Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft
File:                     __8PpR5pOdAdyqK7PV3KptAEPaI.mft (raw, json)
Hash identifier:          y9XEMJnYmsEHSKwD1Civ/9BLRIlEiUwGpPK5XmoPGH8=
Subject key identifier:   A5:9E:1A:31:08:6D:92:07:24:FE:EA:8F:72:CA:90:6A:81:F8:79:6E
Authority key identifier: FF:FF:0F:A5:1E:69:39:D0:1D:CA:A2:BB:3D:5D:CA:A6:D0:04:3D:A2
Certificate issuer:       /CN=ffff0fa51e6939d01dcaa2bb3d5dcaa6d0043da2
Certificate serial:       01964EFE7CBEB0648751647B4DF6AB3ECB7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft
Manifest number:          14FC
Signing time:             Sat 19 Apr 2025 17:00:22 +0000
Manifest this update:     Sat 19 Apr 2025 17:00:22 +0000
Manifest next update:     Sun 20 Apr 2025 17:00:22 +0000
Files and hashes:         1: __8PpR5pOdAdyqK7PV3KptAEPaI.crl (hash: lVfYBDq0HnFmeMg6z6NgHjaSKLhPS5kgpyVMV7aXm5E=)
                          2: q2RHTYlkcDgCjrfVNvYYh8gtuZ0.roa (hash: rnMDx8HFmMRUD1wSEEKi54fuapDGJDZJ6EgL5LNncSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:fe:7c:be:b0:64:87:51:64:7b:4d:f6:ab:3e:cb:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffff0fa51e6939d01dcaa2bb3d5dcaa6d0043da2
        Validity
            Not Before: Apr 19 17:00:22 2025 GMT
            Not After : Apr 20 17:00:22 2025 GMT
        Subject: CN=a59e1a31086d920724feea8f72ca906a81f8796e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:82:8e:40:ee:f8:45:7f:34:5f:8b:13:e0:cc:
                    db:66:03:31:82:c3:42:5f:ae:bb:0a:71:34:25:02:
                    ed:4e:2f:79:d1:5a:0f:43:55:ec:d0:ef:72:19:b1:
                    82:4b:7b:b4:f6:0a:30:7b:b4:68:4c:9a:b4:b0:3b:
                    81:51:ab:53:6c:70:24:27:9d:b5:78:16:27:2e:d5:
                    95:e9:70:b8:b3:0b:0d:03:45:fd:ca:7e:63:54:d1:
                    c6:d7:7e:90:df:3e:77:8e:16:66:bd:47:83:31:15:
                    84:e9:d6:b1:0f:1d:2c:af:d7:ac:15:36:fb:cf:e4:
                    9e:cf:d2:91:62:9d:6f:e5:8c:b1:d8:05:b7:09:57:
                    94:b5:b2:da:46:95:97:bb:fc:6a:0a:a8:03:f1:88:
                    75:e5:2c:b6:16:98:08:9a:c3:4c:e5:b0:44:02:01:
                    fb:41:94:1c:43:6f:47:63:f0:61:f8:e4:41:a8:44:
                    95:2f:84:95:67:fe:d6:cc:fe:46:2c:b2:b5:e7:67:
                    d8:e0:aa:45:c1:0c:3a:a1:27:ce:a0:7c:ca:cf:5f:
                    24:11:14:6f:de:23:75:4c:70:0c:a2:ba:75:ea:02:
                    05:d7:f5:f5:18:a1:27:74:fc:dd:95:2b:92:85:03:
                    55:66:3d:1e:48:17:92:53:b7:e8:21:8a:6e:17:d3:
                    de:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9E:1A:31:08:6D:92:07:24:FE:EA:8F:72:CA:90:6A:81:F8:79:6E
            X509v3 Authority Key Identifier:
                keyid:FF:FF:0F:A5:1E:69:39:D0:1D:CA:A2:BB:3D:5D:CA:A6:D0:04:3D:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:76:48:86:d1:bd:c1:77:fb:99:7a:9e:eb:52:90:05:bd:45:
         42:89:05:2e:12:91:e6:3d:d1:09:84:c6:4f:fe:3f:93:1e:49:
         b3:c0:ef:23:e9:a3:98:5b:93:7e:79:1a:c3:ff:ba:39:be:9e:
         b9:c0:71:53:bb:19:10:e6:b4:5d:5a:7b:73:f9:67:38:b4:5d:
         66:fc:b5:be:94:c0:10:49:2e:03:09:e2:e4:92:11:14:18:27:
         d9:30:c7:22:45:20:c8:bb:b7:2a:9a:8e:60:86:7f:5b:d4:6a:
         4d:26:3b:bf:7b:21:3c:3b:fb:dd:3e:0e:ba:86:d8:71:c0:44:
         bf:a1:52:2e:68:ea:b0:ce:be:6e:10:e8:ed:e1:eb:db:20:1d:
         e8:2e:24:23:2b:cc:7a:40:aa:99:70:de:ba:23:cb:81:35:35:
         c6:23:4b:5a:8f:9b:0b:c8:81:e3:b5:87:7c:0f:ae:9b:8a:7c:
         fe:07:1e:75:34:f0:32:f6:3f:57:3f:59:f8:53:73:4a:d4:cd:
         69:2f:d6:3f:cf:29:06:b3:6c:ec:1b:9d:9b:51:ef:78:fa:e5:
         5e:c6:88:5b:36:44:ec:99:36:a0:4a:f9:d0:3b:97:65:bd:6f:
         24:eb:e5:bd:cd:bf:12:6e:d2:43:c8:df:38:90:f8:08:df:65:
         f3:0f:a4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:27:18 2025 by rpki-client