Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
File:                     dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json)
Hash identifier:          voXA5f/ltRDoBuNFh3zYrRWOuZI1oq9HpgoaVi54jyY=
Subject key identifier:   F6:E7:74:F0:28:E5:BE:32:C1:5F:B4:ED:52:51:3D:E9:07:93:01:0E
Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Certificate issuer:       /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Certificate serial:       01967FB48F38AE673DBAC010EEC308E9B658
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
Manifest number:          0B14
Signing time:             Tue 29 Apr 2025 04:01:01 +0000
Manifest this update:     Tue 29 Apr 2025 04:01:01 +0000
Manifest next update:     Wed 30 Apr 2025 04:01:01 +0000
Files and hashes:         1: XVHW13An0H4R0lwafXi_5n-GjRQ.roa (hash: avC9Et5bzaaQctHEh7eFVRP1BlhGCdMVJW4eggq0SuY=)
                          2: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: 22a7z4M/5uaiMxD5YEgzUOB+69M4MLgHLQ3GiEZAJ7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:b4:8f:38:ae:67:3d:ba:c0:10:ee:c3:08:e9:b6:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
        Validity
            Not Before: Apr 29 04:01:01 2025 GMT
            Not After : Apr 30 04:01:01 2025 GMT
        Subject: CN=f6e774f028e5be32c15fb4ed52513de90793010e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ff:cb:c4:ee:96:37:6a:c8:c3:ed:6d:47:85:
                    74:6d:42:3b:bb:ba:45:ad:61:bb:e0:95:d3:45:81:
                    f8:ff:45:90:43:9c:7e:08:d0:81:37:6f:fe:60:63:
                    ff:84:84:b6:0a:f6:39:8d:d0:23:15:9f:32:0e:8f:
                    61:f9:cc:1c:11:5b:bc:b4:2d:0e:65:87:57:9b:f1:
                    ae:6e:6c:f2:21:8c:46:21:8c:28:5b:2e:fd:96:52:
                    11:2b:44:a3:c1:be:5a:b8:1a:81:3f:dd:71:24:25:
                    e8:c6:32:2a:a2:5e:00:37:64:73:1c:93:54:b0:3e:
                    e8:5e:53:28:44:86:ec:8f:fc:06:32:3b:83:21:fb:
                    38:32:75:ef:b6:e3:7c:44:4b:83:d9:9f:7d:c7:48:
                    ed:e0:ba:c9:36:73:0a:f5:e7:3f:7a:e1:c1:2d:48:
                    c6:f2:aa:bc:d5:ff:81:5c:92:bf:9c:a6:67:68:24:
                    57:1c:7f:ad:a5:d3:75:b2:2e:e2:1f:34:c8:57:22:
                    05:a4:d6:2e:1d:d5:61:95:2f:e1:88:b9:77:41:e4:
                    11:4e:d3:42:d1:3a:96:02:80:c4:07:78:5b:07:b8:
                    7e:09:6c:79:24:47:15:2d:ce:30:94:73:21:d5:5c:
                    30:71:ef:1b:03:ff:42:67:d5:70:55:18:95:98:a3:
                    1b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E7:74:F0:28:E5:BE:32:C1:5F:B4:ED:52:51:3D:E9:07:93:01:0E
            X509v3 Authority Key Identifier:
                keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:89:0d:2b:dd:08:0f:86:35:5f:3d:b0:0b:e4:dc:99:10:6e:
         5b:07:30:37:c6:08:e0:f9:81:32:ad:e9:76:d4:53:42:8f:d0:
         62:28:fb:8f:c6:b0:87:7d:9a:4f:4d:6a:a3:3f:e6:55:d0:8a:
         3a:18:9f:19:c0:0b:f5:e7:14:10:da:bc:d8:8f:57:85:32:68:
         68:e9:ef:a7:4f:14:3e:7f:50:e1:13:75:50:69:62:aa:a9:6f:
         8d:36:13:4b:0f:48:1a:72:81:ae:d9:32:37:0e:9e:ec:5a:0b:
         6b:c8:75:76:98:89:9d:b9:c9:1d:18:63:58:7d:89:35:28:29:
         e3:64:30:2c:57:ea:95:a9:11:c5:d4:1f:08:17:aa:34:3b:7d:
         55:87:02:ba:3c:b1:8d:45:26:4c:7f:fe:51:fe:e5:ed:95:5a:
         19:5b:8f:62:f7:8c:5e:3b:58:d2:f1:78:1c:ac:a4:be:49:56:
         56:32:a2:ed:8e:cf:c6:a1:b3:89:4b:7f:af:08:36:90:15:1e:
         8d:83:97:83:17:20:67:0a:5c:b7:64:d9:d5:6a:a1:e4:41:ac:
         91:20:1c:09:92:42:e9:b4:51:21:f7:a2:7f:45:09:ba:b0:f4:
         76:95:73:48:ea:e7:08:3d:6c:83:e4:e0:c8:f2:7a:7c:47:b0:
         84:55:87:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:26:11 2025 by rpki-client