Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
File:                     1-FVaeIP5K5-bpCKpa045e_X7j8c.mft (raw, json)
Hash identifier:          898jn2RufRKfRaPuwtRbquynF/uE9bhCTLYih9mHE9Q=
Subject key identifier:   79:AB:80:7C:CC:0A:68:A1:43:0C:F6:8A:D3:EC:13:3A:B4:11:89:3E
Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
Certificate issuer:       /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Certificate serial:       0196B03289C7198A95B34AC6A508628858A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
Manifest number:          0E41
Signing time:             Thu 08 May 2025 14:00:24 +0000
Manifest this update:     Thu 08 May 2025 14:00:24 +0000
Manifest next update:     Fri 09 May 2025 14:00:24 +0000
Files and hashes:         1: 1-FVaeIP5K5-bpCKpa045e_X7j8c.crl (hash: 9qufM36sBnBYqXxTcVpQER+uqnVcg+i84Sf1X+gFrfA=)
                          2: 5h1ttuT1xe8MQqiFLClQXEEG4xI.roa (hash: K15KK7htu+WW4WVVGCjjbJDrrjHd40ite1VZJn9QCX0=)
                          3: dL6QyTMH147RYvNbATR7wK8mAf8.roa (hash: lSk9mx0oL0nyVdSJ+hGB8xudUQAwa8IcLy2XJ8XP0tY=)
                          4: q1cKMx3v15DpBk7XfHsCbT0Hr0M.roa (hash: kJPl8z55kb+AOqX1mvjlXQAxwXPA4H1QahAgTk9/aUg=)
                          5: rm06Swzk55gS84j69N9wUHADa3g.roa (hash: EamVaUPfEGjAAZCep2zHyRQqfCPogilef0zQIPWb7CQ=)
                          6: zMv4vXM8dPStyIaP6YAH3FrSdFM.roa (hash: VWJ6HSGgCLyVghdMpKY1d9rx6m4eAxvybOUx+qVtZ3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:32:89:c7:19:8a:95:b3:4a:c6:a5:08:62:88:58:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
        Validity
            Not Before: May  8 14:00:24 2025 GMT
            Not After : May  9 14:00:24 2025 GMT
        Subject: CN=79ab807ccc0a68a1430cf68ad3ec133ab411893e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f7:fc:60:c2:cd:ec:b7:a3:20:7a:ad:dd:a6:
                    34:a1:56:17:7d:dd:b2:78:71:67:dd:38:c0:14:66:
                    9f:e5:6f:6f:57:88:13:e5:ed:1a:ca:ec:30:f5:f4:
                    11:2e:72:1d:ca:4b:27:e2:bd:b1:f1:11:c9:a1:a1:
                    80:03:82:7c:ce:1e:73:28:c4:d2:1d:d2:fb:be:f6:
                    af:35:10:8f:dc:c8:01:8b:38:c8:55:2e:27:85:dc:
                    7a:6c:7a:64:49:15:fe:b2:0b:91:15:54:a2:b9:66:
                    03:f8:fa:29:c1:22:43:81:3d:80:8c:e4:b4:7f:95:
                    2b:78:db:63:f4:a7:54:af:e4:1e:d9:e8:0c:a1:63:
                    27:f1:83:23:28:4d:2e:f2:13:6d:da:fd:cb:f2:0b:
                    41:30:cb:02:42:c5:d6:9a:a3:3f:2a:cf:10:aa:12:
                    fc:a4:15:23:00:d9:16:67:d5:2f:ab:6a:73:0e:41:
                    14:4b:0e:a9:64:88:c9:31:64:0d:3b:37:c4:ed:fa:
                    28:d9:db:37:4d:83:1e:83:2d:c2:ce:00:42:03:62:
                    a5:49:06:d6:f8:33:c8:e2:bd:30:8e:a8:5c:8c:f9:
                    e1:7c:27:5a:28:92:85:e5:ed:7d:7f:ca:5c:cd:16:
                    76:6f:f2:2e:1e:70:7a:fc:a3:7c:ed:d5:76:03:6a:
                    cf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AB:80:7C:CC:0A:68:A1:43:0C:F6:8A:D3:EC:13:3A:B4:11:89:3E
            X509v3 Authority Key Identifier:
                keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:7c:e6:0a:41:57:85:54:0e:16:79:16:12:4a:f3:60:96:9b:
         2b:d0:2a:6b:73:b7:f0:86:0f:70:b3:98:9f:06:c5:8b:77:71:
         a3:01:ae:87:94:27:9e:af:79:e6:63:9c:d2:0d:d4:d4:95:82:
         ba:5c:1e:12:18:ed:9e:f2:55:28:da:20:ff:4b:53:73:00:f3:
         e7:92:f1:4c:cf:12:bc:20:a4:45:26:b0:b1:44:e5:92:ae:98:
         f3:40:89:60:22:0f:77:ad:83:aa:3b:c8:d0:a4:f0:7f:a2:30:
         ff:a3:78:03:05:2f:97:34:70:94:e6:c2:92:b8:f8:7e:64:06:
         1f:87:ed:c2:d6:78:ac:55:4a:bf:d7:06:a8:90:b4:93:17:06:
         8c:4b:f3:cb:56:b2:75:68:6d:98:7e:00:a6:96:3b:30:c7:75:
         02:c6:b4:89:5d:df:16:5a:21:e0:a3:31:83:4e:88:3d:eb:e7:
         51:08:fd:4a:67:01:1d:87:b2:de:51:3c:9b:45:1d:48:23:f5:
         56:75:66:cd:8d:c5:07:0c:07:d9:cb:3f:c6:92:42:94:bd:ef:
         2f:4c:e9:21:2c:df:b2:b5:e6:85:c8:3b:00:72:6e:6b:79:3a:
         97:7d:cd:38:9c:b1:3d:0b:ac:d0:b3:dc:43:e5:de:72:b8:67:
         65:86:b8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:40:02 2025 by rpki-client