Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
File:                     FQHIRfE91K1una5HDV_2nFzKN3E.mft (raw, json)
Hash identifier:          5MjSPyXuknS6luwV8PKX3gLYP6QKZbFSwqnN9/45yzY=
Subject key identifier:   FE:99:0A:65:BA:EC:4E:21:C8:2A:E5:32:0C:29:74:51:41:FC:0B:61
Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
Certificate issuer:       /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Certificate serial:       01965538C5001C905F5241AF280A06C7C57C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
Manifest number:          1500
Signing time:             Sun 20 Apr 2025 22:01:45 +0000
Manifest this update:     Sun 20 Apr 2025 22:01:45 +0000
Manifest next update:     Mon 21 Apr 2025 22:01:45 +0000
Files and hashes:         1: 9GIzAJUr_ot9Wk-LOBAg1Ku1CJ0.roa (hash: 9kCPW/zlShXMw7TqPRpG5YaYgI2ITqB9HqH456C8zHM=)
                          2: 9aibnbG15OYXr_CwwXWE25MOQzQ.roa (hash: uojCF0tqrH10N9391h4LuClKmMmHSTH14D7jK0LX19o=)
                          3: FQHIRfE91K1una5HDV_2nFzKN3E.crl (hash: vBSQgMWyrsmkpEmfQYnvLHrAMt+GdSbbNTGtpFmXpfY=)
                          4: JiiAQHHQ7ilOvQDebu3VRDZ4GHk.roa (hash: nCg2LBGRguEEYRzIikpWv4Lkalt9WCnhcWuH2ZKPobk=)
                          5: XNozD6gpDdwt0jGjIZYI-3jrZdo.roa (hash: hHWVNnpzJQhuwUuCwNB2KNKcpqNI3ZvRAGrTDP4DfJA=)
                          6: mFp3zFR1T75g9VSJshunQuImDjc.roa (hash: BipTnfO1xsn174nFqReyWGJxlVEfgezqCBk9woA8CoY=)
                          7: xpBtw8xNwQpBRT8ur2iAvN2a-zU.roa (hash: 9EOMXCiP71GUhwUoav13zuQOWQdLg+I/B4p7vGgCnlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 22:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:38:c5:00:1c:90:5f:52:41:af:28:0a:06:c7:c5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
        Validity
            Not Before: Apr 20 22:01:45 2025 GMT
            Not After : Apr 21 22:01:45 2025 GMT
        Subject: CN=fe990a65baec4e21c82ae5320c29745141fc0b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:88:99:59:59:a9:4a:21:8b:2c:51:10:95:52:
                    97:34:8a:c9:50:e1:0b:26:79:b1:fe:23:2f:7c:3b:
                    ae:a0:d1:0f:8f:ac:ab:e4:ef:34:a9:4a:c4:bf:f3:
                    a2:9f:ce:e5:7f:ec:68:37:02:21:7f:dc:ae:d5:ad:
                    98:8d:02:1f:a5:c7:5c:bf:95:81:db:ef:ac:38:4a:
                    18:ec:23:25:0b:68:86:d2:76:3c:57:cc:06:7e:06:
                    e2:c7:d0:24:a4:10:2a:5a:ed:2d:4b:38:d9:45:13:
                    eb:7c:ae:a4:46:75:f8:c7:07:ed:fd:e5:48:ab:2e:
                    29:ce:f8:74:9c:73:f4:60:e5:b7:23:01:37:fe:09:
                    aa:93:37:93:c8:bc:d6:b4:c4:cd:dd:1d:31:b8:73:
                    3d:37:80:d7:76:42:27:f1:7b:db:25:19:34:89:d8:
                    26:b2:ec:28:20:2b:f5:ec:1f:e6:1f:31:36:66:58:
                    87:04:80:c2:cf:68:e8:48:31:84:3f:79:22:3d:95:
                    14:39:b8:28:ac:8c:47:d9:08:c6:63:a8:8b:d9:c5:
                    5a:9b:00:63:bf:54:17:0a:11:ad:cc:dc:46:d3:79:
                    ae:51:59:41:2e:6a:b1:fb:ba:c2:31:f3:d3:55:e7:
                    17:fb:18:d2:ba:0b:a3:4c:7e:8c:04:82:32:fd:fd:
                    e4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:99:0A:65:BA:EC:4E:21:C8:2A:E5:32:0C:29:74:51:41:FC:0B:61
            X509v3 Authority Key Identifier:
                keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:51:4b:12:fb:26:64:72:9b:ac:43:3d:83:8d:f4:88:6a:6a:
         ad:42:a9:8d:1f:35:0b:86:4d:82:e6:66:06:5a:21:ec:38:03:
         26:5a:e3:67:72:27:00:ed:60:c3:6c:e3:09:33:52:f9:07:50:
         6b:a2:ca:39:72:5e:1f:28:64:ab:3a:55:d3:f9:48:36:2b:5f:
         97:8d:6b:6c:67:9f:96:12:77:36:a6:73:6b:da:5b:8e:f0:72:
         79:83:a7:ca:57:cd:47:c2:39:24:d5:e2:3d:77:1e:c3:1f:3e:
         77:c9:a5:05:21:e7:50:4f:4c:c1:f9:16:22:2b:eb:ad:84:46:
         d1:2f:ac:f1:4d:94:25:fc:4a:7e:f6:cc:c8:28:0d:c8:43:14:
         87:66:e8:33:df:b5:da:b2:dc:4c:17:7f:ec:24:8f:77:c8:e1:
         6e:0e:aa:33:4d:36:0d:97:6e:75:71:40:10:99:2e:83:ea:2b:
         6f:37:d4:14:e8:b3:ea:1f:10:c3:1d:26:28:44:c6:4a:5a:87:
         8f:f8:8d:af:d9:c0:f4:12:d8:1b:5d:52:e1:ee:01:36:43:51:
         37:86:ea:f4:80:28:ba:ed:31:6f:74:d2:93:cb:b4:4c:7c:35:
         09:23:7b:a9:5f:7c:c9:ae:ad:52:24:49:53:fc:4a:88:95:e2:
         6b:ee:0f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:30 2025 by rpki-client