Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
File:                     F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft (raw, json)
Hash identifier:          zbnyccz7UtbZ1FbZD3+PpH4Bp3pXF4VeDDF1uv1J04c=
Subject key identifier:   EA:45:37:77:ED:40:66:C5:37:A1:8D:13:AD:EF:D8:E5:59:12:C6:12
Authority key identifier: 17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F
Certificate issuer:       /CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
Certificate serial:       0196A509F14AAF23CDE6534D0B127C676957
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
Manifest number:          13F9
Signing time:             Tue 06 May 2025 10:00:14 +0000
Manifest this update:     Tue 06 May 2025 10:00:14 +0000
Manifest next update:     Wed 07 May 2025 10:00:14 +0000
Files and hashes:         1: 1-JQsoXrJF1cL02AU4m3DYLwbUEg.roa (hash: 79cS9UiptLRApHw1SGPwVnRtKo+MdI4f+PG1mm8Q0Oo=)
                          2: F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl (hash: XmJN1RtACTdFg82DM3gKkOPBdanNZHWFxvR4NTNQVWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 10:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:09:f1:4a:af:23:cd:e6:53:4d:0b:12:7c:67:69:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
        Validity
            Not Before: May  6 10:00:14 2025 GMT
            Not After : May  7 10:00:14 2025 GMT
        Subject: CN=ea453777ed4066c537a18d13adefd8e55912c612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:81:34:0f:b3:16:6f:af:73:2e:11:e6:0c:4d:
                    65:d1:0e:48:61:55:d1:a8:14:53:f4:c7:21:06:2b:
                    56:5e:4c:2c:f9:d5:51:5f:23:70:b5:b7:d6:a2:06:
                    d1:38:da:22:ff:f4:86:eb:2f:d6:48:be:11:23:e6:
                    2c:55:1a:ec:27:5b:9a:25:b4:a9:de:1d:77:ff:74:
                    2d:98:e7:8c:62:3b:8f:f6:fb:b4:ff:4f:0d:e6:36:
                    32:8f:c5:75:ee:85:d2:45:11:91:d3:d4:85:a2:06:
                    7e:9c:ca:5a:dc:2a:b8:30:d9:da:7e:2f:86:84:2e:
                    3f:35:91:c7:95:45:72:0e:08:98:0f:b9:10:86:fc:
                    3f:20:21:f4:10:1d:7d:65:f9:87:ee:bf:d7:1c:47:
                    50:5f:ed:c3:a8:68:14:0c:de:51:01:96:1e:42:6e:
                    62:18:3d:47:d5:fa:97:5e:c1:05:88:70:07:ae:5b:
                    58:23:a3:f3:1e:ca:db:4c:16:c2:fe:54:f7:40:46:
                    04:c5:20:52:16:6a:af:04:ed:8a:81:e6:bc:70:5c:
                    85:22:76:4e:04:b3:f4:12:a5:5c:e6:f7:0e:e6:3b:
                    c9:c0:a6:c6:bf:13:d7:3f:80:f1:1b:b9:ad:76:a6:
                    cc:b2:ef:dd:fa:f0:13:91:cb:de:72:66:c9:5a:60:
                    54:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:45:37:77:ED:40:66:C5:37:A1:8D:13:AD:EF:D8:E5:59:12:C6:12
            X509v3 Authority Key Identifier:
                keyid:17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:63:05:ef:e7:f9:4e:a8:64:b3:ec:f1:9b:3f:36:a4:b6:d2:
         0c:4b:05:77:52:3a:93:fe:75:5b:64:05:c7:81:f1:71:32:0b:
         f2:d8:02:ee:5e:d8:c3:4c:0c:58:29:22:e5:2b:86:19:f0:c4:
         28:14:ce:91:25:35:2b:4c:3a:93:20:ca:dd:26:4b:56:41:a4:
         c7:8b:7f:aa:da:eb:85:ec:6f:a3:a4:b3:be:65:c4:68:dd:66:
         d3:82:26:9b:6a:f1:29:c1:11:cb:31:b7:cc:ff:db:37:dc:2c:
         6a:12:9c:c8:88:fd:93:f3:67:7c:7d:f3:81:65:30:16:05:52:
         ed:4d:57:7d:2d:51:e5:7f:77:3b:ee:07:33:8c:21:69:38:90:
         0f:26:09:71:7f:29:ae:47:f0:9b:44:d0:bc:34:84:ce:96:35:
         f5:c8:7e:0b:f1:27:04:27:59:91:94:2a:eb:33:10:41:f2:49:
         91:13:63:e6:35:08:66:94:a5:32:dd:cc:4f:e1:16:24:8c:f3:
         34:18:9f:94:8b:a4:8b:d0:a9:59:f5:1e:b0:de:1c:2d:d1:d8:
         09:5e:5c:d0:74:41:fa:60:5d:be:d4:e6:c3:22:a8:2f:24:4c:
         98:d5:a7:6e:90:a6:9c:45:d8:0e:39:6f:f8:93:0c:7f:4d:1f:
         01:d0:14:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:59:03 2025 by rpki-client