Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File:                     1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier:          2Xhou6ZNSh/HznYe7dMxt/1txAoK5XXK91ZRKAmUM7o=
Subject key identifier:   50:61:23:DE:7D:D1:DC:42:38:87:20:73:26:DD:AF:BB:1B:55:D2:0C
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer:       /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial:       01962A1759B0DAECEA36E5857CD4735895D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number:          1503
Signing time:             Sat 12 Apr 2025 13:01:35 +0000
Manifest this update:     Sat 12 Apr 2025 13:01:35 +0000
Manifest next update:     Sun 13 Apr 2025 13:01:35 +0000
Files and hashes:         1: 0PRh-Ryf5Bbnr0lOh4NNRU5Dvtk.roa (hash: jgK2NNDoTbWiQ7uIBzHm15T4lQ1IK4iXj6RZrP5o0x4=)
                          2: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: CPnzP3XPODP+mkjIGOLKTbwIIVsSBFWNNu1z9osDMaI=)
                          3: 2LNh2IK4jZn1zUGBoSeuOCdHsXI.roa (hash: oJ1ixo11Dgt3gqct0Oh6zVb2kz2NqX0+yoE97/FL8Fc=)
                          4: Mj33PSIVDFEMWJHgu59FVh30wBE.roa (hash: LnMHKUsXF7KzdF90MCgfrbR5YbM5UFpQOfqwvOjdFkc=)
                          5: X3rPCUQOCzHRW1aOB1JMsXT6ETw.roa (hash: Mnw7vSeAR5wWc2r0nd1dxOLcS1XganxG0iGji5vuiZQ=)
                          6: eV94BXe8LtEfrEreyIQkc6VGevg.roa (hash: n/7ce91I2ejVxdCN2rHxzeGGcgk6A9ogkMPQOK3FmSQ=)
                          7: y219uopaZvXSdvuyVN0z8hSAj3g.roa (hash: yOxEDrbHVzQ3D4oMaRFodYyQEbnpgrKDN1hHuSZgDh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 13:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2a:17:59:b0:da:ec:ea:36:e5:85:7c:d4:73:58:95:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
        Validity
            Not Before: Apr 12 13:01:35 2025 GMT
            Not After : Apr 13 13:01:35 2025 GMT
        Subject: CN=506123de7dd1dc423887207326ddafbb1b55d20c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3e:80:9d:a3:22:93:9c:ca:4b:3e:22:a9:6c:
                    da:3d:d6:cc:f3:3d:49:0f:ca:8d:73:84:ad:b8:7b:
                    1a:b9:14:eb:c2:73:70:ab:f1:28:24:b0:f2:59:d8:
                    2d:26:50:b7:8c:4d:06:61:6a:54:8b:d4:ad:7f:84:
                    8f:10:a8:dd:c7:10:48:a6:d1:16:58:58:1b:97:79:
                    1e:b1:a8:b0:71:3b:31:b5:7d:e6:92:6d:3d:05:b6:
                    e8:80:c8:11:a6:81:c1:16:34:c0:4b:92:a0:8d:88:
                    bf:17:fc:43:7c:de:37:3a:4a:37:de:48:f4:fc:24:
                    03:fb:2f:d0:49:c5:73:19:2c:ae:a5:b8:5b:cb:5f:
                    c6:e6:f2:2a:71:ae:a7:21:09:de:22:0b:08:aa:31:
                    9b:e9:8e:7b:8a:87:cd:ff:49:fa:62:06:51:dc:96:
                    e6:4b:36:29:d2:4e:57:e3:e5:ad:fc:61:1f:55:4e:
                    fb:c4:2c:23:6d:3e:20:b1:09:a7:bd:0e:26:fb:68:
                    99:ec:eb:ad:7d:99:ec:d8:9a:01:a5:55:1f:8e:22:
                    7f:ce:88:a7:02:9b:8f:5c:3e:76:e4:5b:99:88:e7:
                    93:a8:c1:f1:b7:e0:fc:fd:1d:dc:51:5d:59:42:44:
                    9a:89:1f:28:f4:40:24:9d:1d:78:7a:a1:1e:05:76:
                    e0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:61:23:DE:7D:D1:DC:42:38:87:20:73:26:DD:AF:BB:1B:55:D2:0C
            X509v3 Authority Key Identifier:
                keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:6b:f4:86:aa:36:40:14:bb:cd:9b:9a:31:06:fd:33:bb:44:
         ad:6d:74:56:7b:dc:df:73:06:ad:b6:31:4b:d5:1b:55:42:4c:
         d8:2f:77:ca:d0:a4:d3:02:01:4e:4f:56:f4:87:de:a4:e9:3c:
         20:29:33:c7:60:76:44:9c:21:d9:23:69:e2:fc:6d:81:f2:35:
         bd:31:2f:81:af:dd:3d:93:b8:86:03:45:99:36:9a:43:0c:52:
         29:e1:e7:e9:0e:0c:73:2e:e4:af:de:b4:ba:81:82:8e:2c:71:
         7a:63:00:5d:bc:28:b2:9e:cf:0a:12:c0:e0:b4:6a:a4:27:0a:
         86:c4:68:ce:ed:fa:4a:c1:29:13:c7:17:f4:3f:20:d6:34:26:
         3c:48:ed:cf:18:a1:3a:2b:a3:d8:97:6e:e9:c0:32:62:d0:cf:
         4f:e5:83:aa:38:83:2b:70:d4:ea:c2:51:cb:44:76:85:d7:81:
         e0:ce:7c:11:07:7d:b2:ef:1e:ca:3b:10:e6:e4:13:87:a1:4c:
         e2:27:e1:83:f8:7c:94:75:5d:35:af:45:89:84:ce:0a:05:47:
         56:5a:e6:e9:88:0a:1a:71:6c:fc:38:27:c1:9a:b7:d0:11:3a:
         f3:0b:a8:e8:9f:ea:ba:e3:16:a4:85:54:22:ac:ab:2a:61:84:
         27:28:ff:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:26:26 2025 by rpki-client