Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
File:                     MfePPgBBCSbb2JyOj1xACxArA3k.mft (raw, json)
Hash identifier:          FgmlPZHoW4DdRafXT82YLLvputE+SsMiagwmY18Rtqo=
Subject key identifier:   98:83:34:71:66:0B:1A:BF:EF:FE:C3:CA:2D:26:8A:C7:08:C2:9E:08
Authority key identifier: 31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
Certificate issuer:       /CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Certificate serial:       019652A470832CFAF96C1E077DE97AA0D336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
Manifest number:          0727
Signing time:             Sun 20 Apr 2025 10:00:30 +0000
Manifest this update:     Sun 20 Apr 2025 10:00:30 +0000
Manifest next update:     Mon 21 Apr 2025 10:00:30 +0000
Files and hashes:         1: MfePPgBBCSbb2JyOj1xACxArA3k.crl (hash: uX27k3D6tKibrXMHx6YHEG0nAcgVs3DL3I3X25Z7zeI=)
                          2: eUlaq5gS3GI6r3fmoZPaba7Dfho.roa (hash: PBjrFIbcmCvN1hWwmYdZLCa28CsdtHFqI3Efr5fS4Bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:a4:70:83:2c:fa:f9:6c:1e:07:7d:e9:7a:a0:d3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
        Validity
            Not Before: Apr 20 10:00:30 2025 GMT
            Not After : Apr 21 10:00:30 2025 GMT
        Subject: CN=98833471660b1abfeffec3ca2d268ac708c29e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c6:88:1b:f6:21:07:72:ba:9d:53:db:36:4f:
                    6d:2d:60:66:17:3c:f7:35:27:77:ed:00:9d:2b:35:
                    fb:83:24:f9:07:07:f1:4f:42:2f:c8:3f:e1:40:fb:
                    df:35:8e:f8:79:e4:9b:ec:53:33:b8:8a:db:66:51:
                    19:9e:11:b5:9b:f3:5f:fd:76:30:6d:bf:41:14:ef:
                    5d:fc:bd:be:e6:2f:ec:93:77:14:45:6c:43:49:46:
                    0c:44:37:74:d4:18:23:b1:b5:f8:19:bf:69:95:40:
                    07:a9:3b:d7:ab:54:e4:3d:4a:63:80:fe:39:c4:50:
                    f1:f0:58:99:99:b7:d1:7f:7b:7d:a0:c5:bd:a2:51:
                    42:7c:ad:06:2d:40:3d:82:11:f6:ca:8f:ed:a2:ad:
                    a9:f1:46:aa:ca:6e:7e:7e:95:8d:61:6e:5c:93:b9:
                    df:b0:43:45:05:b3:94:43:59:fa:2f:37:96:41:ee:
                    f5:95:0a:1f:e3:a3:78:16:ec:df:12:f4:58:3c:92:
                    f6:1f:8e:df:8b:aa:44:ac:59:ea:53:70:7d:c5:f7:
                    0e:39:13:75:36:96:ad:7e:83:52:58:e9:4b:5f:60:
                    b5:bb:ce:0d:25:87:00:f5:fd:0b:ff:d4:9d:1a:0f:
                    74:68:7e:02:b3:8f:ab:00:bf:e1:bd:fc:ca:f0:fc:
                    27:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:83:34:71:66:0B:1A:BF:EF:FE:C3:CA:2D:26:8A:C7:08:C2:9E:08
            X509v3 Authority Key Identifier:
                keyid:31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:57:0a:a7:32:6d:e6:a4:3e:f9:ad:f1:8c:87:6b:d8:4e:00:
         04:d2:d5:cb:22:5e:04:9f:80:1e:ff:36:05:30:b3:51:f2:41:
         f1:15:14:a6:8a:59:6a:b1:53:69:4d:24:ed:c0:c1:b2:da:41:
         4c:74:71:dd:e4:af:9a:41:a3:ae:19:db:0c:d8:22:70:c0:7a:
         95:83:69:19:a0:2f:bd:28:08:b2:a5:28:29:e8:63:63:2b:bc:
         fd:61:c0:49:34:0a:59:21:f8:c7:f9:34:64:c7:75:0b:2b:07:
         57:e0:ed:3f:97:3f:61:e3:e0:d9:40:71:23:1b:2d:50:3a:22:
         9d:77:01:94:d5:1b:e9:19:72:10:c8:c9:ff:7c:23:6d:b8:fd:
         ad:0b:5a:6b:60:a6:9a:46:1d:e3:c1:80:c0:f7:af:96:d6:f5:
         6e:f6:93:5c:82:fd:dc:6c:6b:4f:0c:21:6f:0c:3f:83:44:50:
         1e:1e:6e:91:e2:a3:9d:0c:d4:e8:8d:8b:36:db:72:0a:55:8a:
         cf:42:f3:10:bc:0e:26:10:83:4f:f0:95:89:32:2e:32:1e:73:
         c5:2f:bd:1a:28:43:b5:4c:65:7c:05:5d:33:67:ca:dd:dc:93:
         a7:92:1f:7a:74:ae:26:b0:98:6b:85:5d:69:25:38:eb:0a:c9:
         58:8a:e5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:19 2025 by rpki-client