Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
File:                     fGc9qtbZMX8BAdQaBCph5XaJRTo.mft (raw, json)
Hash identifier:          DouIp8LUwO5TvGXspwqIKsCRrpvUCb6E+V5jXSX0WWU=
Subject key identifier:   D8:3C:8E:DD:3A:16:F8:7F:26:7C:93:9B:FC:C6:36:19:0A:83:C2:5D
Authority key identifier: 7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A
Certificate issuer:       /CN=7c673daad6d9317f0101d41a042a61e57689453a
Certificate serial:       019671C1B3C76626D7339CD2ABAC28872168
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
Manifest number:          0F6E
Signing time:             Sat 26 Apr 2025 11:00:41 +0000
Manifest this update:     Sat 26 Apr 2025 11:00:41 +0000
Manifest next update:     Sun 27 Apr 2025 11:00:41 +0000
Files and hashes:         1: 7GFUUPQe5X4o8br9pIJdHkkRXtg.roa (hash: 4KUOaFluZqET8tORnDH6HMaQ2V49mBLgUsZvrKGZ4Yk=)
                          2: QruSm__TwUr_yHAYXjuNZoojNTM.roa (hash: 3QNaGA7ZG6uoQs8cjkKS1muqAr2cgCC2owbsQ1FitJQ=)
                          3: fGc9qtbZMX8BAdQaBCph5XaJRTo.crl (hash: iMo2wJJsyEER19ZYQGDgqMrJOjSowf1RPfxh8ywNgPI=)
                          4: qQ7iOR4Ssn9YuOR2RGcWRIhX7kw.roa (hash: wQiE3t4T6OAM43VIDSTCvTQoMR/uz5WRMJgjbw+3Glg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:c1:b3:c7:66:26:d7:33:9c:d2:ab:ac:28:87:21:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c673daad6d9317f0101d41a042a61e57689453a
        Validity
            Not Before: Apr 26 11:00:41 2025 GMT
            Not After : Apr 27 11:00:41 2025 GMT
        Subject: CN=d83c8edd3a16f87f267c939bfcc636190a83c25d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:e1:22:e8:89:ab:df:b1:66:fa:71:60:1d:
                    16:32:70:56:df:f8:58:dd:06:e4:17:4b:7b:a5:4b:
                    64:39:cd:ec:f7:2c:cd:13:8a:8c:c9:e2:ec:d3:fe:
                    a0:80:2d:c8:83:18:50:44:63:c2:e0:42:67:ea:9a:
                    ab:26:c7:46:16:d5:64:c3:3b:d4:99:df:df:d8:d5:
                    74:7c:12:2a:5b:51:0c:a2:61:71:dd:54:99:27:1d:
                    9b:fe:78:7c:1c:38:7e:88:29:5a:56:90:a5:fb:7e:
                    05:e8:d7:ce:d4:33:39:fc:3f:17:fc:92:c6:a3:7e:
                    84:30:6d:88:3d:be:92:af:16:c0:d8:85:ae:59:bf:
                    4f:37:9f:08:01:83:61:75:98:02:61:dc:ae:a8:67:
                    74:b9:19:2e:3d:14:4c:59:86:07:ca:54:4c:8b:15:
                    8f:38:c9:47:9c:5a:d5:f9:99:18:43:bb:d9:a0:cc:
                    0c:58:9c:0a:8c:0a:30:9c:0a:2a:28:3a:66:fd:56:
                    15:ec:e6:14:0f:da:1f:36:65:74:74:9d:a3:b2:7d:
                    20:b5:e9:91:f5:12:d2:67:6b:c0:16:c7:fa:8f:45:
                    c2:3d:07:d8:cb:27:71:cd:7b:d4:60:4e:c8:f7:de:
                    c5:e0:9a:42:cc:ed:c7:1f:2c:e9:9c:36:fb:a7:54:
                    56:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3C:8E:DD:3A:16:F8:7F:26:7C:93:9B:FC:C6:36:19:0A:83:C2:5D
            X509v3 Authority Key Identifier:
                keyid:7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:be:d7:af:76:58:5a:20:f6:f9:63:db:22:d7:49:1a:54:14:
         6e:22:10:86:5b:78:d6:82:b5:e3:cd:9e:e1:aa:80:e5:be:55:
         5c:60:42:35:64:98:5b:ef:c1:2a:df:34:cc:e1:5a:49:24:cb:
         ff:b2:c2:5e:2c:47:fe:2e:f6:21:9c:29:5c:9a:38:02:1a:03:
         15:6d:d9:7f:72:6a:65:1d:81:a7:32:77:c9:2e:73:c3:03:55:
         27:61:ee:47:6a:ca:a5:f5:7c:cb:90:18:ee:5e:be:ab:37:03:
         39:f6:51:f3:87:df:48:cf:62:41:f3:2d:ab:5f:8a:9f:a1:2d:
         5c:a2:b2:84:6a:8d:43:aa:00:53:4e:e7:03:72:3a:ef:6e:ee:
         97:ee:42:35:48:8a:6a:72:2b:13:c2:b1:54:eb:d0:62:f1:3c:
         54:eb:a6:bf:4b:a5:7a:4a:a4:42:61:57:fc:62:73:94:0a:10:
         7e:0d:cd:a1:50:3f:7f:c1:5f:bf:d8:36:63:c8:58:d5:a9:ba:
         27:6d:1f:11:ea:30:e1:d9:53:89:5e:9a:24:3c:ce:0d:10:92:
         29:56:17:ed:76:07:77:de:48:02:ac:bf:ef:fb:e7:c5:f7:d6:
         6d:41:65:14:14:5e:e0:bd:70:94:aa:d8:90:fb:29:07:94:06:
         c9:d8:ce:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:00:52 2025 by rpki-client