Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
File:                     T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json)
Hash identifier:          K/QEAFQyJ1y2k/351Onkv5SUIODsVp2HL8+35IqLJQA=
Subject key identifier:   41:CC:8F:F0:81:68:CF:02:FD:F6:DD:0C:BB:96:58:3E:80:CD:A7:FD
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Certificate issuer:       /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial:       0196711CE287CDF128FDC2AD3775F0BB6223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
Manifest number:          1513
Signing time:             Sat 26 Apr 2025 08:00:40 +0000
Manifest this update:     Sat 26 Apr 2025 08:00:40 +0000
Manifest next update:     Sun 27 Apr 2025 08:00:40 +0000
Files and hashes:         1: 0t9k3VKpg5XpD7MVkMNQX_l1tfc.roa (hash: BzUj07EejYyyMT4Im9XK7eLGF3C5NwrA/MzbT6j9keY=)
                          2: 1-Z-EbEbGe8yxK4SqLWDT6Ei8Xlk.roa (hash: bPXgwf4I2BdmZ9+4bAlYkkYHbKJWbKtWdjpO/HrVdSE=)
                          3: B45XvbozhNWjXkQPI-m-mjKZzQY.roa (hash: De0OPO+1rvRKuUyNflE2BB3lX6yIPfgqlTtFfQgcSF4=)
                          4: OdvTtHevTUmaiwlyF527qNO0goI.roa (hash: gUCiyrPmcDrIhpr3CW3AI5xYss+1xZqhcT0JZQL6Dj0=)
                          5: OognzbRI52-tUVqPrupLJHIhUV4.roa (hash: yDdzqTQld2bKmh7pdXZ3qLlf4D/eksuK9uXSZZ/NG7o=)
                          6: SX7Fh5D5SSmhzFcwpzLVfpnGjio.roa (hash: hS1AFnLFbyQCTAlmoU4gf8KnF5G/ZsoLJZ6QNcU/zBo=)
                          7: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: YbvBoqmskJt+v3rODGvaxhRL2SW41F747mothHqbMpM=)
                          8: TW9ksFbGISrm8bYlqs2ozzpmjos.roa (hash: 0ziWkPMeV4t+G/bAbhTQxZYd+oOXOylZPAVdkzMUOzI=)
                          9: f4d0pGSSiHub4rrjLgiCoVR8Lcs.roa (hash: B5KcDdQ8zEYWfUf5mVlUALm2ca+VbtrqnIaM9zvKgrI=)
                          10: psSTG0Xrqssglub7odw_Aeumxw4.roa (hash: ZT7znN26M2IQ2XLLuIQT50IETg9WXMqInwpcq6t20hA=)
                          11: yMcsDqcikj-Oh_XyHzZuU6ywJns.roa (hash: Rs9ukiIBzgtbtWyPVHVA61SngL94EX769rrYMrF5bW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:1c:e2:87:cd:f1:28:fd:c2:ad:37:75:f0:bb:62:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
        Validity
            Not Before: Apr 26 08:00:40 2025 GMT
            Not After : Apr 27 08:00:40 2025 GMT
        Subject: CN=41cc8ff08168cf02fdf6dd0cbb96583e80cda7fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ed:34:56:41:16:67:a0:b8:91:d9:96:fa:db:
                    dc:19:f1:61:e1:b7:35:ec:13:c8:c1:6e:4e:ca:f7:
                    ad:59:99:1f:c4:ab:53:00:a7:91:41:78:20:74:ed:
                    63:49:86:d5:08:a4:00:2d:ad:98:73:b3:fd:b0:ff:
                    e5:6d:5f:b0:ca:04:ff:cf:12:17:f3:e8:ff:a4:64:
                    b7:d8:cd:8f:1c:26:74:b0:26:4e:23:fe:f8:c4:03:
                    03:6e:3d:f4:aa:a8:cc:44:a6:d5:a8:34:18:4c:36:
                    0a:8d:44:5f:5c:09:31:c0:0a:e5:c8:58:61:ec:1e:
                    46:4c:77:75:11:29:0f:6a:0e:d9:ac:9f:ee:f6:1e:
                    cd:22:81:06:1b:25:f7:0b:5b:9f:27:f7:f8:16:3b:
                    28:5b:d6:d0:25:b9:3a:ee:0e:b1:5c:01:4f:15:e9:
                    b0:b0:99:9d:60:8c:ef:96:36:95:91:09:42:05:ef:
                    88:f5:f8:53:1c:b7:32:74:21:4d:d5:a8:8d:4a:35:
                    83:d3:ef:fa:4d:f0:bf:69:62:67:fc:97:b9:b5:ee:
                    ce:2d:af:0e:57:bc:a3:68:66:81:1e:b4:86:af:5c:
                    bf:95:67:a5:88:5b:ad:63:8b:38:6e:53:74:75:7f:
                    45:a3:60:43:90:5e:d6:f7:87:24:10:00:50:b7:5a:
                    ce:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CC:8F:F0:81:68:CF:02:FD:F6:DD:0C:BB:96:58:3E:80:CD:A7:FD
            X509v3 Authority Key Identifier:
                keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c0:97:22:0a:6c:63:54:f8:76:96:65:f8:f9:17:1f:50:5e:
         2e:c6:76:5c:bb:f9:f0:b1:1d:ee:a1:8c:85:14:51:c1:2f:8a:
         8c:4c:8f:07:71:e0:81:fc:f5:bb:75:7c:a4:f2:4f:e9:c1:0e:
         c8:20:84:23:f0:5a:7f:75:b6:d0:a6:2c:a5:f8:fb:96:db:d9:
         2d:dc:df:6a:05:fc:28:e2:b3:b8:51:7f:7d:d5:13:17:3d:60:
         99:78:bd:09:7d:45:a9:2c:21:79:b0:84:85:df:31:2e:8e:c4:
         d3:8c:10:17:40:e6:e3:a4:12:9d:ed:ea:13:19:a2:d9:76:c3:
         06:d3:82:a7:c4:8b:97:26:67:75:03:35:e2:0c:54:2b:66:68:
         9d:39:91:41:4a:83:7b:b6:e4:72:78:a7:26:e4:74:b1:bd:41:
         62:ec:2b:6c:0c:28:df:fb:95:02:ac:c5:96:0f:50:18:4a:6f:
         a2:38:f0:92:32:ae:d1:ac:b0:2d:80:d2:e5:14:04:74:94:06:
         5b:4f:f2:d8:4e:72:a5:94:eb:f1:7c:d0:07:76:04:0d:3a:34:
         c7:2c:ee:93:74:0b:f1:9e:b6:bd:cd:f9:6f:bc:38:87:42:27:
         81:65:d3:84:0d:b2:0b:76:6f:d1:7e:ca:96:f4:7e:09:17:8f:
         72:03:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:02:08 2025 by rpki-client