Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
File:                     _-cGk0VLwzSF3sadIZ0FAmVKwEo.mft (raw, json)
Hash identifier:          jn9nNtCaTk0BwbIc7Wn7n/R+gfPFRDLa+Wj8d+Oj6mw=
Subject key identifier:   E7:D9:7E:D5:54:3D:D9:9E:B3:00:95:D9:34:91:DD:98:6A:48:A1:8B
Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
Certificate issuer:       /CN=ffe70693454bc33485dec69d219d0502654ac04a
Certificate serial:       0196ABB0EA1219C5B029DF83F0F194265335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
Manifest number:          0FBC
Signing time:             Wed 07 May 2025 17:00:20 +0000
Manifest this update:     Wed 07 May 2025 17:00:20 +0000
Manifest next update:     Thu 08 May 2025 17:00:20 +0000
Files and hashes:         1: _-cGk0VLwzSF3sadIZ0FAmVKwEo.crl (hash: e8ZInYQjtABKEKq/RcU0s2oJvDiBwLj6dpIdZyfcggk=)
                          2: _0sjthYRaAet3JbRp0XUDRbz-GA.roa (hash: ul8jawKmMZl7pMGLxI/c/PCpmLqBlcwBurtPIn7OQwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:b0:ea:12:19:c5:b0:29:df:83:f0:f1:94:26:53:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a
        Validity
            Not Before: May  7 17:00:20 2025 GMT
            Not After : May  8 17:00:20 2025 GMT
        Subject: CN=e7d97ed5543dd99eb30095d93491dd986a48a18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:db:59:d1:97:28:55:07:58:10:76:72:f6:66:
                    ab:46:0c:0b:95:f9:9e:5f:14:a2:dd:de:f2:e7:19:
                    e1:36:ef:28:3c:77:71:37:6c:a5:50:be:80:dc:fe:
                    fb:a3:2a:67:3a:4b:80:1b:d7:1c:c2:0c:50:1c:30:
                    a3:7d:86:c4:53:3b:fd:c7:c7:e9:13:6a:30:29:2d:
                    e0:a8:b3:e3:18:0c:28:c6:9a:75:1a:d6:35:85:1c:
                    c0:cb:0e:a7:9d:bf:2c:b0:2b:34:2a:38:59:33:d0:
                    e1:57:9b:59:76:9a:c9:82:e5:83:85:bf:8c:a1:41:
                    8b:81:f9:ca:4c:19:d2:0c:de:1e:bb:b0:3c:e1:a7:
                    84:7a:a5:fd:73:f6:5a:78:f0:53:5f:3f:33:9b:38:
                    8c:89:d8:34:80:6f:fd:97:4d:76:83:63:b5:9a:cf:
                    64:b8:20:ad:68:ef:fb:bc:30:5e:1c:56:40:ea:b6:
                    55:00:39:c1:53:44:a9:da:89:8a:66:ff:ff:8f:59:
                    0b:a7:63:d6:08:44:ab:15:9f:02:ae:5d:6f:0f:c4:
                    4d:b9:06:3d:94:80:53:99:90:2e:5b:eb:5e:b8:5b:
                    5d:0d:16:6d:04:a4:3c:36:38:3f:f7:17:43:ac:16:
                    cb:c8:21:67:c4:03:bc:b1:97:65:05:17:8d:72:ce:
                    2b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D9:7E:D5:54:3D:D9:9E:B3:00:95:D9:34:91:DD:98:6A:48:A1:8B
            X509v3 Authority Key Identifier:
                keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:21:e3:3d:b7:77:68:e1:b6:65:fc:db:59:86:ee:fa:af:3e:
         59:e3:60:9b:b9:3a:bb:6e:8f:8a:d7:4f:40:05:5e:8b:46:eb:
         94:a3:14:18:7c:67:67:3a:8b:3f:fc:63:a6:55:1f:92:e4:9b:
         dd:dd:2d:8d:6d:d0:52:d7:4a:c7:ac:65:4f:76:df:05:4f:ee:
         ef:54:4d:0b:c3:45:94:a9:ba:3a:6d:64:35:78:0e:1e:2c:84:
         cd:33:01:9b:cb:f2:2c:05:a7:26:a3:2e:21:26:7f:69:60:67:
         b0:b5:d4:87:b4:d2:7c:8d:92:c3:6b:6f:f0:35:5c:9d:9a:99:
         f1:1b:c4:ea:c6:48:0e:05:1d:12:37:bc:cc:30:29:e9:f9:e1:
         50:6f:f5:d9:6a:9f:16:6c:12:ee:26:6e:2c:5d:4e:df:2d:e1:
         59:3e:41:82:2e:16:7b:d3:7f:0c:b8:33:ba:c8:cb:8f:08:e4:
         23:2a:f6:24:73:0c:89:7c:f6:28:e0:0a:31:c1:c7:07:f9:1a:
         06:32:7b:0d:f0:8f:c8:ff:9e:6c:84:4a:84:41:b1:73:b9:0b:
         50:be:5b:c5:f0:f2:fd:51:77:e3:04:85:d1:47:55:31:4e:1a:
         ab:18:0d:65:13:c6:08:ac:a9:6f:b2:3d:15:36:77:f4:14:7a:
         78:b7:dc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:40:16 2025 by rpki-client