Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
File:                     97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft (raw, json)
Hash identifier:          xSjDTVuqfVKM0na0tPUSD+EL0sLMTCh5ohaqRUaYcw4=
Subject key identifier:   B1:85:7B:32:1A:32:89:27:94:6E:06:B0:08:6B:E9:43:ED:C0:A6:1B
Authority key identifier: F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05
Certificate issuer:       /CN=f7b7c2e8453ed4c0929c7504baf046043159d105
Certificate serial:       01964A0FA08D4E7F88F2C923BB53834CC27E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
Manifest number:          148A
Signing time:             Fri 18 Apr 2025 18:01:00 +0000
Manifest this update:     Fri 18 Apr 2025 18:01:00 +0000
Manifest next update:     Sat 19 Apr 2025 18:01:00 +0000
Files and hashes:         1: 97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl (hash: 6yqWSjLp+wh9WSKkszhRowT4h1M4lVYo/WcX9yrdkG0=)
                          2: BvcR2l7_YlLN1G-PLIU4HFIYDzk.roa (hash: r1MEUEAOwAoEFh1pzdmgOC6wzXGzNLeScD3RSXz3sR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 18:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:0f:a0:8d:4e:7f:88:f2:c9:23:bb:53:83:4c:c2:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b7c2e8453ed4c0929c7504baf046043159d105
        Validity
            Not Before: Apr 18 18:01:00 2025 GMT
            Not After : Apr 19 18:01:00 2025 GMT
        Subject: CN=b1857b321a328927946e06b0086be943edc0a61b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9e:4f:4e:14:95:53:aa:3b:02:17:30:00:dd:
                    e4:5f:67:26:f3:f4:66:5c:5f:45:20:94:9a:b0:d6:
                    08:3c:d2:f8:42:42:5a:38:fd:b6:6d:5d:7e:c8:b1:
                    c8:be:63:a8:12:0b:39:2e:15:72:4b:b5:8f:4e:a7:
                    52:5b:16:39:0c:95:86:47:1a:ab:8f:4b:a4:a7:58:
                    25:b6:d2:96:80:7d:54:5e:33:ae:f8:22:f3:ff:52:
                    a1:7f:58:68:36:7b:38:97:38:3d:ed:e3:2f:0e:6d:
                    9d:38:3d:ab:d7:8a:5b:a2:3e:91:0f:9a:40:dc:f8:
                    d2:79:26:7d:b1:52:a4:62:9e:b7:c4:f7:76:89:40:
                    a0:03:31:9b:48:69:2e:13:55:8b:b7:b1:0f:d6:1c:
                    55:a4:cc:ec:17:70:64:09:cb:10:51:a0:56:4b:e6:
                    da:ee:1b:62:dd:28:89:7e:62:fc:35:f0:40:39:0d:
                    28:93:8b:35:9f:56:f8:47:9f:5a:9b:b1:aa:c4:9b:
                    41:5f:b1:0b:59:74:6c:5f:3d:bb:2d:e0:2c:41:41:
                    b8:85:e1:cc:a7:12:0e:06:28:ff:9f:5e:e0:f8:f5:
                    ce:b1:d9:1e:69:c9:fc:b4:f4:d0:dd:26:54:5e:2d:
                    df:e1:99:14:f9:9d:6b:b6:82:c9:3e:83:4e:83:6f:
                    76:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:85:7B:32:1A:32:89:27:94:6E:06:B0:08:6B:E9:43:ED:C0:A6:1B
            X509v3 Authority Key Identifier:
                keyid:F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:83:5e:83:ed:a8:51:23:6e:86:7a:01:57:21:90:10:df:4f:
         e1:71:7f:f5:f8:b4:13:41:71:18:9c:5c:07:bf:47:96:0a:aa:
         e2:08:27:5f:99:44:9a:a5:f6:f7:e7:4a:cd:63:ef:7e:e9:8a:
         8d:16:cc:41:59:e6:8e:46:52:89:f7:66:be:40:7e:c4:8f:f3:
         fc:21:d9:78:90:fd:6b:a0:9c:c0:df:f8:0c:22:28:f0:16:69:
         d4:f5:29:db:6c:bf:63:5f:95:49:ec:b0:bb:3b:58:0c:6e:8d:
         b1:b2:de:b1:86:09:08:e6:20:b9:a8:7c:fa:73:75:f5:cf:82:
         9e:1a:97:4d:1e:e5:a0:6b:26:70:91:f2:eb:72:da:20:6a:75:
         aa:be:05:10:0f:68:75:97:6f:c6:30:1b:59:63:ec:50:b0:56:
         24:86:67:fa:c9:88:40:61:69:15:cd:9a:9e:b1:27:06:15:a5:
         89:9d:9c:74:f1:e0:7e:a3:d7:e1:00:d8:74:2b:05:16:f2:57:
         48:6f:1c:c5:07:0e:d6:01:af:86:ab:66:3a:a7:2f:11:f1:b1:
         5b:f0:34:ab:e9:84:ab:5f:03:fb:d7:55:85:a6:a1:28:eb:10:
         f1:5d:43:b0:7e:50:2c:87:ab:dc:d6:8c:ad:b8:c0:93:8e:88:
         21:1a:b8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:31:13 2025 by rpki-client