Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
File:                     v85V0V6xGeUtb6_NOXPi9tTyI_I.mft (raw, json)
Hash identifier:          fihp8PbGv32op30o7AVaikPHUU/7GPopN+W/Xc/Hnac=
Subject key identifier:   45:45:34:49:A5:CB:8D:D9:39:28:8F:B3:D9:58:4C:36:62:5C:7A:32
Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
Certificate issuer:       /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Certificate serial:       01964C346E9ACE080F41B5D2827F07F87577
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
Manifest number:          14F9
Signing time:             Sat 19 Apr 2025 04:00:26 +0000
Manifest this update:     Sat 19 Apr 2025 04:00:26 +0000
Manifest next update:     Sun 20 Apr 2025 04:00:26 +0000
Files and hashes:         1: qMVh3MmBW-5x18q2N1wXFpopTgM.roa (hash: PQtT5tx/edekggmnvi46ZZ9KahB7EPBY+tQD/QXkwJY=)
                          2: v85V0V6xGeUtb6_NOXPi9tTyI_I.crl (hash: 21OaZ7czdpJPG6IwlAcj2/6vkBF2Ilu3fC8SFNnxsag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:34:6e:9a:ce:08:0f:41:b5:d2:82:7f:07:f8:75:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
        Validity
            Not Before: Apr 19 04:00:26 2025 GMT
            Not After : Apr 20 04:00:26 2025 GMT
        Subject: CN=45453449a5cb8dd939288fb3d9584c36625c7a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:81:f6:9a:ce:4d:f3:81:a8:b0:3c:2a:03:ea:
                    aa:e3:09:4b:42:bc:8f:47:65:9b:e5:9c:5c:b3:74:
                    b4:d3:5c:f1:66:be:1d:f4:a9:2b:95:6d:39:43:e4:
                    74:39:67:59:7c:fe:cb:33:d3:dc:3c:73:3a:dc:9d:
                    de:23:8e:ce:fe:e2:d4:4f:af:35:36:f4:39:87:98:
                    25:6f:6a:be:67:c6:e6:13:28:5c:4a:1a:18:21:82:
                    bb:f9:99:4c:cc:4e:9b:4e:92:b7:ea:3d:91:61:0e:
                    41:eb:52:5d:09:cb:bb:a7:f8:be:4f:3b:9c:a4:12:
                    ad:82:a2:c6:bc:64:8b:24:9a:71:ec:ce:d8:87:90:
                    a8:3c:26:e2:51:d5:ad:f2:55:c8:4f:5b:67:a7:4d:
                    17:bd:01:a9:f1:8a:8c:21:87:76:79:9f:76:e0:23:
                    7a:ad:1e:d7:db:a6:48:cb:2c:a8:f0:e9:9b:df:f2:
                    ff:5b:4b:7d:6f:73:e7:67:37:bb:61:58:be:a2:ee:
                    9a:ee:fd:e9:97:63:16:05:a8:10:80:2d:ae:df:9d:
                    4f:22:40:31:45:ef:ea:14:13:ca:6a:13:7e:8b:7c:
                    a6:67:cd:01:0f:dc:d6:cb:14:19:a1:dd:05:d3:74:
                    c7:eb:ca:01:ca:e7:33:aa:15:f0:db:e8:bb:ca:99:
                    b6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:45:34:49:A5:CB:8D:D9:39:28:8F:B3:D9:58:4C:36:62:5C:7A:32
            X509v3 Authority Key Identifier:
                keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:2f:e9:c5:db:dc:b4:dc:1d:4f:93:55:97:16:6b:05:a3:95:
         f1:0a:1c:01:b6:74:6c:88:d1:76:ca:7a:9b:1c:a8:fd:f9:03:
         0b:dc:a8:2f:42:d0:cf:36:7a:0a:a7:27:82:93:79:d6:27:71:
         4a:3a:82:8c:65:64:44:b1:48:e9:73:90:4b:98:23:79:92:f5:
         59:48:d4:b0:d8:ca:b4:ee:fd:67:87:48:cd:ca:29:11:20:a6:
         62:0c:f9:14:c8:71:e2:57:b2:53:f9:6f:08:bc:47:86:b1:27:
         a1:c5:3d:b9:c5:9b:53:f8:e1:cf:e7:96:ec:d6:10:a2:95:c5:
         f3:0a:d0:b3:a3:62:d1:45:54:55:85:b3:0d:41:a8:f9:7e:cf:
         44:c3:63:70:ed:0c:b4:e0:cc:50:91:94:8e:5c:94:30:86:c8:
         d4:4d:14:e1:4e:36:53:c7:29:d8:91:72:3a:84:a2:60:cf:0c:
         87:19:80:4f:f6:4a:34:d7:8d:5f:fa:b8:d8:37:54:41:19:21:
         ce:90:97:53:06:ba:13:cb:a3:35:6c:e4:1a:f8:08:47:c1:72:
         24:63:93:02:4f:e4:c9:86:a9:51:f6:ba:d5:8c:ae:c0:e3:0d:
         91:c6:56:03:0d:d2:2c:b7:c2:b0:0a:6e:92:ae:9e:a5:46:5b:
         60:4b:22:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:44:23 2025 by rpki-client