Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
File:                     A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft (raw, json)
Hash identifier:          SKrGTxlrc+LwKvAEk95JLz3LGZm4mD4A7zj8YRtIc14=
Subject key identifier:   82:74:F1:A6:D0:D7:3F:28:4F:D2:22:16:C7:D8:B4:78:E8:98:2B:66
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Certificate issuer:       /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial:       0196BE254DD18A82911528ED25F2A74C905C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
Manifest number:          0F7D
Signing time:             Sun 11 May 2025 07:00:37 +0000
Manifest this update:     Sun 11 May 2025 07:00:37 +0000
Manifest next update:     Mon 12 May 2025 07:00:37 +0000
Files and hashes:         1: 8ea9JzqwyGDT2dMFgAmUz7EOwao.roa (hash: VSNDXOm1+cAC798c36135Xw4x7+9RwirArr3iwfbiGQ=)
                          2: A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl (hash: p8KIf/rOYqhsZY7fggWOiTMGteY2XSzryidKYVOIiyU=)
                          3: CGoYKUbztdIKKtCC46FwnLxxAJQ.roa (hash: x68KjIodNUgVtCpjw6Q/mHOmDSpKRwUfcYK1IisVAiw=)
                          4: TtMpw78SmRxgZIGYNEHEXtMRk7M.roa (hash: A34HD6vBs6SuS2D6qkJmN0sK8pKEio3YxA+zTTW9xgA=)
                          5: lIr5yIALJv3-BOg4uAYoEY_kNlo.roa (hash: f+GijD6e1+UQuvYwAF3v/POqX5KPaUvIB4vfF6bFgTQ=)
                          6: wp6rgT_ySJ7oIdAAI_SCvm21yFU.roa (hash: z87ZPo/PyE4etTlqKK3OFQbBD0NBmeieu4d4u91gewk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:25:4d:d1:8a:82:91:15:28:ed:25:f2:a7:4c:90:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
        Validity
            Not Before: May 11 07:00:37 2025 GMT
            Not After : May 12 07:00:37 2025 GMT
        Subject: CN=8274f1a6d0d73f284fd22216c7d8b478e8982b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:98:88:7f:42:d9:67:9d:5a:61:d8:d1:9c:32:
                    fe:bf:0b:83:e1:58:b2:46:fe:11:7e:3b:21:1b:3e:
                    8e:99:06:eb:fc:74:ea:3e:ed:9b:04:84:02:11:cb:
                    f6:fb:ad:8e:98:6a:62:97:cb:5b:48:bc:1b:ad:c2:
                    7e:35:ae:f0:bb:89:a8:00:4a:31:24:9e:2b:cf:1a:
                    a6:41:fa:76:f0:c7:50:0d:9a:94:91:78:a9:11:44:
                    eb:07:ab:2f:69:ef:22:a1:a4:4a:d5:75:b8:1c:f8:
                    9a:cd:8b:18:d8:9f:36:21:24:5f:2d:46:e1:5f:a8:
                    d1:08:ee:74:da:4b:3d:0b:0b:5f:c8:88:4b:eb:03:
                    7f:40:88:ab:ad:c1:80:72:52:ed:2f:b7:29:61:67:
                    33:b3:b9:13:7c:f8:84:e5:53:67:7a:34:c3:30:e3:
                    f0:66:e5:40:a8:87:02:74:59:5f:19:8d:f7:f9:72:
                    d4:2f:40:c4:c6:4b:ef:a4:d2:b0:4f:c4:00:cd:49:
                    c8:e2:84:ac:96:f5:3a:1f:81:28:4f:c9:94:5e:e4:
                    9a:d7:aa:35:c4:c8:db:a5:1c:80:81:5f:6c:c4:3b:
                    7d:94:f8:91:6c:7d:a2:02:b9:fa:15:71:e1:63:bf:
                    ec:67:9d:6c:1d:17:98:93:06:39:5a:2d:1b:6c:dd:
                    34:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:74:F1:A6:D0:D7:3F:28:4F:D2:22:16:C7:D8:B4:78:E8:98:2B:66
            X509v3 Authority Key Identifier:
                keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:fd:2a:1b:e1:58:e8:a9:b2:e9:3f:63:8c:4d:18:15:37:9c:
         98:43:e7:83:3b:29:a6:98:d1:f5:68:e5:01:4f:d3:51:5c:28:
         b7:37:e2:04:aa:e6:c3:c5:30:e3:96:fe:34:7d:bf:94:10:ae:
         ce:a2:0e:34:8d:51:49:d4:10:40:ae:04:16:d8:8b:79:cd:d2:
         b1:03:ee:1e:f7:25:1a:72:01:66:ec:e4:94:79:33:32:93:39:
         be:b0:02:d9:8b:61:5c:60:b2:3b:82:67:b3:61:4c:1a:5a:bd:
         82:82:4b:e2:5f:10:03:3b:9b:89:28:30:20:c9:ec:72:4d:54:
         04:5d:8e:3d:21:36:8f:f4:65:ba:72:37:e4:b7:49:41:d5:23:
         59:2f:f3:00:2f:65:1c:c8:65:b2:8c:e6:13:bc:30:5f:6d:9b:
         0a:4d:71:82:f8:f2:48:aa:f6:bd:87:71:91:93:a1:ec:2a:38:
         9a:62:45:9d:e4:b0:68:14:1b:f6:ae:33:79:3e:15:4b:a6:88:
         11:a7:c9:82:39:76:f5:5e:0b:24:37:75:f7:8d:63:8d:d7:ce:
         76:ca:c6:56:46:15:3c:b8:8e:27:dc:e6:46:87:a3:1b:ee:21:
         39:08:c0:8c:4a:5f:d7:21:ff:69:18:a5:fd:52:c9:aa:a0:03:
         05:2b:14:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:06:05 2025 by rpki-client