Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft
File:                     fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft (raw, json)
Hash identifier:          +CfgyQuvS4urIFSuDOewp8NaeisDr+W0hl5FFWbXlXs=
Subject key identifier:   17:7F:BC:6C:87:16:D8:08:C0:F7:1D:A5:AB:A7:56:27:D7:25:A1:6D
Authority key identifier: 7C:BB:A8:46:B6:FE:06:78:C9:D4:B7:D7:DB:11:E6:AE:B8:6E:59:42
Certificate issuer:       /CN=7cbba846b6fe0678c9d4b7d7db11e6aeb86e5942
Certificate serial:       01967C45BB4813E01508070ACF1835F6C915
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft
Manifest number:          03DB
Signing time:             Mon 28 Apr 2025 12:01:06 +0000
Manifest this update:     Mon 28 Apr 2025 12:01:06 +0000
Manifest next update:     Tue 29 Apr 2025 12:01:06 +0000
Files and hashes:         1: T-Ck5sxxTDjM2BnuARX2KE4vMXo.roa (hash: iEhvmxCDWE4QgoN0KDVC0nYZp80ZbJ35iTC3GWKtUXU=)
                          2: fLuoRrb-BnjJ1LfX2xHmrrhuWUI.crl (hash: kq1NjD+MKGs+tRCPNEb1So6deseu7AesNDQNRrTjUEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 12:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7c:45:bb:48:13:e0:15:08:07:0a:cf:18:35:f6:c9:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cbba846b6fe0678c9d4b7d7db11e6aeb86e5942
        Validity
            Not Before: Apr 28 12:01:06 2025 GMT
            Not After : Apr 29 12:01:06 2025 GMT
        Subject: CN=177fbc6c8716d808c0f71da5aba75627d725a16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d4:d1:6b:ea:09:71:24:04:94:f7:dc:ef:6a:
                    12:23:69:80:44:de:36:bd:78:6f:3b:fa:45:f2:65:
                    ed:fb:8c:81:c6:84:13:6d:ed:8e:c6:73:56:8c:50:
                    ff:21:28:b3:c3:de:4f:f5:6d:47:63:9c:52:1d:de:
                    7a:20:47:3c:c4:d6:19:ff:c4:05:83:b8:0f:32:ec:
                    7f:98:72:69:63:0d:57:7d:11:c5:42:69:8f:61:f5:
                    a6:6d:cd:0e:2c:90:23:92:61:0b:de:2d:3a:ad:9c:
                    32:d4:1e:72:7c:0e:c0:5f:1a:88:da:05:65:b9:e8:
                    26:55:58:fe:b0:b9:26:fc:97:e0:56:d3:d5:66:4d:
                    77:d3:ff:f1:a7:a4:4a:6b:4f:1b:e2:15:9c:dd:28:
                    f4:37:80:ba:62:d9:be:af:55:0c:9e:92:0b:79:d9:
                    32:98:99:3d:89:72:e9:6f:29:c2:e3:0d:3b:cd:07:
                    e9:40:71:38:bf:ce:ea:52:a9:df:d2:ff:01:c0:3f:
                    f7:c8:2f:a4:61:1a:dd:a8:c3:fd:c2:4d:6e:1d:e6:
                    24:c6:97:3e:3e:24:e0:d6:79:7d:0f:f9:20:7b:bc:
                    f1:03:66:fe:80:54:2c:f0:04:1c:a9:cf:8b:04:2b:
                    eb:84:0a:e2:b7:96:58:95:3f:b6:83:ac:eb:f5:e6:
                    22:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7F:BC:6C:87:16:D8:08:C0:F7:1D:A5:AB:A7:56:27:D7:25:A1:6D
            X509v3 Authority Key Identifier:
                keyid:7C:BB:A8:46:B6:FE:06:78:C9:D4:B7:D7:DB:11:E6:AE:B8:6E:59:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:59:19:10:85:c5:9f:bb:99:96:75:a7:da:b0:b1:2f:66:df:
         55:f8:ae:b4:ab:90:2c:2b:09:a1:21:45:52:ea:ee:12:65:8a:
         b1:52:b9:95:43:6e:0e:42:79:9e:cd:bd:11:27:69:f7:93:30:
         c4:df:87:65:ee:74:1f:73:fc:f9:fd:13:93:2b:65:56:21:e7:
         08:b9:3d:47:90:eb:58:4a:be:ef:09:2e:e5:c4:48:4e:ed:9d:
         98:2c:db:8b:5c:78:5c:04:36:26:40:00:58:0e:df:4b:27:e4:
         f7:aa:c7:97:ef:d5:23:90:7a:78:a3:e5:15:94:14:e5:46:21:
         7f:ea:2f:ab:32:15:c6:52:71:55:a4:17:7f:8f:d5:06:71:8a:
         44:43:08:e5:d0:c2:c2:81:95:ea:f5:8e:32:e1:45:33:ef:b2:
         e1:02:58:73:94:eb:38:06:bb:36:76:25:fc:c8:83:de:95:3a:
         4b:3b:d2:15:9e:1b:10:92:86:bc:4d:50:39:d3:46:3c:7a:25:
         4c:01:6f:79:c2:c2:a6:93:c9:b5:c1:46:cb:6c:55:02:9a:88:
         fd:08:8a:e6:cd:7d:17:19:0a:c7:5c:93:1f:89:c0:46:3d:75:
         61:52:55:58:9d:0b:32:a9:70:fb:2e:e6:ea:27:fb:fc:8a:bb:
         7e:a7:f9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:50:57 2025 by rpki-client