Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft
File:                     _EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft (raw, json)
Hash identifier:          DkuCeNtC0g/3YcUvAnjD9mUkN9N6eQ7My7Khvw8v7RE=
Subject key identifier:   8D:16:32:2E:E2:49:C7:7D:93:2C:EB:47:6E:34:40:3B:D0:72:4B:11
Authority key identifier: FC:4B:85:73:CA:0E:BB:47:8E:00:8F:70:AF:A0:8A:E5:8B:78:69:A5
Certificate issuer:       /CN=fc4b8573ca0ebb478e008f70afa08ae58b7869a5
Certificate serial:       01965500DFD4C3A9C78F00F6540B2C03ECF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft
Manifest number:          0785
Signing time:             Sun 20 Apr 2025 21:00:42 +0000
Manifest this update:     Sun 20 Apr 2025 21:00:42 +0000
Manifest next update:     Mon 21 Apr 2025 21:00:42 +0000
Files and hashes:         1: Wu_sLBd52P_80aF3hK1EyS_6DCc.roa (hash: 84Ssu5t49rk7+hfFW1vqYrXMV8Dl21sv4EL9/rh88NY=)
                          2: YKiu8Xhy4YGRnPsmfhZXeRWkmlw.roa (hash: W2Qk9HNfNUxgCgmpVb5xDsd/PI6WJRAoQxWcxNCmQ1A=)
                          3: _EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl (hash: aSVC4iN7vKA0NnIy+Z18W6FF09NfaP3nwKY1ZW5WZ20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 21:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:00:df:d4:c3:a9:c7:8f:00:f6:54:0b:2c:03:ec:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc4b8573ca0ebb478e008f70afa08ae58b7869a5
        Validity
            Not Before: Apr 20 21:00:42 2025 GMT
            Not After : Apr 21 21:00:42 2025 GMT
        Subject: CN=8d16322ee249c77d932ceb476e34403bd0724b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:86:17:1a:97:f9:1f:f2:3e:01:cd:b7:ec:79:
                    e2:59:2a:03:9a:02:39:bf:1f:a1:df:03:09:f4:47:
                    98:6a:f2:f6:41:b0:08:9b:59:25:3c:cc:0c:bb:74:
                    70:7f:db:ee:70:a2:8f:8e:64:8f:eb:0a:d3:e4:c0:
                    34:74:1f:c3:ef:ab:3e:7d:61:f2:69:26:a4:f2:b8:
                    ca:fc:44:69:25:08:f0:8c:0f:b5:f1:e8:71:64:32:
                    8e:bc:bc:87:64:7d:e9:f1:c3:db:a5:a5:f1:98:fd:
                    d0:19:ee:b6:5c:11:86:5f:7b:3c:e7:88:73:d3:1e:
                    f3:94:4f:d9:53:50:0d:62:c7:81:e0:48:dd:fa:04:
                    86:e7:73:ab:58:34:59:dd:2b:4c:10:a6:d8:93:b6:
                    43:15:2c:6e:a0:a6:b2:94:fc:87:6c:c3:7e:a0:81:
                    0d:f4:2c:94:91:18:2f:8b:b1:74:78:30:bd:15:48:
                    ce:0e:2b:da:ad:35:cb:b4:a1:06:dd:9d:f1:93:0a:
                    52:c1:d5:8d:11:c4:cc:38:28:55:12:bf:ed:98:6e:
                    df:49:01:ca:11:6a:e3:42:4c:13:48:c4:02:25:ce:
                    81:d7:df:ef:f2:66:b6:d2:1c:08:c6:5e:3e:e0:49:
                    51:b4:68:4f:90:e8:cd:5c:c4:7e:9a:1e:a4:d2:77:
                    22:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:16:32:2E:E2:49:C7:7D:93:2C:EB:47:6E:34:40:3B:D0:72:4B:11
            X509v3 Authority Key Identifier:
                keyid:FC:4B:85:73:CA:0E:BB:47:8E:00:8F:70:AF:A0:8A:E5:8B:78:69:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:a8:e6:00:1b:23:ee:39:ff:ff:18:c1:05:b6:72:b3:e1:ec:
         81:41:11:db:6f:d9:32:ef:37:54:ac:61:08:25:26:f5:c1:4b:
         bb:78:a8:e9:72:1b:4c:72:ee:06:3f:aa:ee:bc:3b:80:b8:37:
         71:1b:22:73:87:0f:e5:2b:43:b4:32:95:85:dd:41:94:9a:fb:
         79:3e:2e:e2:10:fe:15:75:6e:d2:4e:a7:90:96:8a:f7:a8:df:
         46:48:c3:26:c8:fa:1e:3a:0a:1b:cf:a5:63:eb:aa:f2:8e:f7:
         ae:f8:93:52:56:56:51:89:83:68:4e:29:d5:fd:90:1c:2e:ad:
         de:5b:0d:ad:4d:e7:ff:bf:89:26:e2:50:37:db:2a:16:b3:17:
         a1:09:68:46:24:cd:ac:24:93:7f:a0:5c:91:be:12:34:67:cf:
         e4:77:1a:b0:56:51:8c:d3:64:6d:1d:bb:fa:f7:52:2d:10:ba:
         0e:7b:62:aa:27:d4:c0:a8:d8:e6:29:22:13:2a:71:84:52:b3:
         87:d5:a3:cb:7a:7b:df:76:1e:8a:57:33:34:eb:f1:f7:cf:1c:
         3d:d6:ef:13:dc:fd:e6:65:a1:de:1b:47:7a:3a:9c:f5:91:b9:
         16:da:0d:e4:60:15:3c:25:a1:7b:a9:37:75:49:d4:27:f1:e7:
         a0:69:12:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:19 2025 by rpki-client