Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
File:                     fzXVrkF_Re6FBdds6qGzTEWDlKA.mft (raw, json)
Hash identifier:          88sPWnjY8jC/pPaPv0+D0NLlMJuVP15YV/oqTxgW8qM=
Subject key identifier:   38:9A:C1:59:14:58:D8:24:8A:B7:90:C7:C9:E1:17:DC:3A:AC:8B:20
Authority key identifier: 7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
Certificate issuer:       /CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Certificate serial:       019649A1F3054814EFF2ED45E881B5D81867
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
Manifest number:          0DD2
Signing time:             Fri 18 Apr 2025 16:01:12 +0000
Manifest this update:     Fri 18 Apr 2025 16:01:12 +0000
Manifest next update:     Sat 19 Apr 2025 16:01:12 +0000
Files and hashes:         1: 60SN0C5WIf6xee2zdPp6NtBUZT4.roa (hash: 4gepFS/5lwBJIpO8Zj2TAgVElFJH/stJp2iOcS189VA=)
                          2: fzXVrkF_Re6FBdds6qGzTEWDlKA.crl (hash: xj5dwYSHxyoKgC5YsL49nN/iSUE+CoYZJudCPKcA3Vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:a1:f3:05:48:14:ef:f2:ed:45:e8:81:b5:d8:18:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
        Validity
            Not Before: Apr 18 16:01:12 2025 GMT
            Not After : Apr 19 16:01:12 2025 GMT
        Subject: CN=389ac1591458d8248ab790c7c9e117dc3aac8b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9a:8a:3e:83:a4:7b:65:af:02:0c:81:e1:b6:
                    d8:a9:cd:53:27:3a:21:e8:b1:bf:81:74:32:c9:1d:
                    fe:87:fa:b6:bd:89:1a:51:7e:a3:57:fe:fc:02:7a:
                    1d:98:61:bc:7e:ce:5c:cb:d2:0e:3c:4d:6d:0a:cd:
                    7d:dc:ca:d4:bb:2a:32:14:ee:e5:47:c3:38:d1:7e:
                    a4:5d:23:ca:d7:de:5e:ff:b7:66:ec:7f:42:94:f7:
                    da:c1:e8:05:36:fb:73:5b:50:24:18:37:a1:09:5c:
                    1e:d2:32:ba:6c:b6:bf:26:dc:6e:fa:e2:76:07:bc:
                    0e:68:1f:95:d0:da:20:b1:af:ad:c5:74:10:a8:a8:
                    e6:c9:a0:e1:8c:6a:c3:05:43:a4:2b:47:cd:f2:7c:
                    3f:e0:6c:67:60:8c:32:9e:26:e6:be:9a:8c:e1:ed:
                    f5:33:22:aa:16:0f:00:2c:69:af:c9:4a:16:4b:ae:
                    09:4a:39:7b:1d:1c:13:3d:c1:05:3b:10:af:ae:f2:
                    30:48:68:c0:72:00:c2:67:58:b8:16:a4:c0:25:13:
                    90:1b:ce:fc:a0:78:bb:78:53:cf:1a:0f:5e:b4:5a:
                    58:3b:c8:f6:46:b1:6f:a9:4c:82:8d:a2:05:1b:9b:
                    b5:d2:6b:0c:ab:ee:7a:0d:01:1d:ba:37:96:39:69:
                    d1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9A:C1:59:14:58:D8:24:8A:B7:90:C7:C9:E1:17:DC:3A:AC:8B:20
            X509v3 Authority Key Identifier:
                keyid:7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f2:ec:5e:1e:12:45:cc:95:36:7e:25:a6:f1:09:b9:e7:5f:
         14:76:ac:c7:35:4a:fa:2b:cb:3a:a2:b2:64:d1:0a:0e:ee:4f:
         31:f6:bf:e2:d4:95:74:82:26:95:9f:cc:09:e4:a7:62:cb:be:
         5f:bb:d9:93:44:6c:fd:d7:c2:45:b0:9e:08:12:de:36:a7:6b:
         9f:5e:95:5d:5f:07:7c:86:26:e2:f4:73:dd:f8:20:5f:6c:23:
         b3:52:19:48:aa:73:e7:bd:2e:c6:16:23:e0:11:5d:cf:66:33:
         f0:13:0f:bf:7d:f0:91:c3:cb:8b:8d:6a:e9:cb:c7:dd:17:0f:
         c9:80:16:9c:a3:74:1e:d5:2d:98:fd:ad:14:af:04:98:ae:af:
         d1:0b:b6:3e:0e:8a:1e:be:a2:e7:12:48:fc:8b:0c:c3:f2:dd:
         9c:6f:52:ef:0e:e2:32:f5:35:59:59:6a:20:60:1f:d0:bc:f5:
         bb:22:67:62:9f:2b:1b:d4:a9:4b:41:50:fa:dc:55:42:45:8b:
         f2:01:4b:e8:25:e9:ea:ef:7f:c4:9e:79:b7:d8:16:f1:b7:17:
         03:ed:63:64:a2:54:d2:18:fe:32:1e:d3:ef:61:11:ff:ef:ea:
         6b:16:3f:09:91:70:2c:0b:26:dd:00:cd:8b:45:51:9c:6b:14:
         fb:89:14:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:52:27 2025 by rpki-client