Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
File:                     fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json)
Hash identifier:          Vh9eh/ZddN3LRMsHaKHjxMbuYuqm0W4dCQYHYYjYVXo=
Subject key identifier:   F2:78:CF:2C:E0:08:82:20:A0:7E:00:AA:90:35:52:48:CC:D6:7E:FB
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Certificate issuer:       /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial:       0196BC6DB16CED37176E5F0DBB2351945044
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
Manifest number:          03FB
Signing time:             Sat 10 May 2025 23:00:27 +0000
Manifest this update:     Sat 10 May 2025 23:00:27 +0000
Manifest next update:     Sun 11 May 2025 23:00:27 +0000
Files and hashes:         1: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: YV4U0eJDLxk1LaJGyZmrgI5ULmKB/AvdECeZZiAtwzs=)
                          2: mYkTlXqpG_46xscAOO-Sp6Bp4FA.roa (hash: F4Jtc5+FUEqcLwMhPjxlPH6jWlgxGrbFa+YLXHGjjaE=)
                          3: tXhAc_5lQ9z8se-7mjM6cOpg6e4.roa (hash: 26ICYZJOvq605v0CSl1cezfNjCXPU7AckP1ImmTpFUQ=)
                          4: u7uQ2Dm3QD7l-Xxryd9G8exq5eQ.roa (hash: z1DWJwaHbuR/Qct83OIrMO/3C45DlWrhtr2MVeCX/hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:6d:b1:6c:ed:37:17:6e:5f:0d:bb:23:51:94:50:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
        Validity
            Not Before: May 10 23:00:27 2025 GMT
            Not After : May 11 23:00:27 2025 GMT
        Subject: CN=f278cf2ce0088220a07e00aa90355248ccd67efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:56:84:aa:97:07:f0:11:bf:41:77:af:b6:9b:
                    87:e5:cb:61:96:c2:b6:c5:bd:33:4c:42:e5:2d:b9:
                    cb:c2:45:0e:9c:6c:8a:f0:a9:74:f9:9f:19:9d:53:
                    93:2e:95:81:7d:3d:cf:fc:33:07:1a:55:bc:b1:4d:
                    82:eb:e4:a4:bf:1a:68:1d:74:4d:42:3b:88:d4:1f:
                    ed:42:d7:2a:56:fa:ed:14:9d:5f:c8:3f:40:1a:77:
                    09:60:c5:1c:fa:44:de:1e:21:4f:cd:02:ba:c2:2f:
                    d1:41:b0:ec:4d:fa:d0:fb:93:6c:c0:b2:42:be:5f:
                    19:25:ec:00:4a:6e:1b:4e:00:a2:f8:e8:35:15:ee:
                    e3:02:fd:07:c5:64:dd:bc:a1:75:6f:34:08:75:73:
                    02:83:82:91:fc:76:2b:58:13:1e:7d:e4:65:b4:56:
                    d8:dd:e7:4d:05:71:70:af:92:fe:6c:3a:0c:70:33:
                    b9:20:fb:b7:b0:c9:06:af:20:06:fb:ac:71:6d:97:
                    d5:d3:1e:5b:e8:a3:1e:4e:4f:ec:da:6c:37:e7:30:
                    2e:f5:9d:30:dc:32:58:2e:7c:0b:e0:65:6d:a5:19:
                    8e:5e:ce:bd:dc:ca:bd:da:bf:d2:af:ac:b1:82:4d:
                    a6:09:aa:2b:ab:b0:48:9d:c3:c0:62:bc:91:bf:4d:
                    f9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:78:CF:2C:E0:08:82:20:A0:7E:00:AA:90:35:52:48:CC:D6:7E:FB
            X509v3 Authority Key Identifier:
                keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:5e:47:4b:fa:20:66:05:7a:24:23:e7:d6:fb:f1:88:d0:98:
         3b:3f:1d:e3:e4:d2:97:8a:13:08:32:44:16:fd:2f:41:3e:40:
         ff:d0:aa:a0:a0:b7:59:ab:2c:35:f7:81:b9:e5:c7:54:da:2d:
         58:a8:67:50:20:81:ab:83:5b:da:c7:77:48:55:46:d4:1a:5c:
         1f:05:4f:3e:b8:86:3a:5a:a6:a4:ec:76:ab:c3:33:1c:09:3f:
         ab:65:06:5e:16:7f:a8:85:34:66:1d:67:b8:b3:22:3a:63:24:
         de:bf:91:89:cb:ca:80:20:2d:cb:96:71:74:c0:80:7a:90:70:
         70:4a:ec:5b:15:f3:f4:cf:f5:72:4e:91:ad:e6:ac:1b:0b:e7:
         a1:3e:b1:8a:29:1e:90:c3:35:94:24:a6:ca:95:8e:05:9a:64:
         31:a3:70:52:16:72:8b:88:a9:6d:eb:5d:2d:07:ef:ac:6c:46:
         05:b4:03:4d:f5:cf:c5:76:3a:95:1e:0b:89:16:b0:7e:a4:e4:
         7b:7f:7c:f2:80:0a:1e:29:81:fe:4a:9a:2b:5a:bc:59:93:cd:
         c1:dd:7d:9a:f8:4c:63:a5:4f:fc:da:50:c3:57:fe:67:17:b3:
         ae:9f:dd:47:26:b8:52:f0:54:e2:b6:4f:d5:c1:75:cb:fa:b9:
         69:78:35:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:09:54 2025 by rpki-client