Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
File:                     feDSOhFHDiQw9S4b4uAwFOK4TuE.mft (raw, json)
Hash identifier:          zuIzTuJJkzEA7QAz5diQqJ7QTkU3Q213RExwrJb/0ig=
Subject key identifier:   3F:CA:51:4B:D0:DC:CC:E9:86:DC:8B:80:22:0B:AC:91:71:9D:73:41
Authority key identifier: 7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
Certificate issuer:       /CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Certificate serial:       01963F8B9BE902A3C3BE1B5660C5445FEECE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
Manifest number:          83
Signing time:             Wed 16 Apr 2025 17:00:36 +0000
Manifest this update:     Wed 16 Apr 2025 17:00:36 +0000
Manifest next update:     Thu 17 Apr 2025 17:00:36 +0000
Files and hashes:         1: E2gg_EO0g5ogJ69Fn7MoQMdMaIw.roa (hash: K0keJyo9+vyobY1PR8SsbqM0uYhn2jaW3nrV1iu516U=)
                          2: feDSOhFHDiQw9S4b4uAwFOK4TuE.crl (hash: LpQAnp+azKmvai06oaoYLZsNTKbsqWOQF+3UbiTVYl8=)
                          3: vXuEkJ-9mpU1nfQBFK_5iOp0K3I.roa (hash: lDQFg6jP9zzKp8GOQZTtX7RG+jBwgGpPUV7sKS2JAPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:8b:9b:e9:02:a3:c3:be:1b:56:60:c5:44:5f:ee:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
        Validity
            Not Before: Apr 16 17:00:36 2025 GMT
            Not After : Apr 17 17:00:36 2025 GMT
        Subject: CN=3fca514bd0dccce986dc8b80220bac91719d7341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d4:a0:be:7e:74:f4:7b:93:2e:70:3d:cc:29:
                    ce:1c:73:d3:ec:98:4d:f3:72:d3:58:d6:17:0b:24:
                    ba:50:c8:07:cc:76:6b:2c:f1:e5:50:5b:da:b3:59:
                    13:bd:0e:7d:0c:9e:2a:ce:a8:df:a3:9d:1d:cc:51:
                    dc:b6:e4:b4:d0:d3:de:6c:60:af:b1:a5:9b:d5:a9:
                    af:11:e4:6a:cc:42:b5:4c:d2:b1:ab:52:bf:7e:70:
                    f7:7c:7e:ae:03:1e:37:90:93:55:9e:e0:47:f7:a0:
                    66:8f:32:d1:59:89:8f:46:24:62:2a:7c:d5:46:b7:
                    13:34:a8:8b:22:22:35:81:74:e9:47:be:d7:15:7d:
                    68:48:85:77:97:24:7a:12:20:d3:49:f1:d2:c3:e9:
                    c1:fb:a3:47:2a:6e:bf:ab:97:38:ab:89:bf:9c:9d:
                    08:cf:56:51:89:ca:90:6a:47:6a:09:18:66:3d:f4:
                    82:d4:0f:2c:ee:6c:f1:18:75:f6:7f:55:aa:8f:e3:
                    f5:9d:42:35:8d:0b:5e:80:df:f3:8a:f3:a8:63:e4:
                    a1:12:6f:db:1b:d6:9c:c7:08:bf:94:86:c9:3a:b0:
                    81:7b:7e:a6:46:58:81:11:fd:19:05:38:15:a8:c0:
                    3b:71:09:f6:0f:53:02:ae:2f:19:28:c8:f4:9a:9c:
                    4f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CA:51:4B:D0:DC:CC:E9:86:DC:8B:80:22:0B:AC:91:71:9D:73:41
            X509v3 Authority Key Identifier:
                keyid:7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b0:b7:20:27:68:d8:c2:cc:a0:d4:46:5c:ce:e8:43:99:ed:
         33:1e:13:00:d6:de:1b:e2:bc:c7:20:0d:b3:99:fb:f3:75:da:
         cb:70:58:9e:92:0f:50:55:6c:c6:e2:e9:37:69:b1:b3:e0:35:
         37:73:cd:f5:62:c8:88:2f:56:39:ca:71:91:96:82:f3:53:55:
         56:32:ef:3c:86:a2:9b:55:26:0c:65:d0:2e:cd:1e:3a:ea:49:
         0b:b5:72:ee:70:1a:c8:9d:29:69:9e:79:c3:3e:12:59:4c:0c:
         8d:f8:3f:ab:a6:da:fa:c9:a3:22:6a:b5:26:b4:0e:50:b1:32:
         a0:50:09:14:4a:7c:f6:7a:3f:99:44:21:69:88:42:28:13:5d:
         42:7f:d3:9c:10:86:07:ee:51:67:25:44:4e:4c:47:dd:35:2c:
         67:29:d5:6c:84:91:06:33:de:a0:eb:8a:47:1d:54:f6:c0:ce:
         58:cf:5c:c8:a8:5a:de:6a:6e:24:27:68:fd:68:cc:e4:28:dc:
         c3:97:f7:a6:5e:7e:c4:51:62:40:1a:32:90:19:d7:26:a5:91:
         f0:7c:7a:43:3d:a2:01:2b:80:4f:05:f6:da:06:b9:81:ad:de:
         dd:0c:ad:a4:1b:11:2b:5d:72:6c:8e:44:f8:37:25:a8:b4:0f:
         7d:c7:ea:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:01:34 2025 by rpki-client