Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
File:                     Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft (raw, json)
Hash identifier:          Iu2MvBDyFnu1arcBJzRITiTZTeUdsLfnvWFzn7GB82M=
Subject key identifier:   C6:B8:D0:6E:8B:B0:35:CE:7E:33:3C:4F:B5:ED:51:2A:EF:FC:B6:2E
Authority key identifier: 15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
Certificate issuer:       /CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
Certificate serial:       0196A31C1801BF56A4C92E37EBE4A6A97920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
Manifest number:          0381
Signing time:             Tue 06 May 2025 01:00:49 +0000
Manifest this update:     Tue 06 May 2025 01:00:49 +0000
Manifest next update:     Wed 07 May 2025 01:00:49 +0000
Files and hashes:         1: 1-irVsmvhgC9shKeonnyDEPMDuh0.roa (hash: 1FiwJeXR31pl2bxgdy1T8oVV/E4LsfaNte1AvGr9OZg=)
                          2: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl (hash: HyImgYX5VqrufFlGBuE3BtO+IqmwmP9CMQt247Q+WvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:1c:18:01:bf:56:a4:c9:2e:37:eb:e4:a6:a9:79:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
        Validity
            Not Before: May  6 01:00:49 2025 GMT
            Not After : May  7 01:00:49 2025 GMT
        Subject: CN=c6b8d06e8bb035ce7e333c4fb5ed512aeffcb62e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:83:91:d5:ab:4d:e6:26:82:a9:2a:26:8b:
                    a2:b5:d1:12:cd:30:d6:20:c4:47:50:da:f8:10:ec:
                    15:7b:bc:18:12:c9:c2:ba:00:88:92:8d:7d:48:3a:
                    32:86:c7:2f:a6:3a:35:93:46:e0:26:73:71:ea:91:
                    74:01:3c:fb:51:40:4b:ab:c2:4d:e5:c6:82:f2:ef:
                    e9:14:24:6b:44:48:bf:3c:12:21:06:74:0e:09:4c:
                    2b:a4:97:8a:74:3d:db:f6:9f:85:e4:d5:c7:ec:5a:
                    87:62:1d:43:3c:ae:96:12:9a:ed:4a:06:e5:29:d7:
                    bc:c0:cf:6a:42:a8:a2:89:e0:ae:15:b7:02:91:61:
                    6b:c8:d0:be:c8:5a:4d:ee:e4:4f:64:9e:8d:af:04:
                    15:6d:84:0f:52:7e:3f:5a:74:69:2c:05:4b:96:11:
                    86:7a:22:52:6a:a1:0e:35:3d:be:d2:8f:d7:27:c2:
                    b8:39:8f:1e:21:8c:4b:c4:f4:da:b4:f0:87:fe:54:
                    02:43:bd:e0:13:a9:7b:d2:be:f2:52:72:f0:41:1e:
                    32:42:c6:40:54:8d:19:dd:a0:30:42:95:87:d6:24:
                    0f:9d:21:a6:a0:d4:f2:fd:c5:0b:a6:5d:a7:94:ef:
                    3b:3a:21:c4:a2:1a:97:25:fd:92:c0:c7:a8:15:e4:
                    3e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B8:D0:6E:8B:B0:35:CE:7E:33:3C:4F:B5:ED:51:2A:EF:FC:B6:2E
            X509v3 Authority Key Identifier:
                keyid:15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9c:b2:69:a5:17:27:65:71:1a:0b:43:f0:83:da:eb:9a:bb:
         4b:9d:58:ae:03:35:81:a6:a9:2d:4f:f4:9b:e2:c6:c1:68:90:
         2d:b6:a0:8b:d7:14:fd:95:9f:24:ec:3d:f9:04:86:98:67:d4:
         cc:d9:ba:f4:28:cf:95:0e:01:35:0c:e5:cf:0b:78:f6:e8:8b:
         21:4a:12:b3:66:55:e1:6f:20:a7:88:b6:89:f8:5e:01:2a:50:
         ed:8c:09:24:d1:51:c5:a2:c5:46:ec:f5:1c:24:17:e8:11:3f:
         46:9a:50:31:d9:00:65:b1:ae:6e:20:0c:25:f9:26:70:12:eb:
         c0:03:11:5e:b6:41:4f:40:02:21:bf:e5:27:93:0c:e0:c5:81:
         6c:9e:6c:b2:fb:ba:9d:6f:b9:eb:1f:88:06:cc:b4:e8:75:44:
         9a:c7:38:60:08:be:6d:83:99:6d:90:11:45:d6:7e:2a:37:2f:
         15:73:f3:8f:44:82:66:96:8f:c4:be:23:28:81:30:25:76:eb:
         1f:bc:66:af:a2:7a:06:4b:71:e2:3d:11:ac:d7:68:51:47:7d:
         87:25:80:53:ff:a5:d7:8f:4f:8a:f5:98:5b:a5:e8:7f:a3:a2:
         77:51:93:9d:3f:53:b5:2a:1c:27:8f:95:de:03:f2:1f:a7:cf:
         41:53:41:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:53:50 2025 by rpki-client