Key Identifier:
                keyid:17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:f7:42:36:8c:f2:c8:84:95:55:b9:58:ea:2e:72:b2:14:aa:
         36:71:ca:5a:13:27:6c:06:91:19:86:2e:1c:c8:22:f2:67:0e:
         34:ea:20:41:77:75:18:0c:dd:ac:48:92:d3:78:87:73:91:86:
         38:f9:17:7a:1c:96:6a:fa:98:57:40:ec:20:78:07:01:80:01:
         b9:14:09:50:89:35:d6:5d:ed:d4:19:3e:9f:94:c0:24:b8:8b:
         c2:56:72:bf:5e:28:ac:a4:2e:d1:96:d2:5a:eb:a1:88:56:a1:
         73:25:ce:e4:e2:36:20:ea:e6:44:e3:cb:26:db:4a:58:5c:96:
         70:20:1a:34:14:9a:82:8a:a9:b1:6c:2f:e2:0c:59:81:88:99:
         99:ee:c0:2c:00:3b:ba:b7:af:95:cf:eb:7a:ec:ed:bc:5d:16:
         5a:96:fb:d1:4c:db:81:bc:d0:1e:0f:14:aa:96:32:86:c5:d3:
         9c:0a:72:7c:6b:55:9c:40:69:a9:84:ec:bf:55:ec:de:75:96:
         7c:22:b2:c1:2e:2f:b8:8e:76:70:a7:a3:28:de:3b:14:f5:7a:
         0a:6e:7e:d8:ac:40:9b:fe:dc:af:82:f1:0d:0f:6e:cb:94:e4:
         f0:c8:ea:2a:59:76:43:8e:bb:c6:f0:f4:af:77:8a:a9:39:ce:
         d3:ed:56:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:45 2025 by rpki-client