Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
File:                     2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json)
Hash identifier:          KFgzpkmdVHVqJeZueh/rGYJ2Uz8gNOaJkkbH464YN4s=
Subject key identifier:   F1:DA:FA:A3:D8:61:5D:F6:4B:A9:36:56:66:1B:47:EF:B9:36:EB:87
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Certificate issuer:       /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial:       0196052EEDE4A2B03E9A9D964C9E5378ED70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
Manifest number:          07F0
Signing time:             Sat 05 Apr 2025 09:01:23 +0000
Manifest this update:     Sat 05 Apr 2025 09:01:23 +0000
Manifest next update:     Sun 06 Apr 2025 09:01:23 +0000
Files and hashes:         1: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: eo35DA66q4lES6VcrUu7P8eUHE198eKy3IaVLR+0Hr0=)
                          2: 3UqWODae-W_KRnDyCPYz1_OG32o.roa (hash: y871Jre0p863nPe1CoOGeswcSvdN1WU/WfOE51E+5qw=)
                          3: 5Y3Jwmte8A-d_YlOn8cgBr_VO4M.roa (hash: vSY895Pgffq53GRNLVm1t6+gWyyWT9dNx713Rvp80xY=)
                          4: GCvMpFjTox7n5FmOa5IgrXeN2Mo.roa (hash: Y53wvi3S7ITug5cC6QdZKUB+NY5xkHHiQyyYmB7inpo=)
                          5: GE8S6QweGIt3c85t_rnGab-IpQg.roa (hash: 6PBV94W3VYcFPHikrfHt83RqRfHZjAYrztUDVd5Z6y8=)
                          6: MKXJ66CRttluCaD2As6acb3eAwI.roa (hash: A1bSrmMEPbiNQFfUVIkOSltYihJGIH6EUwYcLxbC5P4=)
                          7: cHT0qzGhhZWWUdosb7dz_r29LkI.roa (hash: LL8UCKvFFQoG00GXqpjxb1DBAQ64iWVLzPMwKvO00IA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:05:2e:ed:e4:a2:b0:3e:9a:9d:96:4c:9e:53:78:ed:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
        Validity
            Not Before: Apr  5 09:01:23 2025 GMT
            Not After : Apr  6 09:01:23 2025 GMT
        Subject: CN=f1dafaa3d8615df64ba93656661b47efb936eb87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:04:fc:03:be:ef:b0:a8:f0:f2:9a:2e:6f:5e:
                    81:52:ca:b8:3b:b5:66:71:d6:06:b2:a1:52:3e:78:
                    6a:38:7e:7f:4b:81:45:51:bc:90:db:80:eb:b7:29:
                    22:4f:c7:e0:52:ef:36:d0:51:6f:87:8f:3e:66:13:
                    ba:d1:03:84:a1:13:4c:21:d6:9b:28:df:1e:24:42:
                    d6:7d:b2:34:20:f7:0a:00:9e:80:70:46:d9:f7:91:
                    7a:90:24:40:b7:f1:f8:67:65:5d:06:d2:99:96:cf:
                    ea:40:9d:fb:58:a7:90:2f:e0:cd:56:1f:e4:4b:f0:
                    2f:d2:1c:f6:7b:af:14:6a:24:b3:90:19:4d:e5:8e:
                    24:8a:8a:0b:68:d4:e0:04:54:6d:5b:fc:48:55:d5:
                    7b:c2:4c:76:82:87:c7:6b:c2:c8:27:00:8f:9c:38:
                    be:89:bc:8b:eb:41:20:35:ca:e6:e1:30:fe:a5:d5:
                    6a:b8:ee:75:06:76:a9:a5:89:c3:f6:43:48:f8:b7:
                    33:2c:9a:37:fd:1c:4a:9b:78:89:76:c1:57:3b:72:
                    01:87:b2:dd:9e:27:c1:f3:59:06:48:e3:aa:ca:f9:
                    97:5b:05:80:80:25:24:ff:f0:89:a1:07:29:f2:e8:
                    ff:70:33:d5:df:02:f2:92:88:73:a8:d1:ad:21:d4:
                    8e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DA:FA:A3:D8:61:5D:F6:4B:A9:36:56:66:1B:47:EF:B9:36:EB:87
            X509v3 Authority Key Identifier:
                keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:71:7e:f0:2b:40:5b:d1:dd:d3:c1:bd:eb:02:61:4d:ad:db:
         8e:a5:4a:f2:b0:73:3e:7f:5b:c2:02:cb:72:e9:db:1a:c2:b9:
         0a:7d:ae:e0:82:7f:84:80:bb:94:c3:c9:cd:49:5f:d9:65:e5:
         a0:e4:42:27:c7:6d:48:cc:b2:50:08:66:88:af:5d:3f:b1:7c:
         ac:cf:a0:0f:85:60:7c:d0:7a:64:e9:08:7e:a3:0c:22:f0:63:
         ec:2e:ea:da:a1:2b:55:86:0b:16:3d:de:79:6d:7c:1f:5e:74:
         a9:eb:03:4c:e5:df:b5:36:be:77:fa:c4:da:cd:d5:a0:2e:5e:
         6e:f2:98:50:08:13:ef:cf:67:3d:c0:32:0b:74:eb:b1:d8:29:
         96:3f:5d:8d:bd:25:f2:2c:d3:fe:3c:90:ac:72:bb:da:8f:e5:
         9d:80:82:fc:4a:53:a5:4f:52:e0:1f:18:44:04:e8:83:3f:e1:
         be:60:79:17:1e:1c:44:c0:51:28:f8:07:05:39:66:c4:a9:fb:
         e8:04:fd:8e:a2:49:4b:44:01:68:2d:ee:d6:40:e0:8e:ed:fa:
         0f:7b:63:b0:32:77:95:06:8a:55:af:77:f8:ac:7f:f5:bd:70:
         72:1d:bd:df:fc:d5:df:2b:a1:07:b7:c3:24:83:5a:58:86:49:
         86:a1:b2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:05 2025 by rpki-client