Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
File:                     1-RqCIwAuMSTluwboLU9go3m5Pc0.mft (raw, json)
Hash identifier:          Ct6lUADdJcU/ZclbD/t7eAUOObm2qbv/lxT7895Jzk0=
Subject key identifier:   7E:72:06:8B:45:CA:95:97:40:48:EE:90:CF:8A:D8:15:C3:DA:2E:F3
Authority key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
Certificate issuer:       /CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Certificate serial:       0196B96CAD37088188926B72378CC7A9A7EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
Manifest number:          0FE3
Signing time:             Sat 10 May 2025 09:00:29 +0000
Manifest this update:     Sat 10 May 2025 09:00:29 +0000
Manifest next update:     Sun 11 May 2025 09:00:29 +0000
Files and hashes:         1: 1-L2N1IxNmqwC6SnQGrk2zfPC90E.roa (hash: lv5rh5EEaSGLGKAlKwyPA6/B7Y5vo8o7IkiCP0ociGg=)
                          2: 1-RqCIwAuMSTluwboLU9go3m5Pc0.crl (hash: edwZYGdQz//ycWh3P3W6+yK53HtSEckkYV+D5Kqwt74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:6c:ad:37:08:81:88:92:6b:72:37:8c:c7:a9:a7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
        Validity
            Not Before: May 10 09:00:29 2025 GMT
            Not After : May 11 09:00:29 2025 GMT
        Subject: CN=7e72068b45ca95974048ee90cf8ad815c3da2ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:f2:13:21:b9:13:54:df:18:00:a0:88:49:
                    16:08:81:5a:80:96:55:ea:d2:6a:b7:bb:89:ad:7b:
                    38:8a:15:56:28:a7:2c:d6:9f:21:c3:cc:97:31:87:
                    0f:02:bf:5b:ca:99:b7:74:e4:a9:45:aa:00:ea:13:
                    81:31:55:c8:a6:cd:46:a0:55:23:0a:ff:10:52:76:
                    67:80:4b:eb:8d:66:0d:30:37:1d:9e:62:d3:8d:19:
                    dd:9c:d1:e9:4d:82:5a:1c:fa:f3:64:f0:9c:ba:d0:
                    45:91:77:06:31:50:88:24:40:ff:fc:43:1d:c6:4d:
                    fe:f5:3f:97:71:33:9b:bc:cd:19:2b:6b:0a:64:29:
                    56:f7:c1:83:11:c2:88:d8:4f:c2:5e:73:2c:0c:f4:
                    ff:56:48:1f:66:9a:cc:65:16:8c:9d:10:b1:51:d3:
                    4f:35:aa:ef:af:28:d2:39:ee:94:c7:c0:1d:33:4c:
                    18:26:ff:64:aa:09:a0:a3:a2:97:42:b9:58:4b:23:
                    65:3e:4c:d6:08:b2:40:4e:68:e9:c2:af:db:8f:e2:
                    99:b6:1b:15:a1:d3:e3:07:97:a2:4b:3b:61:0c:a5:
                    73:26:57:90:61:37:0f:ee:4b:50:5c:be:be:5a:cd:
                    12:4c:ed:41:b9:89:ad:07:31:6c:36:da:23:81:af:
                    3e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:72:06:8B:45:CA:95:97:40:48:EE:90:CF:8A:D8:15:C3:DA:2E:F3
            X509v3 Authority Key Identifier:
                keyid:F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:2f:51:0a:2d:f7:f3:bb:3b:5d:9b:76:7b:24:39:3b:ea:8a:
         52:53:7b:57:82:e9:3a:7c:22:bb:27:43:bb:82:74:bb:1b:9d:
         68:d3:6a:d0:7a:1d:dc:33:f6:79:19:b4:18:50:4e:0f:c3:8a:
         1a:ae:ff:88:3a:78:ae:db:5a:b1:17:dc:76:1d:7d:a7:a6:72:
         7f:69:ce:49:20:1d:f1:09:39:68:a3:13:a2:3b:a0:60:8c:c9:
         78:ec:9b:a4:89:12:6c:bf:83:a0:ad:8c:de:ed:8f:05:c0:e2:
         66:6e:73:61:75:bc:8a:ae:51:6b:23:b3:51:fa:a4:6e:89:ce:
         69:cf:0f:db:91:c4:74:56:5b:7b:12:a7:a6:94:ae:fb:7c:cc:
         3a:57:fe:0d:2e:83:08:d0:73:5b:35:e5:a8:b5:97:e3:17:ed:
         af:61:a5:3c:97:81:08:5c:0f:c6:f7:2f:b1:b1:87:95:ed:cd:
         6a:9b:e0:56:81:63:09:0c:18:56:c8:13:14:89:bf:ad:20:68:
         10:85:28:33:6c:3d:4c:ec:be:43:2d:39:0e:3a:67:4f:0a:3b:
         f2:8b:70:89:8d:6e:b4:8c:16:97:6f:d3:2f:58:d0:42:b5:25:
         87:0b:14:c4:7d:f6:d7:0b:0c:2e:b2:33:dd:22:a3:51:06:f4:
         6f:9a:1a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:56:54 2025 by rpki-client