Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
File:                     FumqrOUCeVhbXFpdjuhWEGhsJsA.mft (raw, json)
Hash identifier:          CKvBkvjvjgnFIB3V36Oqo24VuY/IvJ2pus8Y+94Bly4=
Subject key identifier:   C4:BE:61:C0:A1:00:EF:E1:99:BF:15:94:C8:76:71:C2:BC:C0:D5:68
Authority key identifier: 16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0
Certificate issuer:       /CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
Certificate serial:       01965011EABAB16F2A0ABCDA3292E36DD3DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
Manifest number:          14FA
Signing time:             Sat 19 Apr 2025 22:01:13 +0000
Manifest this update:     Sat 19 Apr 2025 22:01:13 +0000
Manifest next update:     Sun 20 Apr 2025 22:01:13 +0000
Files and hashes:         1: FumqrOUCeVhbXFpdjuhWEGhsJsA.crl (hash: O8D8v4+tW4XJ/oGLU56yHDZFw1ZvR8PMzt1IIMaI7uw=)
                          2: XHC_hDAqYlIYXrUHwPjCSmuap-w.roa (hash: QCdmiPzQ+fM9D3JEIMjhnM6hVdihEFRjXxcysEmoq04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:11:ea:ba:b1:6f:2a:0a:bc:da:32:92:e3:6d:d3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
        Validity
            Not Before: Apr 19 22:01:13 2025 GMT
            Not After : Apr 20 22:01:13 2025 GMT
        Subject: CN=c4be61c0a100efe199bf1594c87671c2bcc0d568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:af:1a:71:07:84:60:d8:53:f8:b0:ee:1e:43:
                    ed:ab:e1:b7:83:17:f8:94:67:d4:7c:71:26:25:90:
                    4d:a2:6b:e1:51:78:5f:f2:c4:61:9a:e9:f3:60:01:
                    80:a6:1e:c2:c6:99:9c:03:64:e4:82:d7:43:25:a1:
                    ae:56:80:a6:86:08:bc:70:14:ee:c1:b6:54:8e:ae:
                    99:d7:6a:de:aa:4d:63:3b:26:de:8e:3f:c9:e6:08:
                    2b:10:f0:14:d6:98:56:d8:9b:9d:50:7b:7e:71:2e:
                    f4:74:12:76:a2:6a:25:80:be:b8:e1:69:f2:a0:24:
                    42:75:b2:59:7f:02:6e:86:e2:e8:65:a6:16:b0:96:
                    0a:21:5c:34:c1:73:00:14:f4:76:1f:f9:eb:06:2e:
                    11:ca:05:de:df:50:68:fa:70:24:1c:96:89:75:0c:
                    1c:6b:a1:1d:58:96:20:fc:37:10:7f:3f:b3:bf:59:
                    6f:bc:b7:d1:61:d9:52:96:25:3f:28:8a:cb:81:80:
                    47:7d:00:3a:80:78:b4:1e:75:e6:cc:53:7a:20:f0:
                    6a:93:58:f0:af:af:c8:86:3b:05:19:6a:2f:8a:18:
                    16:a0:3e:29:3b:07:e0:14:2a:09:b7:36:d6:2c:a8:
                    c9:3a:35:15:54:db:50:e4:72:f8:5e:fd:11:9e:47:
                    ca:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BE:61:C0:A1:00:EF:E1:99:BF:15:94:C8:76:71:C2:BC:C0:D5:68
            X509v3 Authority Key Identifier:
                keyid:16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f7:d4:8c:95:7c:56:26:cb:29:c5:23:e6:88:f7:90:4b:bd:
         88:68:16:fe:2b:5c:e3:84:ed:14:29:19:bc:a1:a8:72:fc:13:
         c9:df:1c:67:67:9d:72:f1:87:c4:47:80:ed:31:19:60:2d:47:
         62:c2:8a:a8:60:3b:74:45:6a:8b:b7:ac:a4:03:7d:ac:a8:ac:
         e8:19:06:2c:2b:36:1c:9f:b2:ba:a6:a1:5a:3a:67:a6:be:9d:
         de:12:a6:9f:0e:9f:ed:6e:84:f4:2c:2f:34:6b:0a:1c:0e:cd:
         36:6d:54:b3:70:92:65:47:4e:98:8f:72:e6:fc:69:e9:15:86:
         35:29:40:4e:88:4c:db:7e:72:76:81:ee:7d:e0:35:db:2e:1d:
         4d:9c:60:2d:ec:00:39:90:f8:93:1d:3d:9f:ac:b6:89:66:0b:
         5c:e1:a3:c3:5c:f5:96:78:82:52:70:35:5a:3e:25:fb:9c:7f:
         f7:10:29:a0:e3:5f:c6:8b:bb:61:95:0f:92:22:3f:a3:83:3a:
         05:bb:5b:b5:39:a1:d3:b6:81:f5:68:44:26:df:5d:e4:b8:cf:
         0e:64:f7:a8:49:b2:55:b1:cb:ed:d3:4a:11:e0:26:7d:9c:73:
         df:a0:33:90:4f:86:cc:c5:a9:c5:ff:70:52:4a:0f:ac:9c:62:
         85:a1:40:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:06 2025 by rpki-client