Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
File:                     Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft (raw, json)
Hash identifier:          tXXcN+eTQMetNnLxktj0Av3nHz5sfs1AwVwCsNIURo0=
Subject key identifier:   14:21:9E:28:95:4B:A1:8F:30:C7:AD:1C:FA:BB:B8:EE:98:B2:F0:14
Authority key identifier: 17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41
Certificate issuer:       /CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41
Certificate serial:       01968BEF766462C17E9E875E1234CE5E3AFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
Manifest number:          151D
Signing time:             Thu 01 May 2025 13:00:48 +0000
Manifest this update:     Thu 01 May 2025 13:00:48 +0000
Manifest next update:     Fri 02 May 2025 13:00:48 +0000
Files and hashes:         1: Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl (hash: +eF3spTCUTdqa1lLB0kxl/QjlvIM7qEiEzq1VzBopaA=)
                          2: sXBgVFkVLsDSLFu0VPEzayMbTVY.roa (hash: 9PH3zbHvy0n97ISInagYoPKrYxbqwVNlm+VRnpV8hJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8b:ef:76:64:62:c1:7e:9e:87:5e:12:34:ce:5e:3a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41
        Validity
            Not Before: May  1 13:00:48 2025 GMT
            Not After : May  2 13:00:48 2025 GMT
        Subject: CN=14219e28954ba18f30c7ad1cfabbb8ee98b2f014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:70:0c:32:eb:d3:0e:44:be:13:84:84:23:b8:
                    53:3b:79:6d:1b:18:59:35:a4:cd:98:6e:3c:29:d7:
                    39:ce:58:e9:ca:6d:66:e8:71:48:61:51:32:67:22:
                    39:ed:72:8f:bc:88:3a:7c:13:bf:b6:4a:46:03:9f:
                    2f:24:28:00:ca:f3:f2:f5:3d:a1:34:99:6c:9b:af:
                    3e:3a:c5:d3:55:76:55:45:01:c3:fd:a9:2b:3c:60:
                    9e:28:cb:4c:05:81:b3:ef:ad:10:8b:b3:48:b5:74:
                    4c:1e:bb:b8:ab:8a:38:51:f9:2b:86:23:19:ca:35:
                    92:e5:d0:7c:a7:95:5a:84:a0:4c:e2:78:6b:6a:a9:
                    b9:b5:08:24:a4:58:98:48:a8:42:b0:06:66:c6:af:
                    be:9e:cd:83:06:7d:30:f4:13:87:91:e2:74:d0:b2:
                    9e:e0:d9:6f:2d:6a:19:8b:34:30:bf:3a:21:0a:86:
                    67:dd:db:cd:9e:08:a5:f6:fc:21:ae:46:fc:01:bb:
                    ed:71:9d:97:eb:70:fd:cb:e0:eb:31:88:05:7e:2a:
                    f0:26:1e:14:5e:73:66:b6:3b:80:d8:ea:77:ac:91:
                    63:1a:11:ae:69:f3:7c:32:be:21:21:07:f1:d2:28:
                    fc:0a:88:c4:d0:ea:f0:ac:f9:e6:f8:f7:e5:13:be:
                    0a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:21:9E:28:95:4B:A1:8F:30:C7:AD:1C:FA:BB:B8:EE:98:B2:F0:14
            X509v3 Authority Key Identifier:
                keyid:17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f0:f9:c9:7a:11:f0:82:bc:4a:e7:df:3e:5d:c8:8d:5d:95:
         e1:25:6d:ca:a6:58:a6:8f:75:7c:0a:46:d5:80:2c:63:19:33:
         4f:30:c3:d5:63:dd:e0:58:aa:cf:9e:c0:f0:88:15:ef:5f:af:
         eb:cc:b1:f1:07:81:f8:7c:fd:70:2f:3c:55:5c:6c:ef:ec:39:
         da:e3:6b:2a:6a:2a:cc:bc:18:4a:3f:85:8b:29:41:f6:1f:cb:
         24:5e:3a:87:50:68:e9:56:f6:1a:9b:a2:47:44:e9:83:49:30:
         59:50:d2:3e:5d:f4:f1:2e:af:92:b7:6b:8a:db:13:75:6f:4b:
         f1:a3:60:48:ea:5a:c3:29:19:a1:88:21:08:e8:7f:c8:e3:70:
         39:45:5e:c2:3b:93:79:b3:e8:d4:13:9e:a6:b1:e4:61:ab:7a:
         eb:a4:c9:39:0f:a6:ac:71:2c:6c:26:6e:01:d2:dd:26:8a:c1:
         09:63:0a:a1:fa:44:9b:36:f5:dd:83:ea:d6:1a:a6:da:1e:b8:
         63:74:93:51:b3:03:3e:35:a2:fa:ac:71:9a:b3:36:7e:f9:58:
         c4:ba:59:f9:fc:da:fc:ef:2e:a0:d5:c5:a2:68:20:00:fb:d0:
         14:53:59:c2:21:8b:ee:eb:a4:27:d5:10:d0:81:82:b1:1c:52:
         92:97:41:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:44:37 2025 by rpki-client