Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
File:                     FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft (raw, json)
Hash identifier:          Jp7flaviAuFNy74dTT1Oa/Qm8TSahq+cn3xctcOCnPw=
Subject key identifier:   21:1F:42:2D:02:25:6F:DA:5A:C7:A8:D5:F3:5B:04:86:1F:9E:B9:3F
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Certificate issuer:       /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial:       019672304A9D0A41F3CC45F4807917AA0977
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
Manifest number:          146D
Signing time:             Sat 26 Apr 2025 13:01:29 +0000
Manifest this update:     Sat 26 Apr 2025 13:01:29 +0000
Manifest next update:     Sun 27 Apr 2025 13:01:29 +0000
Files and hashes:         1: DCNKSj1_5YHNKhsqvaqolZH_B60.roa (hash: TXy+j47cDCmczgpA/MrIE9kmjblkjLGkgY8O20y42aY=)
                          2: FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl (hash: pKpYrUve5zU26ofvn878D7+FY9Sfsc9DzmdMZFI5sJU=)
                          3: JvuO5YaPjLFf0HZP4H-1yUabiMY.roa (hash: +Bx+7z+E11mxbukF+AWlKTGcSTRDPcpqMiJ/UPsOhzE=)
                          4: O-lMv2utgSL0sF15RsiGk9rGqhU.roa (hash: 4uJaHT6rWS3qzpOxWgNId7Ke0ps1U1qLVv6t8Kfw/Vs=)
                          5: gJdvURE1CiuF2RTlrllA5EaJUA0.roa (hash: QQc8DdjtzLaI++nEpaA6R37pPd4UQFAmh/VqOKkxVE0=)
                          6: sPgmpLyF_PKafpXcgtR7FvsC9bY.roa (hash: sMp8sjJ9YjMshoV/D5bSKKVpPxzHt4F0frkmzXOCA3k=)
                          7: vWaOyyAnVx7B4tIZA5kY-cS2BzI.roa (hash: eaazpxj2ANXN1fDw5hHKWOdZyal6Udm1AqCua9Ig+GU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:30:4a:9d:0a:41:f3:cc:45:f4:80:79:17:aa:09:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
        Validity
            Not Before: Apr 26 13:01:29 2025 GMT
            Not After : Apr 27 13:01:29 2025 GMT
        Subject: CN=211f422d02256fda5ac7a8d5f35b04861f9eb93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d5:5f:ba:ae:20:f1:98:80:da:ce:33:91:a0:
                    f9:10:3f:a9:72:1e:29:7b:2a:1c:8c:03:a8:5e:2c:
                    9a:5b:d2:57:94:f6:9e:da:b2:64:ef:6c:15:50:a5:
                    94:0a:1b:3b:c9:1a:55:95:40:11:86:26:79:02:7c:
                    21:e7:bb:f5:3e:57:d0:55:90:a9:b4:71:4e:eb:c4:
                    c5:09:d2:20:28:1f:40:56:e7:d1:d6:cf:72:2c:de:
                    b0:8d:66:51:44:d4:b5:55:cb:e2:36:be:ec:76:02:
                    00:a8:05:a7:68:a8:79:31:46:7c:d9:53:10:35:ab:
                    ce:4a:77:d9:16:0b:03:89:9d:6f:ac:0c:e4:53:f5:
                    4c:5f:7b:1d:23:ff:6e:69:c3:dc:3a:86:19:aa:ae:
                    52:b8:43:4b:1d:78:d8:5e:5c:0a:d1:61:19:51:04:
                    0b:67:fc:66:00:b0:a2:6c:89:c9:00:22:3f:ba:b5:
                    60:95:33:a5:ca:8c:0c:80:7d:73:14:84:50:6d:68:
                    62:13:c3:ec:4c:f4:96:87:e5:6a:05:68:f0:d4:70:
                    8a:76:61:48:78:fe:d8:8c:85:8f:13:1d:3e:66:9f:
                    61:09:43:b5:6f:cf:bb:bd:ed:ee:11:56:7f:17:6e:
                    7b:0e:ab:2a:b9:4b:bb:31:25:f1:31:48:ef:7b:7c:
                    88:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1F:42:2D:02:25:6F:DA:5A:C7:A8:D5:F3:5B:04:86:1F:9E:B9:3F
            X509v3 Authority Key Identifier:
                keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:13:b8:67:d2:bc:24:56:7f:d1:f9:23:57:07:f6:64:4e:22:
         65:9a:e5:fa:bf:d2:5f:84:5a:f1:fc:45:50:c7:2f:5a:ba:e4:
         10:35:81:1b:57:af:bd:5e:11:54:34:01:2d:a7:a6:d6:d1:d4:
         9e:e7:9a:eb:d2:41:7c:69:f0:ec:79:75:73:fb:6a:62:2f:29:
         69:4d:20:28:21:d0:b0:b6:e3:f2:74:3f:8e:d1:85:54:a7:e7:
         90:30:39:17:8d:f5:9e:db:60:4a:68:09:af:e4:a9:a2:06:04:
         c6:a7:91:15:24:eb:cc:ef:4a:d3:7e:53:1b:c8:88:ea:9c:7f:
         a0:ac:10:a7:d2:d7:ab:9e:90:e1:2b:3c:27:27:e7:57:18:8e:
         2b:ad:a5:40:f6:96:5b:a1:84:9c:fa:a6:0e:17:87:0b:8a:98:
         e5:c6:4f:6e:a1:15:f8:a9:ee:c5:c0:3c:78:09:ea:66:77:a2:
         96:bd:c6:bf:e3:47:94:20:21:d5:c8:f9:2a:6f:b7:83:30:dc:
         da:12:de:51:5e:02:46:9e:a1:f6:70:ae:91:bf:8e:94:e1:b3:
         f0:04:a3:d1:b3:cd:05:b5:fd:1e:90:28:ad:47:c1:b8:a9:24:
         70:00:87:be:5b:61:06:7b:d8:9d:90:56:b8:d3:b2:dd:cc:7c:
         01:2d:c1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:15:03 2025 by rpki-client