Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
File:                     v124EbXV0FvsN-6dCaTsUu7tGtU.mft (raw, json)
Hash identifier:          /VxBE3mtDif9t6AGxF6RkU0zzXhtUCv5C/OJlBcTOgM=
Subject key identifier:   03:90:B8:34:E1:0F:08:C7:30:DC:7A:E8:3F:A7:37:54:47:68:F2:A4
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Certificate issuer:       /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial:       01963E798ED59C78D7BAFE59FC7EF8398C1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
Manifest number:          14F3
Signing time:             Wed 16 Apr 2025 12:01:15 +0000
Manifest this update:     Wed 16 Apr 2025 12:01:15 +0000
Manifest next update:     Thu 17 Apr 2025 12:01:15 +0000
Files and hashes:         1: A_KgM3k4qAAXzoVtcLMaFcFNNK4.roa (hash: VJ7GutYO65TbDd04dxHRMtfL/mkpQAyG9g/RbTdBVFk=)
                          2: Bykp6D8a0g7RWzF0-TM8Q9QUeZg.roa (hash: XX0zq9iYFmQVsbLlV9Gh1YQJWKy0izeVfRSjEDzptNY=)
                          3: aEL4xFOQmRYrZwG3M_bcJt5uI7g.roa (hash: zEPp0rusbaxj35njsL+K6xMWps6ctYOjx+pWxAGHdKg=)
                          4: leblj7LAsmNQvo4mPAk6nZp18TI.roa (hash: BN8Nv/xxMQaspAlU30+6jiR1kkLgITKVXHRbqi9/XpE=)
                          5: v124EbXV0FvsN-6dCaTsUu7tGtU.crl (hash: 8eNHL1Al5PdvcuczsIpSihxJZBcRBGwQWEJtV4kHSic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 12:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:79:8e:d5:9c:78:d7:ba:fe:59:fc:7e:f8:39:8c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
        Validity
            Not Before: Apr 16 12:01:15 2025 GMT
            Not After : Apr 17 12:01:15 2025 GMT
        Subject: CN=0390b834e10f08c730dc7ae83fa737544768f2a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5d:3c:37:b5:7c:4c:78:05:d8:c3:fe:2e:49:
                    bc:f4:7d:c2:f0:08:12:5f:1e:55:93:dd:9f:81:b8:
                    c2:7e:9d:8d:07:c7:27:02:32:ad:ff:be:50:79:58:
                    88:e1:37:8e:4b:ed:b8:eb:8b:eb:5a:94:92:16:84:
                    44:68:be:e7:47:98:90:7d:4d:2a:35:a7:77:3b:40:
                    27:10:19:1f:74:81:7a:6a:65:be:70:79:2d:2a:f7:
                    cd:61:aa:41:9b:12:4a:41:c2:53:97:61:9f:cc:f6:
                    23:19:db:ef:92:60:cd:ef:fa:65:4e:7d:94:d9:31:
                    51:18:b0:73:aa:e0:a5:87:83:38:bb:f5:ab:fe:41:
                    56:ef:f6:f8:8e:0d:17:d2:44:44:a8:7e:9b:33:dc:
                    8a:14:0e:65:26:e0:40:6c:8b:00:c1:a0:18:c1:9b:
                    95:3f:1a:7b:6f:b1:69:34:c1:f5:88:df:5b:d7:91:
                    06:d0:47:0d:02:e1:9e:88:de:95:61:4b:16:99:86:
                    cd:7a:80:37:2c:6e:a2:35:4b:af:cf:d8:cc:44:b7:
                    31:ca:61:08:1b:f4:10:a7:87:f4:b1:eb:2d:23:dd:
                    31:d9:11:25:c3:c1:52:64:4d:b1:44:2c:79:3b:02:
                    51:ba:ef:a1:b8:1c:d4:0a:f9:25:7c:d4:c4:d0:1f:
                    b6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:90:B8:34:E1:0F:08:C7:30:DC:7A:E8:3F:A7:37:54:47:68:F2:A4
            X509v3 Authority Key Identifier:
                keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6c:fc:39:23:d5:e0:2e:21:ec:6e:02:16:a2:d2:51:d0:09:
         09:e6:ba:86:57:61:d6:e1:7f:f1:7a:4d:b9:68:9b:b3:4d:7c:
         fe:32:32:b0:0a:18:de:85:cb:76:ce:c6:f3:7a:49:1a:4c:7b:
         36:e2:5f:63:2b:7b:64:74:ce:e3:da:77:ae:29:ff:53:db:fc:
         e4:dc:a6:a6:9b:9c:46:e0:a0:cc:c1:07:b0:ba:53:e4:3b:dd:
         83:27:cd:c8:64:60:d7:0c:6e:07:f1:4e:9f:b9:87:9a:53:fd:
         b0:28:18:76:ed:b6:fc:34:d2:86:58:da:e4:b5:5f:10:fc:41:
         54:2c:ea:91:c1:df:58:f8:ad:5f:b0:46:68:c8:5f:f0:90:59:
         4e:73:bc:86:b1:b3:c0:24:37:15:5f:f6:b1:1d:59:27:f3:20:
         bf:cd:b8:54:cf:a8:da:b5:35:78:df:5a:f0:7a:f2:5e:4d:92:
         8d:c4:23:f0:18:2d:95:3e:bf:ae:42:ae:b5:06:90:33:df:a2:
         26:20:80:f3:7e:7f:24:c8:65:23:a2:ec:26:86:16:3e:41:14:
         ee:d8:df:ca:38:eb:6f:e3:88:74:92:a2:97:b6:cc:3d:dc:13:
         21:62:72:70:10:c4:35:55:3f:44:d0:0f:cf:dc:8c:45:3f:8a:
         42:8d:52:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:19:11 2025 by rpki-client