Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft
File:                     _Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft (raw, json)
Hash identifier:          bklvbwoNoU0JAvnBE2PaTNHnKiXeaYEHiHwclCcLnWw=
Subject key identifier:   F8:28:F8:22:ED:A2:A6:8C:1B:70:94:2F:C7:93:7D:CB:A7:F2:86:34
Authority key identifier: FC:07:2E:E2:51:5A:07:C6:67:E1:C5:CF:DC:02:10:E6:58:1B:09:7B
Certificate issuer:       /CN=fc072ee2515a07c667e1c5cfdc0210e6581b097b
Certificate serial:       019675674CFC19398BBE7BC35DA8608EDF8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft
Manifest number:          124D
Signing time:             Sun 27 Apr 2025 04:00:26 +0000
Manifest this update:     Sun 27 Apr 2025 04:00:26 +0000
Manifest next update:     Mon 28 Apr 2025 04:00:26 +0000
Files and hashes:         1: ZmTI_BE0CxW812diBboPemqYE3k.roa (hash: 8pQSyVxeeGwYbTb0adthXkVgEKcNeH2p/++sCFVOF1Y=)
                          2: _Acu4lFaB8Zn4cXP3AIQ5lgbCXs.crl (hash: PdhnQGfY3801mUmSfnKnozHVa6qEyJBRoHlDajsfTBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:67:4c:fc:19:39:8b:be:7b:c3:5d:a8:60:8e:df:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc072ee2515a07c667e1c5cfdc0210e6581b097b
        Validity
            Not Before: Apr 27 04:00:26 2025 GMT
            Not After : Apr 28 04:00:26 2025 GMT
        Subject: CN=f828f822eda2a68c1b70942fc7937dcba7f28634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ba:11:f8:06:7c:19:1c:70:b9:e3:67:00:3b:
                    dd:89:8a:50:d1:f1:e1:30:64:c1:7d:0e:54:8c:4d:
                    2a:41:3a:e0:b1:97:39:88:1d:10:ab:aa:55:b8:4a:
                    ab:8f:90:37:05:12:f1:ba:87:77:72:5c:6e:86:8d:
                    eb:f5:d3:a2:5a:cc:c6:cc:ab:2e:9b:ae:88:e6:db:
                    5d:63:eb:c9:aa:91:2e:18:69:ba:32:b3:0e:0b:03:
                    af:6c:19:ef:ef:80:ed:7f:77:42:d9:29:1c:4c:c4:
                    8c:cf:47:24:10:8c:d8:89:ac:0c:c9:f5:16:99:9f:
                    dd:bd:15:85:92:4a:4d:9c:ab:d5:26:a0:a8:55:50:
                    a5:89:86:fa:81:b7:a9:91:4e:34:8d:a5:4d:d6:8e:
                    2b:58:ac:12:0e:1f:9b:4c:27:85:3b:f0:df:fb:5a:
                    bf:57:d4:14:54:3d:a2:94:1f:ca:f6:ff:5f:b1:52:
                    0d:b4:df:61:f4:4a:5a:68:42:fe:54:eb:b8:a1:4c:
                    54:31:dc:e3:f6:09:1a:e1:e5:2c:cc:1c:b6:cb:29:
                    d7:ef:d8:ea:9a:9a:bf:9e:4e:a2:6c:f1:65:a7:02:
                    d3:0e:c4:9d:fa:12:48:a2:66:b3:b9:df:09:bb:90:
                    eb:95:5b:49:17:c8:c3:96:ba:a4:e1:13:1d:c9:a5:
                    27:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:28:F8:22:ED:A2:A6:8C:1B:70:94:2F:C7:93:7D:CB:A7:F2:86:34
            X509v3 Authority Key Identifier:
                keyid:FC:07:2E:E2:51:5A:07:C6:67:E1:C5:CF:DC:02:10:E6:58:1B:09:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:68:d2:b5:23:d7:2a:cd:1f:b3:6c:46:34:42:eb:1b:b5:c2:
         63:e9:30:e2:a4:d0:47:91:f3:34:6e:4d:ff:d0:d4:1a:cf:bb:
         f6:a3:75:9a:a2:78:86:4c:59:67:ac:6a:61:bf:03:b9:14:0b:
         db:cb:fd:ac:88:7d:59:0c:07:b1:b1:36:55:69:30:80:15:fc:
         80:83:43:27:95:79:af:da:f5:3e:21:fc:ce:dd:74:a0:ab:8d:
         4a:3d:57:6f:77:93:00:49:dd:be:23:a6:8f:da:a4:6f:2a:8c:
         13:81:40:fa:8c:ba:ca:27:c5:9c:ee:b3:02:ce:4e:bc:5f:e0:
         74:2f:bc:d6:50:0c:ed:ac:2a:81:94:7b:69:7a:d3:ce:59:39:
         38:c2:97:46:f6:4f:2a:79:d7:aa:f2:a1:6b:d1:5d:b1:8d:66:
         82:5c:f9:73:b0:2f:31:ef:d3:fb:59:64:2e:e6:68:0d:de:83:
         d9:70:25:30:a7:e6:41:d1:ad:3e:53:f6:ba:49:29:f0:73:e7:
         ee:9b:16:23:83:23:7f:0e:2c:82:88:a4:39:be:94:9a:e4:a8:
         e3:65:4f:b6:aa:1c:99:36:ba:c8:fc:c4:a2:85:2f:9f:cc:13:
         a1:51:eb:f4:8f:91:ba:b5:4b:4f:35:99:08:00:1e:b4:ce:63:
         0f:db:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:12:51 2025 by rpki-client