Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
File:                     Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft (raw, json)
Hash identifier:          MlNRze+thchp2U8gfLFyeR6PDsOof7xAGrQGStXanRg=
Subject key identifier:   7C:A6:8D:CB:D2:71:3E:E0:40:25:7B:F1:96:80:5E:6E:57:D3:E7:0D
Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
Certificate issuer:       /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Certificate serial:       0196B2FCD16DDCE1F89C0389B24AA7E25CA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
Manifest number:          127B
Signing time:             Fri 09 May 2025 03:00:35 +0000
Manifest this update:     Fri 09 May 2025 03:00:35 +0000
Manifest next update:     Sat 10 May 2025 03:00:35 +0000
Files and hashes:         1: 9LYwP72SZhTP9lZsq-7j8HuZdgM.roa (hash: G+yR0ErMQLPYRLmJwGI9EkRMjsbBolXBG62m79mi45g=)
                          2: FR9MfFqpLiVuFujJBtFbhJmONI4.roa (hash: E+6VeTvBdtosqoAM0l7HopHp27qrMu4a19ly9IU6g9U=)
                          3: Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl (hash: 1VzlSqUcXrCDcvZwa6XWEaez9OvHz4HEpjuMA9+ygtY=)
                          4: a5dgM43xwH6TzzG3OU4-DU-VReU.roa (hash: lvQLcSmhppO+nBAUrEWVk8HCNuzIbjnnhIRTEmwBZUw=)
                          5: dK_YVUmItcs6Jo6KBWMzLehOltU.roa (hash: cxdMWN6vf7XXfhS5ABEMBqXeAf173QdfF9qlyNjA1g8=)
                          6: fNVPBx-nJkzMb3EbI9eFden66xI.roa (hash: 4Ma//fNnrLCw4CmoykWoEiiC3wb4lPTvORAHCvUM+U4=)
                          7: rrKDVy-QxSmZ2HqqmDRKJ_O3zjE.roa (hash: qQt4LgJZUrwxxbQW9H3UI+h4NYxT7FciUlDfdQlIp3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b2:fc:d1:6d:dc:e1:f8:9c:03:89:b2:4a:a7:e2:5c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
        Validity
            Not Before: May  9 03:00:35 2025 GMT
            Not After : May 10 03:00:35 2025 GMT
        Subject: CN=7ca68dcbd2713ee040257bf196805e6e57d3e70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:38:e3:7e:96:9f:83:64:43:08:58:47:de:1c:
                    52:f5:3f:58:fc:d6:cc:7f:a1:01:2a:6d:ba:cc:0c:
                    8e:b7:4a:d0:fb:b8:10:55:30:9f:81:65:f1:72:78:
                    31:92:66:29:39:9c:fc:1e:59:b5:57:ee:d5:c4:72:
                    ed:0f:37:02:0b:61:ab:8b:ff:40:f2:84:47:8d:4c:
                    f3:8b:28:fd:29:25:a8:a8:c1:35:10:bc:e7:1e:0b:
                    36:2e:70:da:1e:f1:3d:9d:5d:95:25:66:79:e7:47:
                    a6:1a:9d:91:2f:0b:35:f6:3d:43:97:6e:f1:59:1d:
                    9b:f6:43:85:04:0d:02:94:6e:c9:12:77:37:4a:c4:
                    62:7f:c6:70:b8:f9:24:92:21:63:1f:cf:fb:97:e3:
                    28:72:8f:c5:84:b8:5c:dc:88:43:52:8f:67:11:13:
                    08:59:31:5f:ce:9c:6a:80:db:f9:b3:62:2c:8e:2b:
                    d6:ed:07:fb:11:39:bf:43:09:ec:75:a9:8e:7d:15:
                    61:87:f0:34:fe:40:b3:67:6c:21:03:8a:01:fe:8c:
                    b1:2a:82:46:67:c0:96:ac:39:0f:d6:0d:64:dd:27:
                    b6:1b:dd:6d:e1:2a:17:f8:9a:63:fc:95:25:ca:c8:
                    b2:a0:f5:a7:6a:d3:3b:71:a5:17:46:f0:20:2e:79:
                    d1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A6:8D:CB:D2:71:3E:E0:40:25:7B:F1:96:80:5E:6E:57:D3:E7:0D
            X509v3 Authority Key Identifier:
                keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:f6:ce:52:86:5e:8b:3d:31:d9:0c:61:a3:4d:c5:70:0e:f7:
         2f:61:6c:ad:8f:c8:ac:48:d9:09:7d:50:f6:18:54:f4:a3:7f:
         9e:c7:1c:28:c3:b1:ba:a8:33:f4:08:f9:b8:ac:fc:14:22:1c:
         82:29:6f:64:ac:30:59:fe:b7:81:bd:5c:60:1e:e0:1d:43:96:
         ab:e8:73:91:ae:1e:d9:ae:21:bd:da:5e:63:0e:ed:e6:3e:c0:
         d6:69:d3:1f:9a:37:52:81:11:c1:f5:0e:6a:b0:6a:f3:73:a0:
         93:7d:ff:5c:1b:44:d4:b3:65:e6:c2:ec:3f:fb:90:88:90:dd:
         17:94:88:a0:ef:23:9a:31:ee:23:d4:20:81:3d:a3:01:25:ff:
         b5:68:43:74:ad:81:25:a3:81:f0:05:83:c4:b1:55:b5:52:ee:
         92:f9:77:26:0c:78:4f:17:69:39:fb:2d:6e:a0:51:a6:28:f8:
         b6:02:15:43:5c:24:e7:71:3f:43:a2:6b:30:ff:9c:34:27:4b:
         e0:d4:2f:29:76:ee:b5:94:77:ee:ae:e7:bc:13:f4:f5:99:d0:
         ef:fb:14:f2:7c:00:88:d4:38:94:84:58:5e:c1:2a:48:da:fa:
         00:05:81:f6:64:45:3e:1d:15:bd:c6:8a:1e:f6:51:eb:77:44:
         e4:68:22:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:37:32 2025 by rpki-client