Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
File:                     ccFpDvV6_P-uc725k0MJ-LcOu2E.mft (raw, json)
Hash identifier:          9DJUPuhtoBk/tlJlnCLg0iID7W7bfMg+T3lSX4+N/Xk=
Subject key identifier:   21:B5:F7:83:86:4C:07:B5:DF:94:50:2B:E5:FD:67:60:55:FE:7C:74
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Certificate issuer:       /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial:       01968021C8C386817F8E483CDA0192AF484C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
Manifest number:          1468
Signing time:             Tue 29 Apr 2025 06:00:19 +0000
Manifest this update:     Tue 29 Apr 2025 06:00:19 +0000
Manifest next update:     Wed 30 Apr 2025 06:00:19 +0000
Files and hashes:         1: T2Ms0IsK2hwIWCpu2VyNXMVfGqg.roa (hash: I5IAteZyEq5YzDFXdNGjAqCsBN2dhyO1KERPjxCLefk=)
                          2: ccFpDvV6_P-uc725k0MJ-LcOu2E.crl (hash: w4hHdImlVG/n00npJJUB4Gysg5KdpNzCah8K9r6TIQU=)
                          3: gIUgoRTyJmRfCQYS7uklAVhDlWU.roa (hash: K7KWFvQ91COOPs2G9/YPr+v2xa3Bl9m3cSR+0EKlTlQ=)
                          4: ghc4MPH3vTiYP5rga0h6BtqPh6A.roa (hash: +n/mGZaNW3qMvM/6+1HZZ0mUd3q3k/RCYwms9UGlFSw=)
                          5: h8NM3QNMAy3JQUb-72WEZdGpGjA.roa (hash: Lxvl2etM6iQ3TxJnQc+Uy0mpsnRIUxQq3ad2YMjelB0=)
                          6: rWTlkbZNrrsZjKWZTJP_rkzWTv0.roa (hash: OOrIatFR59tEQa9JkYCnHVEOWGvvetBIFgDhOWDZNAQ=)
                          7: v0zBDXFOccttRX2cT7fDoONDswQ.roa (hash: 4vPi5VK0C1d8kjVecT9rugkIfwxa9eC7Ww52TXS0hqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:21:c8:c3:86:81:7f:8e:48:3c:da:01:92:af:48:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
        Validity
            Not Before: Apr 29 06:00:19 2025 GMT
            Not After : Apr 30 06:00:19 2025 GMT
        Subject: CN=21b5f783864c07b5df94502be5fd676055fe7c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:92:78:90:97:cf:74:29:53:ce:24:46:d9:64:
                    a8:fd:bf:36:07:03:b2:7c:e2:17:61:e3:37:1b:56:
                    46:ae:b3:88:a2:a5:5c:fb:70:a6:31:74:b6:90:4f:
                    39:43:47:06:82:c8:58:f8:88:63:d8:90:fd:e4:dc:
                    81:67:20:db:d3:9f:bf:ec:5d:89:5f:b7:a7:73:f6:
                    c8:ca:a3:4d:23:59:a4:80:37:19:d2:d0:32:7d:e8:
                    58:56:e1:28:07:6a:77:39:6c:fa:ca:12:04:70:c1:
                    20:d0:aa:57:09:7f:31:90:aa:a5:a9:23:ed:f8:ab:
                    68:48:63:e4:51:74:0e:bd:5d:5d:54:68:53:73:a3:
                    a9:05:98:9c:45:ad:9f:0d:c6:53:ea:79:91:20:9d:
                    8a:2c:7a:30:d9:8e:b5:67:f0:27:67:e4:7a:30:53:
                    4e:4f:68:a7:5a:6c:d4:01:08:3d:fc:4a:bd:a4:39:
                    cc:73:34:62:9b:b3:9b:cf:08:11:1c:30:7a:a7:ad:
                    82:1e:41:da:2b:d1:a4:7a:fa:d7:c3:12:ff:8d:73:
                    a7:83:ad:ae:a6:36:7a:07:e9:27:1c:ca:19:ba:0e:
                    31:f1:17:83:9e:09:e3:14:d8:fc:27:97:99:19:27:
                    3b:f9:a2:f8:8a:27:ad:a7:d8:14:78:07:70:de:5b:
                    63:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B5:F7:83:86:4C:07:B5:DF:94:50:2B:E5:FD:67:60:55:FE:7C:74
            X509v3 Authority Key Identifier:
                keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d8:8e:4a:b0:7a:14:fe:db:0c:67:96:f5:45:c4:bf:8b:53:
         cf:c7:a1:f8:f3:8b:45:33:96:68:44:a8:65:ed:96:49:87:2c:
         bf:c4:21:d5:10:47:48:a8:3f:8e:b7:c5:af:a2:12:bb:52:23:
         4e:d9:1c:b3:0e:96:8c:28:a1:3d:a3:63:68:1f:94:05:83:7a:
         fe:73:c0:86:93:f3:86:1c:84:8b:cc:1c:ba:a1:e1:13:ec:63:
         00:68:44:cd:c0:2e:d9:d2:5c:d2:08:5e:64:ac:cf:e6:0e:81:
         e1:68:92:3d:4b:3f:d0:e6:6d:74:bd:af:89:79:1a:6d:c3:97:
         ef:6c:72:fd:01:91:69:61:2a:77:48:6f:7f:53:79:28:fe:68:
         9e:2c:cf:ae:2a:d2:95:bc:c4:49:88:8a:08:62:8b:a7:30:8a:
         9b:58:d0:df:16:19:c7:47:24:3f:71:bf:3a:5c:76:de:3d:a3:
         ea:a2:a9:e2:10:51:11:9c:aa:60:14:e7:f6:cf:df:b9:06:89:
         85:15:84:8a:13:c3:f5:03:25:f5:ad:fa:78:fb:75:67:23:d8:
         7a:bd:4b:f1:fc:c5:53:c2:a2:f0:b3:f9:ca:21:28:01:19:98:
         aa:ec:ae:08:f9:33:21:87:71:89:f7:47:b2:aa:59:77:f3:25:
         de:5d:71:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:10:13 2025 by rpki-client