Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
File:                     pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft (raw, json)
Hash identifier:          yVLhB3kLllj6xIRdtC3Sgvdci6Rv/tbkcyUzg+26JmA=
Subject key identifier:   6B:39:EE:EF:28:99:C9:20:0B:7B:D8:2B:DA:B5:C3:62:3D:35:27:60
Authority key identifier: A5:85:E5:E1:5A:A3:42:87:CA:E4:36:8C:B5:8E:72:27:FD:87:EC:BA
Certificate issuer:       /CN=a585e5e15aa34287cae4368cb58e7227fd87ecba
Certificate serial:       0196515BED153E6DDA9500617EBB6E612100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
Manifest number:          14FB
Signing time:             Sun 20 Apr 2025 04:01:40 +0000
Manifest this update:     Sun 20 Apr 2025 04:01:40 +0000
Manifest next update:     Mon 21 Apr 2025 04:01:40 +0000
Files and hashes:         1: BfRloUJHji-lEUaufwMc19LxiqE.roa (hash: 94Vq30eYX4ShhMgHZx9s+4a5DKBY3zN9CTPT6BVaH44=)
                          2: pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl (hash: a86hBqoGzZlK3a33GRiTJSww3AbCC+Nl1G3q51G8n9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:5b:ed:15:3e:6d:da:95:00:61:7e:bb:6e:61:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a585e5e15aa34287cae4368cb58e7227fd87ecba
        Validity
            Not Before: Apr 20 04:01:40 2025 GMT
            Not After : Apr 21 04:01:40 2025 GMT
        Subject: CN=6b39eeef2899c9200b7bd82bdab5c3623d352760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fe:b3:f5:8d:62:b5:82:99:6b:23:c9:28:a7:
                    a8:b2:57:45:4f:c8:6c:f6:10:29:92:45:06:f3:45:
                    3c:3a:bc:ec:e5:fb:89:86:d4:48:71:eb:52:9a:0e:
                    19:13:7a:09:68:fe:62:eb:f6:56:d3:91:61:a4:22:
                    9a:10:79:0d:98:af:88:f8:7d:08:b9:bc:f4:00:d8:
                    d4:bb:60:52:09:d3:21:1b:9f:19:13:c5:21:88:b6:
                    f7:a0:ab:9d:29:41:ea:97:1d:82:b4:ae:11:37:a9:
                    17:8e:a3:f0:fa:9f:35:ec:3a:4d:5c:e3:a3:2e:a9:
                    89:c0:15:54:dc:f3:de:06:b9:1b:b5:1b:29:eb:38:
                    83:9f:7e:c7:00:49:69:4d:79:9f:b7:a6:4a:2b:d2:
                    93:b3:a5:6a:c3:9c:f0:6e:86:24:0c:be:44:ca:8c:
                    96:0d:22:e1:17:b5:86:39:bd:76:b3:d9:21:2b:c2:
                    e7:86:6d:53:74:24:a8:c0:5d:1f:24:8f:a3:73:3f:
                    0a:7d:cb:69:a7:e2:9f:86:81:3d:32:ea:5e:64:eb:
                    d7:a3:77:1e:c5:4b:50:e2:70:b0:e4:c8:6e:d1:3f:
                    8b:e3:24:f1:62:d2:3c:6d:8a:dc:7c:5f:ff:6a:0f:
                    83:01:3b:c4:62:ce:ce:bc:09:f4:2e:1c:b3:17:e5:
                    1e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:39:EE:EF:28:99:C9:20:0B:7B:D8:2B:DA:B5:C3:62:3D:35:27:60
            X509v3 Authority Key Identifier:
                keyid:A5:85:E5:E1:5A:A3:42:87:CA:E4:36:8C:B5:8E:72:27:FD:87:EC:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:3c:e8:e2:5f:a5:84:89:8d:0d:f9:59:ac:31:90:1a:f9:e7:
         07:fb:1b:c3:c3:c8:79:11:b8:ec:9f:34:73:e6:e7:0b:79:41:
         c9:b1:7e:05:b2:17:3a:1c:c5:a0:00:45:3c:2e:36:13:0e:94:
         07:b9:fb:98:6c:9c:b6:d4:e7:4c:d9:d4:52:ca:5d:af:c8:ae:
         56:20:62:33:2e:01:ba:e9:0a:7e:08:86:94:e5:7a:4e:44:a7:
         59:59:d6:91:38:03:ac:34:63:f4:ca:74:56:05:a5:79:6c:84:
         dc:ea:4a:bd:70:8b:8d:6c:95:8d:96:35:47:88:46:b4:be:92:
         b0:a6:67:8a:f8:e0:b5:14:38:f7:00:58:ec:3b:8c:70:c7:2d:
         ae:59:79:91:d5:cc:70:40:89:b8:57:f0:6f:9e:9e:90:61:fc:
         21:67:63:77:65:0c:ca:df:14:8c:d7:73:01:fb:b2:57:3d:44:
         25:90:c6:36:b0:8c:60:ff:9a:d6:96:bc:f7:a7:72:91:9e:cf:
         f4:03:77:b8:5a:49:57:e0:3f:13:e2:55:17:c4:53:bf:4d:7a:
         ba:89:fc:b1:9e:f2:b8:ee:2d:f1:6f:ae:54:cb:00:38:51:3a:
         80:cd:9e:a8:1a:42:34:75:25:71:fe:44:0b:6d:b7:fc:c3:21:
         bf:62:c0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:20 2025 by rpki-client