Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
File:                     9vHFba9wXxLpXUL0d_jgo9hvOZY.mft (raw, json)
Hash identifier:          3paEswWREBHnKeKF1dkdn11FcOzJXqGBV5wM6gbi6dk=
Subject key identifier:   80:3F:85:6A:2B:36:64:65:AD:D5:30:3D:97:91:2C:36:3D:7C:1D:8B
Authority key identifier: F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
Certificate issuer:       /CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Certificate serial:       0196A24023BE421DE01B93C9D32DA8E7D976
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
Manifest number:          1525
Signing time:             Mon 05 May 2025 21:00:34 +0000
Manifest this update:     Mon 05 May 2025 21:00:34 +0000
Manifest next update:     Tue 06 May 2025 21:00:34 +0000
Files and hashes:         1: 9vHFba9wXxLpXUL0d_jgo9hvOZY.crl (hash: C7o8P18+78+iPgZaElEbMq/++YR9DIH+n6+E/FzKiAU=)
                          2: Img54cKN_P2HeWXe3kxJunOOT3s.roa (hash: ZYdWRN98ug8vbW7f1puvPVmIzjvPFY5NjRNyBZI+eL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:40:23:be:42:1d:e0:1b:93:c9:d3:2d:a8:e7:d9:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
        Validity
            Not Before: May  5 21:00:34 2025 GMT
            Not After : May  6 21:00:34 2025 GMT
        Subject: CN=803f856a2b366465add5303d97912c363d7c1d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:88:12:8d:b4:3d:ff:60:d2:dc:81:61:f7:b2:
                    70:b9:30:15:41:69:10:25:18:ee:b6:e9:83:bc:76:
                    82:7d:df:74:be:7e:3e:61:e5:66:0a:67:98:fd:16:
                    db:0b:fc:27:20:24:4e:d1:b0:b0:79:e7:36:ee:0a:
                    50:d0:62:41:10:f7:c1:36:62:4e:09:ab:52:98:34:
                    51:9e:cb:85:95:09:21:c5:ca:ec:08:f1:0c:f5:da:
                    14:af:78:2e:63:95:62:e8:80:61:95:91:e4:68:df:
                    00:ae:a9:aa:2a:8a:3a:1d:dc:36:52:e6:94:98:87:
                    0a:f9:d5:7f:5f:e9:de:0d:93:8b:ab:db:f9:3d:53:
                    16:2b:ce:fc:dd:d0:90:6e:9d:cb:0e:b6:5f:72:12:
                    b5:af:32:56:70:5c:90:1a:0f:c8:00:98:ff:4f:0f:
                    bd:9a:40:66:c8:6e:f8:e0:c5:da:af:61:a9:ec:7e:
                    c2:69:a0:de:3d:58:f7:a1:7f:ea:7c:ae:1f:e6:18:
                    cc:ff:8a:d9:6c:f3:52:7c:0a:72:3b:f6:19:3b:41:
                    d7:13:4f:06:18:28:a2:47:b9:de:2e:a9:b5:8b:9a:
                    01:94:39:1b:e3:14:5d:c8:c1:1d:40:30:6a:76:a2:
                    b9:6f:44:d0:82:3c:d1:6a:4a:61:62:b4:84:7b:6c:
                    83:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3F:85:6A:2B:36:64:65:AD:D5:30:3D:97:91:2C:36:3D:7C:1D:8B
            X509v3 Authority Key Identifier:
                keyid:F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:58:2f:28:af:5d:20:61:7c:fc:a1:48:dc:08:90:14:cb:e0:
         fa:34:9a:b7:76:67:5b:76:ed:f1:17:f0:87:96:14:64:b4:90:
         92:f1:b0:83:d0:8c:f1:1f:29:61:6d:86:1e:54:f3:3e:20:78:
         76:a6:96:f6:27:77:f5:9b:6e:4f:3a:9a:f8:07:4e:e2:f7:ae:
         27:cc:3f:b0:36:ea:58:b5:56:e9:73:e5:48:bf:4f:ce:4f:55:
         83:e7:2d:59:52:b1:11:67:26:b7:ba:1b:51:a3:81:2a:43:1b:
         4c:df:e5:3e:a8:86:f6:2e:91:fd:e8:54:a6:4a:e9:af:e0:aa:
         74:18:5b:af:fb:25:6e:91:81:fe:8e:b5:32:18:c5:7b:61:ff:
         5e:f7:19:83:66:a9:0b:69:50:5b:39:26:54:6f:d3:77:39:9f:
         a4:65:88:68:26:f1:f3:b3:e9:46:a1:d9:5c:79:c5:20:ad:29:
         90:73:12:b3:0a:55:5b:fb:fa:60:b6:44:2b:f4:cb:15:3f:a7:
         77:43:f0:83:ec:82:a5:3a:8c:5e:a5:cd:16:89:7d:9b:c1:30:
         d4:04:81:a4:92:76:a0:50:88:c0:d8:a0:b8:2d:63:f4:4f:83:
         54:a6:ed:a8:d3:cb:04:7c:4e:26:b2:d3:2b:83:cf:5c:6c:0f:
         b8:14:0f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:01:31 2025 by rpki-client