Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
File:                     fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft (raw, json)
Hash identifier:          v1F9LvZ4z1uH4o0VJrj9p9R3OivrLeF1sYtiYkcjcWE=
Subject key identifier:   1C:78:71:AC:C7:A9:B2:26:0B:C3:7E:DF:1F:DA:A8:BB:08:1B:D0:0D
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Certificate issuer:       /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial:       0196526DB277D26B5D7CA26F3DEC16A2B443
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
Manifest number:          096B
Signing time:             Sun 20 Apr 2025 09:00:42 +0000
Manifest this update:     Sun 20 Apr 2025 09:00:42 +0000
Manifest next update:     Mon 21 Apr 2025 09:00:42 +0000
Files and hashes:         1: ACD72rE-jioyxPH9RAuGb5mC6oU.roa (hash: QtFylWnulCc2yQBn+mtJTIcyYgVI68tUvXBBF4rKnVc=)
                          2: _4IIJhtFlJdrkjSOppTsaFBNkrg.roa (hash: r5hI609ZhZ4xyXvkrk1Z26XwV02QOdDJJ0CIfMyhg7s=)
                          3: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl (hash: /VWVxI50nl0Q54Gf4ldglXwAl5lkkUo/GM2H7F+Sbik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:6d:b2:77:d2:6b:5d:7c:a2:6f:3d:ec:16:a2:b4:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
        Validity
            Not Before: Apr 20 09:00:42 2025 GMT
            Not After : Apr 21 09:00:42 2025 GMT
        Subject: CN=1c7871acc7a9b2260bc37edf1fdaa8bb081bd00d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:63:b6:de:90:40:fd:d6:c4:08:98:e7:58:ec:
                    75:03:48:b2:73:86:31:a6:d9:20:2a:85:ff:25:0b:
                    87:da:17:9d:40:f0:b6:63:88:47:dd:a1:0b:21:f8:
                    e8:fb:9b:2e:0f:8d:47:06:5d:5f:10:8f:4e:90:d4:
                    26:b4:e3:c0:64:b5:0d:2c:04:a4:d9:91:18:03:17:
                    99:20:6e:2f:f9:8f:b8:95:d9:9f:03:64:5c:06:45:
                    49:33:00:40:5b:e7:ba:7f:79:0d:76:cb:f5:75:25:
                    6c:83:e4:23:94:12:ac:bb:6c:c7:ef:15:62:45:3f:
                    6b:cb:49:48:8e:19:28:13:09:f4:75:32:4b:b4:e6:
                    3c:5b:a8:18:75:f6:5d:38:2a:78:85:ec:72:64:40:
                    87:8e:7b:fd:58:71:2b:65:b7:9a:8d:32:80:d5:5d:
                    28:a8:9c:19:6d:33:d4:8d:b2:b5:b9:a8:35:e4:2c:
                    a0:29:0c:ab:80:ad:79:94:dd:89:af:68:a8:58:b7:
                    1e:a7:f6:46:b4:0a:0e:d1:0b:0d:08:34:be:0c:fe:
                    58:d9:2c:1f:8a:41:96:96:aa:0f:8a:06:96:08:ec:
                    c3:49:96:b9:8f:9b:f7:2f:4f:2a:66:31:45:df:b6:
                    94:16:e5:7a:4b:b7:05:04:aa:47:d1:ad:93:b3:1b:
                    5a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:78:71:AC:C7:A9:B2:26:0B:C3:7E:DF:1F:DA:A8:BB:08:1B:D0:0D
            X509v3 Authority Key Identifier:
                keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:2f:24:bf:42:fb:95:97:2a:ca:c5:9d:5f:d6:9c:8b:b2:cb:
         7c:89:1a:9b:e7:ce:9e:b2:79:fe:ab:f9:49:17:10:52:da:56:
         0f:a1:2c:27:ec:32:fd:75:41:af:d7:2b:96:ae:44:2b:ea:bc:
         ec:fe:7d:7a:ab:cd:93:4b:3f:3a:c4:c9:bd:70:cd:2b:51:1b:
         e6:7a:5b:95:a3:6c:a9:7b:36:e5:85:d8:e8:0c:e5:8e:23:35:
         51:cf:88:e7:1b:1a:a0:66:6f:12:a2:81:36:f6:ab:e6:0e:6e:
         62:06:76:f9:89:1d:91:b8:80:01:f7:b7:b9:e4:f8:a8:ac:44:
         ba:d2:90:c0:a6:6a:dd:83:5d:09:d2:5c:fc:ac:79:52:49:c9:
         8d:83:10:49:aa:3a:71:f1:e3:3f:9c:0c:08:55:71:b4:1b:ed:
         c2:73:a3:e4:4d:62:53:64:3f:eb:5b:d7:46:98:6e:46:37:92:
         f3:f8:0b:89:b8:bb:c9:9d:5d:94:86:35:5e:66:d8:3c:1c:33:
         8b:d5:91:10:ba:c1:36:2c:99:1a:16:b4:6f:55:19:50:37:d2:
         1a:4c:c2:b3:f6:cf:90:23:55:72:4b:06:33:81:55:03:90:f6:
         23:ad:eb:ed:b1:5f:73:4e:75:65:4d:ba:5f:9c:0f:fc:32:b6:
         8b:d4:dd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:04:12 2025 by rpki-client