Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
File:                     9XwaqtuDIN2EMjVFjPLFy_RwStY.mft (raw, json)
Hash identifier:          357J1PwnyuO70n14W4r0WvL6Fkozo9AZDgVM7Y1pYgA=
Subject key identifier:   F5:CF:6D:B6:A8:8D:F9:17:EB:F1:6A:1D:A4:67:BC:0B:23:D3:F9:68
Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
Certificate issuer:       /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Certificate serial:       019676430B6C417C6DF9E793D3C3EB10391C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
Manifest number:          06FB
Signing time:             Sun 27 Apr 2025 08:00:27 +0000
Manifest this update:     Sun 27 Apr 2025 08:00:27 +0000
Manifest next update:     Mon 28 Apr 2025 08:00:27 +0000
Files and hashes:         1: 9XwaqtuDIN2EMjVFjPLFy_RwStY.crl (hash: 7mMbsNauYWIHwYBIibJ1IsHJvGh3hBxro0sGPDSfybA=)
                          2: MP9C5tlE4sTN1JTDz4jlrkAW_YU.roa (hash: 2Qb7MzrDpByF3hW1GYmCH1FHWyuhYVmQ2YbJ0M55AAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:43:0b:6c:41:7c:6d:f9:e7:93:d3:c3:eb:10:39:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
        Validity
            Not Before: Apr 27 08:00:27 2025 GMT
            Not After : Apr 28 08:00:27 2025 GMT
        Subject: CN=f5cf6db6a88df917ebf16a1da467bc0b23d3f968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:3f:50:66:67:97:8f:59:92:bf:e8:3c:c9:
                    cd:95:46:78:a4:6c:48:b0:34:46:1a:14:e3:71:8a:
                    20:e0:1b:7f:19:ca:ec:c5:ac:82:4a:d0:02:d7:ea:
                    2a:9a:0d:7c:c4:eb:41:a6:8f:13:22:84:8a:8c:06:
                    46:54:29:f9:cb:28:0a:a2:18:f4:23:04:1d:c2:a7:
                    f4:5f:2a:f8:95:f4:ce:af:fc:02:03:39:0e:c2:a0:
                    cc:15:37:56:37:0c:37:ee:0e:99:90:2c:a4:11:a1:
                    15:95:f2:66:39:77:be:9b:8d:e3:b3:98:7d:ff:ca:
                    12:f9:f6:52:82:c8:04:30:fb:eb:53:17:bc:d5:52:
                    46:1e:62:c1:33:44:80:4a:54:8a:14:e6:19:db:98:
                    75:e8:89:fb:97:31:4f:36:ac:6c:74:e5:6f:db:62:
                    f4:a0:18:42:80:9d:16:42:ac:4c:c4:38:8c:6c:23:
                    77:9c:63:a8:6f:43:76:83:dd:4d:fd:0a:bf:ca:16:
                    f4:89:95:10:a4:5c:d3:d1:4d:34:87:dc:e4:2a:8e:
                    21:8a:b8:a8:05:2d:31:4d:99:5c:cc:9f:1c:c4:4f:
                    21:4c:bf:2a:42:07:c1:e0:a4:01:d1:07:12:77:0b:
                    eb:8a:41:15:0a:67:ec:03:a0:56:2e:be:7a:46:10:
                    8b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CF:6D:B6:A8:8D:F9:17:EB:F1:6A:1D:A4:67:BC:0B:23:D3:F9:68
            X509v3 Authority Key Identifier:
                keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:7b:ff:61:08:4a:e0:80:77:23:82:fe:be:89:6a:82:60:2f:
         6a:6c:e8:42:5c:63:67:88:7b:a0:6d:4c:1d:94:a7:4a:fb:be:
         a0:6c:6a:e9:f2:d3:74:d5:6d:3a:45:f0:26:d1:a4:a5:ed:bf:
         e2:95:e8:22:e3:2c:84:6c:08:bb:9b:79:26:c0:4d:30:40:fd:
         c0:a6:52:8d:3e:63:b3:f5:eb:51:26:0e:da:43:78:7d:38:70:
         28:c2:83:f6:b9:e9:3e:52:b8:04:ff:f6:d9:8d:d3:27:b1:ac:
         f7:11:7a:d1:bf:36:d9:84:bc:cf:de:58:2b:e5:9c:6e:9f:36:
         10:73:10:b2:1b:57:e5:a7:e8:f5:ae:48:35:50:5e:b1:03:d1:
         62:80:30:85:76:3c:3f:b1:1a:af:28:36:3f:96:80:d5:94:18:
         6b:84:0a:7a:49:38:e2:92:bb:4e:05:7e:8a:16:d1:8d:15:58:
         c6:37:3f:71:57:a7:e5:60:fc:c2:36:0d:7a:1c:8c:3a:e1:a6:
         06:65:0f:97:98:fb:f2:b2:f2:e2:c7:9a:c1:40:72:e4:cf:5f:
         96:56:3b:05:6c:a6:97:ef:a4:03:9f:2b:04:de:2c:2a:20:f2:
         ca:66:19:42:22:43:7c:78:d9:0b:b2:3d:a7:a7:ad:a5:d0:b8:
         f8:c9:d0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:50:31 2025 by rpki-client