Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
File:                     z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft (raw, json)
Hash identifier:          h+ZYwkWCwuVr6tIweKBknaOS91C1II0HP7w4V7zQB5U=
Subject key identifier:   67:4F:A8:BA:18:9C:9F:7A:DF:D3:6A:C4:11:01:E9:F6:50:E1:D4:B5
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Certificate issuer:       /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial:       019673E6EC32B961EB2F57470F5FAD785EEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
Manifest number:          106D
Signing time:             Sat 26 Apr 2025 21:00:35 +0000
Manifest this update:     Sat 26 Apr 2025 21:00:35 +0000
Manifest next update:     Sun 27 Apr 2025 21:00:35 +0000
Files and hashes:         1: 3Se2yOnJsVWCGsg0f4PtxlfB3UY.roa (hash: TnQIP8m/z9TeUL6T1o3LFStwx3OkwZWYEkGyH7pKVzQ=)
                          2: C6G26s2_9rDhMVp1kQhNB3w99vU.roa (hash: /Sx9ARb2KrLY9zv7k7Qpt7h2hX4KWumGuc1xaBNSC/E=)
                          3: IeIheuUZIrSao3cwITZ9a7Vr14M.roa (hash: D6ff1htYAOrTrHoE1npjdhSz9xEaYGaeMk7OAb0vWUY=)
                          4: OToS6J8sZcb-NOk0SLebRPhhIy8.roa (hash: hJi47h64zp0y7tuydNdIF9Tsj0N17DTgxMy6IbUz6LM=)
                          5: TdLHKlZzjrEpDoV-ssGo-ZoVFdQ.roa (hash: olUxSsNWWfOkaH/tshrZT1VhUO7Fs87MPQLfSyoOypI=)
                          6: g25IGTKfPYjST4HNSDfCkGR8U-U.roa (hash: shszXMRp8pWU+jn/kDMsa59h70gxIvBt7/Q+QM/PucQ=)
                          7: z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl (hash: efByAGBpBTKD1V7rvwwNbc0wBaEkpXJOjUYkmMkp53w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:e6:ec:32:b9:61:eb:2f:57:47:0f:5f:ad:78:5e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
        Validity
            Not Before: Apr 26 21:00:35 2025 GMT
            Not After : Apr 27 21:00:35 2025 GMT
        Subject: CN=674fa8ba189c9f7adfd36ac41101e9f650e1d4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:6d:17:06:d4:9b:18:03:33:73:87:5c:66:
                    37:39:41:a8:58:e2:c1:77:c8:07:39:89:23:cf:03:
                    be:dd:8a:d8:8a:e4:5b:f5:0a:27:6c:54:62:67:53:
                    c8:05:91:6f:93:62:f1:10:a6:7a:d0:68:66:25:9d:
                    83:57:5c:17:92:98:05:76:06:da:e3:94:11:1e:ec:
                    f4:ce:ed:73:01:ea:c6:0c:c4:08:a0:31:1a:cb:1a:
                    52:a0:f6:01:bb:f1:8f:1c:ce:98:41:37:77:b1:52:
                    dc:e9:86:15:d7:b5:16:8a:76:d6:8f:9a:f5:9e:7c:
                    b6:22:f8:d3:b0:34:37:a8:c1:3f:f8:e3:a7:eb:84:
                    e3:6f:cf:39:11:b7:5d:68:51:a2:f9:4a:4d:86:3f:
                    f0:36:bb:a7:a1:25:b9:b6:b6:92:d3:6a:3e:31:1a:
                    fd:ed:a6:95:5a:66:f5:35:a6:df:ab:d9:2e:61:9c:
                    dc:fa:6c:8d:f1:3f:2c:cd:63:ff:ec:c9:e0:a5:a6:
                    55:c3:60:e8:84:53:86:a8:1a:ee:d4:b0:1c:d9:c2:
                    c7:82:c3:3a:f2:2e:c9:0a:19:81:95:29:94:74:b9:
                    f0:36:c2:88:8a:99:dc:2b:cb:e0:be:38:9f:15:0a:
                    28:14:ad:16:8d:a3:4b:3c:56:9a:c5:9c:9e:cc:06:
                    0b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4F:A8:BA:18:9C:9F:7A:DF:D3:6A:C4:11:01:E9:F6:50:E1:D4:B5
            X509v3 Authority Key Identifier:
                keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:83:1c:ce:7f:67:9e:65:9a:44:2c:b6:a9:d9:22:d1:8e:95:
         ca:e7:27:30:d0:c5:93:63:91:32:11:d8:54:d0:0b:06:98:76:
         b9:1a:b6:a1:d1:44:8f:78:e0:c3:61:4d:22:ca:eb:c3:65:fd:
         a1:13:45:e8:f3:54:29:41:26:b4:0c:f7:05:e3:78:a7:1d:d2:
         37:c1:25:ab:f6:7f:fb:1a:13:94:be:f7:94:ae:83:99:bf:c5:
         cb:0b:c9:c5:d0:55:36:5a:d1:61:9e:78:26:3a:0b:db:73:8d:
         24:32:58:7f:26:2f:9c:64:2e:39:5c:45:81:f5:07:5c:2f:18:
         c9:6a:42:ab:3f:70:ca:f9:4a:9e:e5:4a:b4:58:22:34:ec:66:
         83:de:1d:e1:a1:94:1d:98:f8:e0:0a:a8:33:c9:74:19:d9:39:
         44:73:69:1e:b9:7e:90:99:3f:b4:f4:61:3e:da:9c:e3:1e:f8:
         00:d7:24:39:c7:37:77:d2:fd:58:1f:56:b3:21:55:dc:83:0f:
         b5:7b:80:e5:1b:6a:75:1d:1a:22:bf:9c:be:84:38:24:6d:99:
         fd:b7:24:48:4c:f2:e9:4e:bb:f7:8c:a7:29:a1:96:07:35:0d:
         a5:84:6e:43:26:03:66:88:3f:87:04:31:86:5b:70:ba:c5:a2:
         2e:8c:8d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:07:53 2025 by rpki-client