Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File:                     RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier:          Zxjbx4Zy6WXdre/I2U74Vu++dljRL5DsOlh1aG+1hps=
Subject key identifier:   56:5B:10:8F:FF:C7:B3:9F:4F:AA:90:5D:0E:3D:74:94:75:A8:85:42
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer:       /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial:       01965011CF50D0C3DD44EE381960B05C462B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number:          151F
Signing time:             Sat 19 Apr 2025 22:01:06 +0000
Manifest this update:     Sat 19 Apr 2025 22:01:06 +0000
Manifest next update:     Sun 20 Apr 2025 22:01:06 +0000
Files and hashes:         1: 1ZW8tndM5AtB-BPpT-oVfX7UdWI.roa (hash: 4fwNFjC/KzIgxsaWUD66CE+7p9ui38GyV7XXtJ3qf8o=)
                          2: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: xHq2dNN+vkgs9vuck5U4Jmyeiqp9K4H0Cokq/e/ePvA=)
                          3: azDvVJUoNvYqaEaZIhu9OqWr21Q.roa (hash: JWxoJDpKURHEm1uFBb309inT9x2eVZK63cqhRvZkCeo=)
                          4: hVN1Qld91f5dBJ9SSDlF23fJ2wE.roa (hash: fB256LdP6wo0MmK8V0JJWIWF+X7CQ/bXWoxB33HPuzk=)
                          5: jXuJH5XlRjh9NbnahdD8Y6zEokQ.roa (hash: uTge3zTxck7gBX+9co6u8laUzjU+YV+PjrgGrj8fBnM=)
                          6: sNlz3ltNKwFJp9lFAJRiixdiytE.roa (hash: fcd5iGxutFpHfnpxl9mUlT8Mi1NSPiKw7EA6qelRziw=)
                          7: xWzjOiU4GIbFmqwyeVmah8vO8F0.roa (hash: S4iCzl3PC4M/IRKSKX7IIQOXaSNab8mVow5IXg2rGLA=)
                          8: xwhEAx2VE0gucAj4mFhYH2uYVFI.roa (hash: nFpFXOMp97LHbzG3/tbWsearfU/sSkX/vvtwwnlnskI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:11:cf:50:d0:c3:dd:44:ee:38:19:60:b0:5c:46:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
        Validity
            Not Before: Apr 19 22:01:06 2025 GMT
            Not After : Apr 20 22:01:06 2025 GMT
        Subject: CN=565b108fffc7b39f4faa905d0e3d749475a88542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ae:7a:e8:7e:48:54:cc:15:55:23:21:d2:71:
                    f6:3c:5b:01:08:b4:df:14:b3:36:66:ae:67:b2:e8:
                    00:b1:04:01:d6:4d:ac:d5:17:d8:f7:e6:3f:93:80:
                    31:0a:e2:53:23:8e:1b:25:77:de:f8:15:20:da:8e:
                    92:49:80:fa:7e:63:67:de:b8:00:27:e0:d5:c6:52:
                    b9:26:4b:cb:9f:3e:32:e5:45:18:66:97:bb:0f:3c:
                    a6:bb:a9:f5:78:0f:f7:6a:0c:8e:68:b1:ca:dd:69:
                    7a:67:9e:36:b7:e8:08:f0:45:be:eb:93:b4:aa:17:
                    14:46:90:b6:ae:6d:95:57:46:e2:b5:4b:59:54:8a:
                    43:2c:ea:8c:21:3e:ea:5e:84:66:63:20:08:b2:3f:
                    13:12:d7:c6:04:c3:b2:32:c9:a0:1d:a2:ab:32:da:
                    20:f8:db:5f:0e:02:a2:b1:3e:5e:35:db:14:93:39:
                    a8:7a:2a:54:1d:26:d8:6b:dd:02:ff:a0:c3:29:fb:
                    3f:db:b0:2e:2b:6f:44:5b:d6:c3:f3:3b:15:08:e7:
                    19:8b:46:03:44:84:94:7b:43:e3:23:4d:b1:80:93:
                    df:b0:31:56:c1:9f:b4:0a:69:62:00:69:43:36:53:
                    57:0c:a5:c0:1f:84:f4:b6:69:99:6e:b7:f7:43:a9:
                    dd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5B:10:8F:FF:C7:B3:9F:4F:AA:90:5D:0E:3D:74:94:75:A8:85:42
            X509v3 Authority Key Identifier:
                keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:d3:15:7b:d6:75:af:7f:32:18:6c:36:41:86:e3:39:d5:28:
         a0:11:f9:38:98:0e:1f:96:f3:16:33:ed:8a:cf:8d:e3:ad:90:
         1f:8c:93:57:53:9d:fb:04:88:27:b6:de:09:6e:5d:72:2f:5c:
         5c:0d:28:e2:f8:f3:9b:c4:23:6b:77:e1:b2:26:a6:6d:ca:96:
         1b:bd:5a:75:65:67:40:33:10:c4:e2:c1:45:36:0c:81:98:b7:
         1b:c7:e8:45:de:3e:93:fd:45:ea:35:0f:c5:67:9a:22:bc:01:
         0c:c6:9f:4a:cb:14:d2:ff:15:8b:a2:b8:91:dd:16:08:89:d1:
         01:79:49:76:1c:14:3c:99:56:1a:1e:a5:97:55:14:e5:d2:d1:
         94:ee:46:6f:e2:ed:6e:af:fc:4d:60:91:21:2a:e0:eb:38:b5:
         a7:3d:b6:9a:1b:c9:00:e6:29:0c:eb:a8:d3:11:59:0f:83:b2:
         38:23:d8:c1:93:cf:81:3b:fe:26:be:ab:02:cd:f8:03:6e:f4:
         33:1f:dc:c2:7f:e0:6b:70:f6:07:50:1a:60:08:27:97:33:3e:
         43:e4:04:b5:fc:09:a4:59:11:15:96:01:1a:2a:e2:c9:4c:ff:
         6d:b7:03:35:9a:d3:0e:62:7b:96:4f:eb:9f:d7:ee:ce:b1:57:
         8b:df:f2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:04:12 2025 by rpki-client