Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
File:                     1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft (raw, json)
Hash identifier:          Yx3I29+gdVN+iGm9oGbDnaTvcmmeku0W9cqe0QVAobo=
Subject key identifier:   A5:42:56:6A:FE:7F:EA:5F:3E:98:BB:D9:07:28:F6:66:51:85:2E:14
Authority key identifier: F9:63:24:7D:0D:83:B9:F6:08:CF:86:4F:42:7C:DF:E9:4B:25:2A:10
Certificate issuer:       /CN=f963247d0d83b9f608cf864f427cdfe94b252a10
Certificate serial:       01964FDA170B85A006D55DACDFACB2A28C37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
Manifest number:          14FC
Signing time:             Sat 19 Apr 2025 21:00:14 +0000
Manifest this update:     Sat 19 Apr 2025 21:00:14 +0000
Manifest next update:     Sun 20 Apr 2025 21:00:14 +0000
Files and hashes:         1: 1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl (hash: lMzSh/8lNjoPCMfJmShXyLYNlltmFSFyp11WdVHLQtg=)
                          2: lnlabqHz8vZQfOc2T8GZSJCe_jI.roa (hash: LRCfx0Tz8s2m4vMNHjVZBjRrLuGLFoacGpWs8HBdPdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:da:17:0b:85:a0:06:d5:5d:ac:df:ac:b2:a2:8c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f963247d0d83b9f608cf864f427cdfe94b252a10
        Validity
            Not Before: Apr 19 21:00:14 2025 GMT
            Not After : Apr 20 21:00:14 2025 GMT
        Subject: CN=a542566afe7fea5f3e98bbd90728f66651852e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8f:ab:4e:c3:c0:1e:50:c9:ec:11:e0:58:dd:
                    c9:ab:a5:4d:5d:b9:a2:db:f0:a7:21:ee:04:5c:e3:
                    37:68:44:13:ff:c9:44:18:95:a4:c5:fc:67:88:c6:
                    89:88:c0:53:7a:88:c5:57:bd:bf:0a:98:b3:b2:c7:
                    22:d4:58:b6:95:c7:ed:6f:c6:f4:69:a9:0d:5e:9b:
                    c3:22:e6:ac:04:09:d9:95:37:e8:6b:45:a6:77:90:
                    aa:03:0f:96:81:82:e0:a7:9f:71:65:02:3b:b9:21:
                    d6:fb:e8:14:8e:82:39:df:b5:55:4e:26:24:7e:4d:
                    7a:b5:2d:fe:91:c6:73:c5:29:9f:31:3b:bd:8d:aa:
                    e2:9e:24:6c:c5:72:d1:0f:93:5b:a3:64:5b:8d:0d:
                    6d:c5:e8:74:15:f5:5a:40:07:8b:fb:40:c7:76:c2:
                    ba:71:5c:59:dd:fd:b8:2b:37:69:38:79:0b:04:3e:
                    28:b2:7b:32:b5:38:8d:98:0d:6b:d5:b1:cf:f6:a5:
                    75:c3:36:c5:08:c4:68:12:42:c7:ca:6c:eb:82:ec:
                    2f:8d:96:af:83:32:8c:05:27:8c:5c:6d:b5:1a:31:
                    3d:37:30:d0:1d:ca:f2:ee:0c:00:44:68:d9:7b:06:
                    5e:35:c6:45:a2:fc:4f:71:42:64:1a:43:05:f0:d2:
                    91:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:42:56:6A:FE:7F:EA:5F:3E:98:BB:D9:07:28:F6:66:51:85:2E:14
            X509v3 Authority Key Identifier:
                keyid:F9:63:24:7D:0D:83:B9:F6:08:CF:86:4F:42:7C:DF:E9:4B:25:2A:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:50:67:d5:4a:e7:c8:2d:ea:49:5e:91:8b:6c:ba:89:40:b2:
         50:34:f4:45:41:f1:1e:5e:b0:41:cd:2a:07:77:68:b2:b2:c1:
         86:65:ae:83:2f:69:93:d9:e1:95:c1:79:e5:67:d3:ba:7e:ba:
         be:b9:54:fe:2a:31:b3:73:58:16:23:84:6c:b4:de:2a:51:45:
         9b:80:08:00:c7:ee:52:2e:3e:14:bf:c5:fa:75:41:d1:f4:e5:
         e4:d2:09:f9:6a:95:68:c4:71:16:19:10:88:37:98:87:97:2e:
         7d:b0:8d:18:69:4a:c1:b1:9b:ce:06:80:b8:57:83:db:93:65:
         c9:18:7e:69:04:90:14:61:43:29:63:b3:ed:fa:28:b6:51:8f:
         11:60:39:f3:bc:9d:80:6b:45:0f:6e:69:93:11:92:54:8e:15:
         15:ad:da:ef:da:c7:13:13:b7:3f:64:c3:b5:f1:17:fa:e2:3d:
         1e:b9:f5:89:46:d4:e8:83:ff:05:39:db:c1:e6:20:be:69:d1:
         a3:3e:e5:b0:a6:93:af:73:2f:36:0b:3d:a5:ea:f0:d5:93:73:
         a9:59:d7:5d:ec:33:3b:f0:5a:4b:76:58:5e:3c:36:f7:dd:f5:
         87:a2:ff:62:42:7f:14:89:c9:13:5c:58:5e:65:21:c8:23:31:
         bb:46:d9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:45:06 2025 by rpki-client