Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
File:                     8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json)
Hash identifier:          6SRGVZpDEStaQzJusww9OEpTJ5RinDvkboWvLNwE5Y0=
Subject key identifier:   7C:16:9B:4B:38:E5:4C:0D:F5:F9:F3:D7:63:28:10:5E:B3:6B:F5:A4
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Certificate issuer:       /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial:       01967DC64E1138B6707B33F28ECF9704C461
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
Manifest number:          151C
Signing time:             Mon 28 Apr 2025 19:01:09 +0000
Manifest this update:     Mon 28 Apr 2025 19:01:09 +0000
Manifest next update:     Tue 29 Apr 2025 19:01:09 +0000
Files and hashes:         1: 0vpioq7e7IBvU0f7txi-wExHAPw.roa (hash: lCvUWIuH8RdERCkztaN1NhfYOchJDmj9ywnhD1WG0qs=)
                          2: 1-t-clxlx4vHi76xBwGIh0Y5orug.roa (hash: WGphFqEzeHYQfivrVaHRtOvOzzhN/PDKxrZlm3FuIDA=)
                          3: 4CCEdgNV-fGWUC_aGHxQwbUsOKQ.roa (hash: zTRmkFZkHzwf+QYURy5/v5Sjyovq0HLSmOwtNQ48L/c=)
                          4: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: IMzSLeinOWGN4SIvd75OnQ1V2Q46QH2/DGgM3dtbrSQ=)
                          5: 9oOMh0CjqydkdSKEbK66nXXsu4E.roa (hash: qQJNJWud5A2R6q9LElC5WdsYynVdzga12kQWDH61mWo=)
                          6: AoQYABlbiRY1s0Gu3McHV58zrpk.roa (hash: 9zDAXKdytFg/3YwoUton7cniFW2Ja9ArE5tJ2skkn+c=)
                          7: OdGF_e17lYBOCmXmsk6hkXdf7b4.roa (hash: mFKHbPekFFY75D3Eu+1fU9mzEnOZ9+rJaeHup24zW3Q=)
                          8: PFyByii-LGzRSy90jiJ5mw1207A.roa (hash: gIS/3e5ejAqBGpUPti4f7RxoNdrem0KAE6vwjMubh3s=)
                          9: Qkq_75MjyviWe2NqgT_-Mwn9gnM.roa (hash: wJb9fi2vDIIR6voDYxFFRDUWuFkEQa98zP1PFmkzpXs=)
                          10: ScwFXX2rYjT7naQciVMaotJ-UfM.roa (hash: X8Vp96ZEvVObF+OkcOx9P04g9HBNU6my6Pc/b9LR72Y=)
                          11: rh7_88ku0NVEacOTg4kYRNyhUIs.roa (hash: Uz863y1lKUf+O+OGV8gNQDxIpi4RBI83I9R9FXt5Xp4=)
                          12: u37q8oxj6d2YnoBLY1VE3CqS2g0.roa (hash: QV9HVDjMgl4TBfOFPjFKF+CTfrUEm6XmvkI/fobJGaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7d:c6:4e:11:38:b6:70:7b:33:f2:8e:cf:97:04:c4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
        Validity
            Not Before: Apr 28 19:01:09 2025 GMT
            Not After : Apr 29 19:01:09 2025 GMT
        Subject: CN=7c169b4b38e54c0df5f9f3d76328105eb36bf5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:db:1e:2b:30:67:c4:60:39:b7:94:4e:9e:64:
                    26:84:40:24:18:df:26:f3:3c:fe:48:77:b6:92:1d:
                    ec:e3:0a:4f:cf:eb:3f:76:00:b6:76:ad:da:1c:a2:
                    71:93:32:2b:7d:de:d4:dd:f4:45:fc:1d:2f:75:eb:
                    90:35:7d:d6:e4:76:6c:9a:f2:c2:67:b9:6e:e6:82:
                    7c:82:68:83:95:c6:23:a3:d7:01:1a:c9:83:61:bb:
                    5c:0e:69:1c:96:17:ee:a9:0f:2c:4e:ae:a7:f1:ec:
                    98:75:72:50:80:83:73:6b:31:14:a9:40:6c:30:20:
                    fb:92:75:80:10:47:5e:00:5f:fd:97:ee:ea:3b:45:
                    42:ba:df:46:ec:0e:cf:7a:9e:f1:fa:01:9c:cf:8b:
                    30:85:5f:85:f8:4b:a0:01:75:d7:76:57:6e:aa:f6:
                    3a:d4:90:be:53:57:5f:a2:ec:7f:a5:73:be:10:ef:
                    d3:31:d9:f2:17:7b:d3:5a:f4:50:85:44:48:22:6e:
                    85:e6:9a:2e:ed:9f:ed:b2:62:ce:6e:e4:2e:d9:12:
                    52:e5:ce:ed:53:4c:fe:22:d8:7e:d2:67:29:ff:2d:
                    45:e0:55:4e:b9:ca:fc:54:36:ea:e2:d3:30:75:88:
                    50:6c:97:06:7f:59:63:02:05:14:9c:4f:9b:49:40:
                    c1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:16:9B:4B:38:E5:4C:0D:F5:F9:F3:D7:63:28:10:5E:B3:6B:F5:A4
            X509v3 Authority Key Identifier:
                keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:59:7c:f0:0d:56:b1:28:90:0d:be:92:bc:ff:77:e8:8b:99:
         88:38:60:60:b2:91:53:df:6c:c9:fc:3d:0a:78:8c:80:56:59:
         45:9b:6a:23:18:a1:87:e3:a4:4f:06:46:10:99:d6:69:95:0d:
         a2:19:cb:a4:7a:f4:d6:b8:a6:0c:60:4e:02:58:01:3d:85:77:
         7f:cf:e0:29:18:25:24:e5:09:8f:03:4e:96:cc:08:56:b1:6b:
         f8:df:8f:0b:c9:84:1d:9c:44:5a:54:9b:d8:56:62:f1:c2:7b:
         ce:91:54:fa:1d:80:e4:51:fc:d9:c0:7a:79:c0:fa:bc:9a:ad:
         7f:f8:d5:1d:42:64:53:c6:e3:0d:65:81:ba:d1:1c:f0:8e:65:
         5d:37:8f:f2:2b:24:96:d6:f9:8e:16:28:ec:d2:02:c8:e3:8a:
         44:e0:8d:25:9d:3c:4f:15:0f:a0:b6:1d:ea:1d:f2:24:83:20:
         21:34:52:4b:03:e9:eb:71:1f:77:d9:80:9a:55:24:01:57:db:
         63:97:1c:5d:e0:cf:23:23:bf:71:02:2d:47:10:5b:b6:35:50:
         3b:da:e1:ea:11:26:4f:97:93:bf:82:0b:be:67:b2:11:6b:45:
         68:7a:25:69:c8:e2:b7:81:d4:9d:ed:d3:c1:f4:ce:43:bc:78:
         8b:c4:61:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:33:44 2025 by rpki-client