Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
File:                     vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft (raw, json)
Hash identifier:          i0VVD/gvnFfvOoykKRp4+zpxZhaygVV+113eiK73Z2k=
Subject key identifier:   99:22:6F:84:5D:60:A9:FC:AB:4B:F7:32:31:D3:3F:2F:41:1D:F5:8F
Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
Certificate issuer:       /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Certificate serial:       01964556B5BE4E8269152DF9C3E2F314605F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
Manifest number:          14F8
Signing time:             Thu 17 Apr 2025 20:00:32 +0000
Manifest this update:     Thu 17 Apr 2025 20:00:32 +0000
Manifest next update:     Fri 18 Apr 2025 20:00:32 +0000
Files and hashes:         1: qBn6ockm6JSiEH-8udw_bpsms9g.roa (hash: nCADL7lFGk+Q6O3ajQCgcYhE2O5JRszPFiBp0Ov4f98=)
                          2: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl (hash: KHFfa4lwhjVCmLSTrveXVZFXLQ4qak8FSyDMienEYNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:56:b5:be:4e:82:69:15:2d:f9:c3:e2:f3:14:60:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
        Validity
            Not Before: Apr 17 20:00:32 2025 GMT
            Not After : Apr 18 20:00:32 2025 GMT
        Subject: CN=99226f845d60a9fcab4bf73231d33f2f411df58f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f4:fd:8b:17:72:a9:52:cc:39:00:46:2a:e6:
                    7f:3e:58:c1:3f:03:1d:ff:18:4d:3f:e5:7e:29:af:
                    bb:19:88:bf:2d:75:bc:c1:68:85:1b:73:a7:ad:79:
                    ce:32:60:a3:5e:55:c0:88:09:37:0e:b4:63:8b:ac:
                    ab:c0:76:1f:50:4a:31:c1:36:cd:8f:82:b0:ea:19:
                    e6:1f:b1:7f:8b:d5:89:9f:47:f1:94:d3:38:cc:54:
                    c8:e6:11:25:20:b3:0e:96:20:ee:1f:2b:3f:07:e1:
                    f3:8d:16:74:7a:fa:b1:ad:aa:83:88:b8:5f:1f:69:
                    0d:b5:ed:78:1c:3c:9d:f4:41:91:81:de:43:a8:b9:
                    76:ce:00:5d:11:30:a4:3a:14:86:37:72:71:23:4f:
                    21:0f:5f:18:16:a8:16:5e:e7:13:2d:1c:7c:e3:89:
                    7f:22:7a:89:99:1d:b8:20:50:e8:ba:35:8e:9b:e3:
                    24:ad:f7:98:aa:3a:2f:cc:e1:be:2e:f7:67:a8:7b:
                    ac:8d:5a:53:8a:47:4f:6e:c8:76:09:93:a1:11:62:
                    ed:71:7c:23:d4:af:c9:b8:e8:40:4f:92:a3:d3:15:
                    26:c2:0a:5b:97:a8:48:5c:15:cf:c7:44:78:ae:b3:
                    54:19:0e:94:20:73:dd:01:22:28:ee:01:69:0b:bb:
                    e3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:22:6F:84:5D:60:A9:FC:AB:4B:F7:32:31:D3:3F:2F:41:1D:F5:8F
            X509v3 Authority Key Identifier:
                keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:61:f5:10:67:85:22:e2:64:0e:ab:15:f8:62:eb:bb:2a:e5:
         29:de:29:d9:96:54:24:e4:3b:6c:e9:a4:5f:b6:a7:10:92:00:
         b3:27:5c:79:fe:e6:2b:e4:c4:ae:cf:de:81:2e:a9:ac:5c:d2:
         8e:8e:bd:d1:1d:48:68:27:be:08:4b:12:7a:d1:36:16:bd:ec:
         98:94:ca:8a:10:78:e5:1d:83:c7:af:94:48:4f:3b:da:ea:0d:
         a8:4c:7a:72:ac:15:2c:93:0a:8d:af:2a:3f:9c:d0:0e:3e:d4:
         49:cc:1a:29:32:98:f3:4a:bc:aa:4e:6a:40:bf:82:f3:5b:2a:
         3c:4b:3c:63:05:43:e8:eb:6f:ba:d1:cf:cf:8b:46:99:1c:f5:
         fd:25:9d:77:ef:da:ce:9f:54:36:56:f7:1f:f9:35:9e:65:ae:
         17:89:13:b5:1c:6c:ce:cb:90:ca:29:58:a1:6d:58:52:86:ec:
         bf:50:0e:98:70:0a:c0:c5:81:e2:cc:f0:4c:77:ed:ec:34:b7:
         00:ca:1c:2c:ff:81:1b:02:ae:1a:6e:c9:05:9f:38:71:92:b6:
         62:c5:12:33:4e:89:97:ec:08:65:fb:12:f1:c7:07:d2:3b:45:
         17:d4:02:1a:bf:70:6a:e7:a8:12:d1:5e:29:2f:25:c7:c5:6d:
         cf:af:7e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:40:06 2025 by rpki-client