Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.mft
File:                     eNd4_ldU3D4W2SJwQkviG5KB7HI.mft (raw, json)
Hash identifier:          X1StXfjiBTjuBZu7fuvP9VqNqUWOZr6Smo/KuMBhYoc=
Subject key identifier:   FB:52:0F:68:5A:19:2E:65:87:E6:4D:BA:9F:D7:2A:59:77:AC:78:5B
Authority key identifier: 78:D7:78:FE:57:54:DC:3E:16:D9:22:70:42:4B:E2:1B:92:81:EC:72
Certificate issuer:       /CN=78d778fe5754dc3e16d92270424be21b9281ec72
Certificate serial:       01964F6D867286471F406E4D55B937B0F8A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNd4_ldU3D4W2SJwQkviG5KB7HI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.mft
Manifest number:          14FC
Signing time:             Sat 19 Apr 2025 19:01:39 +0000
Manifest this update:     Sat 19 Apr 2025 19:01:39 +0000
Manifest next update:     Sun 20 Apr 2025 19:01:39 +0000
Files and hashes:         1: _YIHsKtpSrfiDTi3IftioZKK8nw.roa (hash: uFJ4Vp/00EgGhX0ZCpkxTcb4OukQ0RzSmiH9cmyjOHk=)
                          2: eNd4_ldU3D4W2SJwQkviG5KB7HI.crl (hash: N92Ttkf69AzaGpFfqeh4s4d82QI4zTSMdQc03vO5qA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNd4_ldU3D4W2SJwQkviG5KB7HI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6d:86:72:86:47:1f:40:6e:4d:55:b9:37:b0:f8:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d778fe5754dc3e16d92270424be21b9281ec72
        Validity
            Not Before: Apr 19 19:01:39 2025 GMT
            Not After : Apr 20 19:01:39 2025 GMT
        Subject: CN=fb520f685a192e6587e64dba9fd72a5977ac785b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:77:41:60:9c:af:33:56:9a:f3:55:9c:03:ae:
                    5c:12:8f:cf:d9:fb:09:33:a9:52:d1:46:56:3b:9e:
                    b1:36:25:5a:e9:15:f0:ce:2a:fc:3d:88:e4:ae:80:
                    ea:4f:05:ab:e2:f1:f9:c1:f3:2a:02:d0:e2:8b:8f:
                    6e:31:ee:3b:a3:af:3f:3a:9c:b8:fe:66:f2:7b:57:
                    a2:70:ee:ee:6a:2c:67:4f:af:99:b1:43:89:76:f2:
                    f4:a3:e6:cb:90:4d:ad:89:73:09:33:ec:fd:0d:b5:
                    a1:0f:98:6a:06:81:a2:8f:a6:8e:b5:2b:f9:37:1a:
                    e0:52:05:53:77:68:19:c3:42:42:c6:27:17:f2:f0:
                    e6:ef:fe:9d:ab:f4:4d:ca:93:94:fd:68:de:5e:4a:
                    ae:d5:db:0d:2b:15:b3:8e:c8:09:77:28:e9:d9:99:
                    da:af:db:16:d3:5e:1e:30:cd:4e:db:dd:57:ba:68:
                    d4:40:b4:1e:4a:32:b6:f5:e5:22:ba:da:a1:dc:18:
                    f7:05:47:38:1f:df:23:55:a3:4f:de:dd:ae:ef:04:
                    ac:b3:2d:30:43:c0:1c:72:cd:d3:d9:9c:8c:ec:19:
                    fb:56:ce:9c:b1:aa:19:69:9a:26:4e:64:7e:60:c1:
                    14:7f:eb:0a:0a:70:f7:55:03:b9:64:af:cd:83:ef:
                    42:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:52:0F:68:5A:19:2E:65:87:E6:4D:BA:9F:D7:2A:59:77:AC:78:5B
            X509v3 Authority Key Identifier:
                keyid:78:D7:78:FE:57:54:DC:3E:16:D9:22:70:42:4B:E2:1B:92:81:EC:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNd4_ldU3D4W2SJwQkviG5KB7HI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:83:85:be:d2:39:c9:7b:80:a3:0f:5d:d9:b7:d1:f7:f4:35:
         72:7f:6d:ec:ef:89:40:fb:52:eb:da:b7:76:92:2e:23:f6:4a:
         a1:17:fe:b4:10:ea:e4:41:1e:9c:4d:8e:5b:af:37:4a:f8:d8:
         3c:69:da:f5:96:6d:13:4c:4f:13:61:ac:83:6e:81:f7:43:c9:
         16:78:98:31:7f:2c:34:27:6b:4c:c7:6e:20:47:7d:f1:64:cf:
         94:75:a4:c1:9a:db:7b:ae:a6:15:fc:d5:10:84:b9:dd:4b:dc:
         bf:55:4c:d8:b9:22:7c:39:42:9e:8b:b6:0d:c7:c4:39:40:1a:
         94:25:69:de:aa:2c:7a:9c:3e:06:15:1c:8f:8f:41:29:d3:6a:
         06:6b:1d:c4:64:d3:6a:c7:fe:4c:a6:7e:cb:5d:44:ea:6b:dd:
         25:a7:9d:1d:31:b4:81:5e:92:e3:88:8c:63:86:fa:31:3a:1a:
         cf:ef:2e:04:2f:56:44:d4:79:ef:f5:97:02:b4:28:53:cf:7e:
         bc:ff:cd:ed:e8:ed:65:2b:7e:02:19:1c:b9:62:17:26:92:04:
         b6:9b:b7:04:aa:ee:f9:21:ad:33:93:6e:79:9e:b0:70:57:49:
         77:4c:f0:f4:51:58:f8:2a:35:bf:78:c3:ac:9b:17:ee:ad:df:
         1a:2f:a9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:03:12 2025 by rpki-client