Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft
File:                     FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft (raw, json)
Hash identifier:          1p4vDBnKg07K9RLm8PmPfnctxLwTWXmNEHK2Ho2cd+k=
Subject key identifier:   45:A7:86:EA:31:F7:A2:E0:C2:F7:C5:49:F5:1B:9D:DC:F0:9F:25:61
Authority key identifier: 14:A4:BA:50:B4:68:FC:EE:AC:19:46:27:E9:8B:A1:F5:7D:EB:4F:C0
Certificate issuer:       /CN=14a4ba50b468fceeac194627e98ba1f57deb4fc0
Certificate serial:       0196C6BA9DCFE8D51AE22DAEFAB2B0D570A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft
Manifest number:          04D7
Signing time:             Mon 12 May 2025 23:00:40 +0000
Manifest this update:     Mon 12 May 2025 23:00:40 +0000
Manifest next update:     Tue 13 May 2025 23:00:40 +0000
Files and hashes:         1: FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl (hash: ZkV8lTla8djzuaoQAxhJUTsy6xhJdirbYZEYe+6E7Fs=)
                          2: RvOaflHrUbGbCGM86DjNMJAz4Rw.roa (hash: 3Nyo7ThzTtGgNw1pACQDePiv05YOigx9XCdhwJe3hKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 20:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:ba:9d:cf:e8:d5:1a:e2:2d:ae:fa:b2:b0:d5:70:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14a4ba50b468fceeac194627e98ba1f57deb4fc0
        Validity
            Not Before: May 12 23:00:40 2025 GMT
            Not After : May 13 23:00:40 2025 GMT
        Subject: CN=45a786ea31f7a2e0c2f7c549f51b9ddcf09f2561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ee:9f:78:06:8f:a9:fb:76:d2:4f:28:07:91:
                    6a:30:b4:b4:0d:f8:e3:9d:22:03:80:7a:48:53:cd:
                    3d:1e:ac:e9:25:27:4c:33:86:19:b6:63:69:88:ca:
                    71:34:a9:9d:24:85:e3:1d:9a:f7:59:1a:3e:d3:83:
                    22:b8:c5:6d:93:14:b7:65:62:d8:e5:9f:93:80:81:
                    37:19:5a:ee:b8:3c:f2:99:af:c9:e4:0c:25:78:01:
                    29:7f:d2:2b:fc:30:27:24:f3:0a:54:46:2e:bb:4a:
                    ed:ca:4c:a5:b9:e7:d7:47:8e:50:be:67:35:91:c1:
                    6d:a8:80:10:ad:38:d6:2b:a7:2b:f3:fe:f0:3a:73:
                    cb:53:0e:fc:3f:86:da:ba:54:6b:c1:65:46:26:9c:
                    f8:4e:35:9a:e8:db:d0:a0:b6:a6:ce:f2:99:4e:fb:
                    23:d1:05:fe:c8:57:9f:2e:0b:e5:e6:16:d5:c0:69:
                    89:bb:50:89:0f:52:e3:af:d1:ec:ce:92:d0:f2:c2:
                    1c:fb:4c:2e:b4:bc:fb:e4:b8:df:44:73:0b:95:66:
                    cc:c0:34:b3:04:d2:70:c6:98:14:7d:3d:64:73:97:
                    c4:d4:e0:60:09:49:cd:11:c9:f4:7e:06:6c:ba:af:
                    45:59:fd:fa:7c:ed:d5:01:7e:f4:4c:1d:b1:b0:a4:
                    d1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A7:86:EA:31:F7:A2:E0:C2:F7:C5:49:F5:1B:9D:DC:F0:9F:25:61
            X509v3 Authority Key Identifier:
                keyid:14:A4:BA:50:B4:68:FC:EE:AC:19:46:27:E9:8B:A1:F5:7D:EB:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4a:53:76:2e:45:6e:58:c9:d0:10:e8:bb:bd:18:61:ba:99:
         4b:4a:eb:e0:33:92:52:79:4a:ab:40:e3:01:db:af:0a:af:a2:
         7d:96:66:79:5e:82:be:0e:1c:92:09:0e:85:a8:fc:87:f3:09:
         58:34:73:f5:ba:a9:54:8f:41:a3:e1:24:f2:74:a7:54:c9:c2:
         e4:e1:55:dc:7c:8c:a9:c9:44:1f:18:e6:1b:db:a9:8c:02:88:
         20:35:b8:1e:1a:8b:1a:28:d4:cb:02:2e:21:35:4e:c7:2d:95:
         50:fa:f1:88:d2:55:e8:f1:3a:28:5c:6a:b4:dc:53:4b:95:96:
         68:23:a8:10:f9:8e:45:c5:85:21:2f:c2:98:67:fb:48:57:bf:
         81:cf:d7:80:71:ed:5d:da:8a:11:2e:34:61:96:f1:2c:e5:0c:
         07:3b:52:9c:6e:14:16:00:53:46:be:dc:09:f0:90:ee:23:1c:
         4a:c7:95:37:2c:91:e8:cf:85:31:fd:91:d7:7d:f0:fe:b3:f6:
         dc:00:8d:ec:cf:88:5c:c9:d2:89:63:c4:bc:3b:05:57:c4:94:
         39:06:fe:52:03:69:7a:be:58:c1:3b:8e:77:33:cb:11:22:91:
         68:4e:5c:36:61:63:cc:91:17:05:a6:be:f9:3f:9d:e8:55:13:
         6b:69:25:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:55:35 2025 by rpki-client