Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
File:                     1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft (raw, json)
Hash identifier:          MGmmYT9DrJs41OX47JmpezdDILnp4IKQk+yZG7HG92E=
Subject key identifier:   16:75:8F:52:58:20:4F:54:B9:D1:BA:12:3B:66:2C:3A:7E:65:87:84
Authority key identifier: FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA
Certificate issuer:       /CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
Certificate serial:       01964DEC31867B6B31A458DF0FE963B76693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
Manifest number:          14FB
Signing time:             Sat 19 Apr 2025 12:00:46 +0000
Manifest this update:     Sat 19 Apr 2025 12:00:46 +0000
Manifest next update:     Sun 20 Apr 2025 12:00:46 +0000
Files and hashes:         1: 1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl (hash: RM7sBs48ttWf1MnKorj9aa0e4BspM0t0XhnGKcGxWVY=)
                          2: kM09o73dWvN-pIf-j5VVGqnFs3E.roa (hash: 1NF2t1HFyA9I2wGXRPo18jluITzSgbYTlyBY51pRw6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 12:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:ec:31:86:7b:6b:31:a4:58:df:0f:e9:63:b7:66:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
        Validity
            Not Before: Apr 19 12:00:46 2025 GMT
            Not After : Apr 20 12:00:46 2025 GMT
        Subject: CN=16758f5258204f54b9d1ba123b662c3a7e658784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e4:97:ab:d7:79:c5:1b:5e:33:16:15:26:02:
                    33:32:78:66:89:87:24:c8:f6:a9:59:b0:84:95:fc:
                    42:0c:83:0d:24:25:a5:93:2c:e6:44:31:bb:c7:92:
                    ec:95:61:0a:da:75:62:e4:61:4f:fd:a3:f6:2e:ce:
                    e0:4b:05:a7:0f:8f:de:6b:94:52:62:68:a1:d1:1b:
                    13:75:92:bb:2c:35:0c:8c:7f:dc:a6:ac:cf:12:6c:
                    7d:71:dc:f5:15:1e:e8:37:db:58:40:b7:89:3d:bd:
                    3a:76:70:f5:2b:32:8e:77:ef:06:af:5d:e9:10:a1:
                    a2:32:90:c9:8c:3a:63:96:22:8a:30:fd:b8:f8:26:
                    5e:d4:83:1c:97:08:a9:c2:28:05:9a:55:29:d5:bd:
                    74:03:38:5a:df:ed:3d:27:76:32:0e:4d:37:72:87:
                    58:0e:d9:88:55:b0:8e:24:ff:9d:1e:ea:a8:4e:09:
                    c5:d0:db:e8:d9:34:3e:f3:fa:55:9f:fb:76:67:7f:
                    6d:a9:1a:e6:49:36:40:8b:c7:a9:49:c3:d0:26:d6:
                    5a:21:10:b7:5d:31:cc:5b:dc:9a:e5:37:eb:03:c6:
                    45:17:b9:0f:77:0c:57:4a:f1:0f:7e:3c:c2:cd:e5:
                    9f:97:fa:a3:37:9f:ce:b7:a7:00:1e:48:34:5e:c4:
                    e8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:75:8F:52:58:20:4F:54:B9:D1:BA:12:3B:66:2C:3A:7E:65:87:84
            X509v3 Authority Key Identifier:
                keyid:FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:2c:32:bd:84:1d:5d:c8:94:ac:36:f7:9b:0f:67:c4:d9:26:
         a6:17:89:4c:07:97:be:56:bc:ce:c1:c1:c4:25:1b:2c:9a:a6:
         43:ba:97:49:92:fe:de:5e:3c:70:63:53:3f:a6:5e:f9:b0:fd:
         78:ce:d9:ef:37:19:e1:ba:32:cc:2a:93:5c:5f:ee:e1:4a:9b:
         7c:f0:e5:15:09:5e:50:c5:41:3f:ab:6b:c0:03:46:56:9b:23:
         97:92:d5:ff:e4:b8:83:84:b0:be:98:68:9f:c2:4a:d5:e4:38:
         5c:4c:45:1a:24:3d:d2:60:48:13:76:5e:1a:4a:56:f6:b1:c5:
         87:f9:f4:ab:4b:f4:60:f2:1e:53:4e:c1:86:69:a7:44:3c:4e:
         c0:f0:04:0a:57:53:9f:ed:0a:76:bf:9e:55:e6:49:87:cc:25:
         66:6d:95:5c:b7:77:74:f8:f2:22:a8:eb:25:95:7e:7c:c3:29:
         0c:cb:90:7f:30:58:fa:d3:69:3d:b6:43:5c:f7:b1:a0:4d:9d:
         95:a0:bd:05:60:75:62:9a:17:cb:28:7a:77:6c:53:f8:2a:2d:
         00:92:0b:cf:4b:e7:8f:1d:b4:92:e6:5c:00:a8:5e:66:0e:b0:
         61:c7:16:99:c1:ec:b4:3f:df:9c:f8:90:2a:87:4f:d5:1e:c3:
         66:88:e4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:43:10 2025 by rpki-client