Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
File:                     AgNhbKL5rvpww5FMzpDc4JcGz7s.mft (raw, json)
Hash identifier:          7CUOnYb0xxIA57YmS1Z+acXSr41RwHmxrAWNm+9WosQ=
Subject key identifier:   62:7C:55:3A:49:52:F4:30:97:F3:B3:48:AE:3F:57:CD:32:88:1A:09
Authority key identifier: 02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
Certificate issuer:       /CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Certificate serial:       0196B89128D11FBA9F0F381B3EA33F2F41A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
Manifest number:          0FA1
Signing time:             Sat 10 May 2025 05:00:42 +0000
Manifest this update:     Sat 10 May 2025 05:00:42 +0000
Manifest next update:     Sun 11 May 2025 05:00:42 +0000
Files and hashes:         1: AgNhbKL5rvpww5FMzpDc4JcGz7s.crl (hash: pxkWRvt18TAzUrSWhk7ItmXWj8150oSJnm5gw4QYoak=)
                          2: mzTTUqHywuBobPS3UeYVNsDUJ_k.roa (hash: hsMBTi8GspJP9sz8q6TgdiXZybDG1BQNlqbzOxmeAmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:91:28:d1:1f:ba:9f:0f:38:1b:3e:a3:3f:2f:41:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
        Validity
            Not Before: May 10 05:00:42 2025 GMT
            Not After : May 11 05:00:42 2025 GMT
        Subject: CN=627c553a4952f43097f3b348ae3f57cd32881a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f4:1e:11:cd:7a:41:e8:49:0d:6b:c4:91:55:
                    bd:33:e5:55:fa:cc:08:ec:79:4d:68:24:3d:43:8e:
                    03:d2:79:77:5d:ae:32:b3:36:5f:94:1b:27:da:c0:
                    f6:c8:9e:fd:a4:9d:18:f3:74:0f:44:73:a9:38:81:
                    b6:ca:b3:95:02:38:bd:49:2d:01:31:d5:3f:07:21:
                    f2:4c:c6:a3:d0:c9:a1:3a:f1:a9:b2:7c:c7:c5:42:
                    4a:d2:ce:16:ef:cc:5a:a6:44:90:eb:cf:57:76:b0:
                    e7:36:eb:fc:8d:35:a6:4a:75:43:2d:65:05:58:8f:
                    a2:98:a0:7d:c2:50:08:84:1e:3e:d6:e7:a0:50:9f:
                    43:b6:1d:f4:e7:35:f4:4b:36:25:1f:db:3e:d6:89:
                    0e:b8:fb:9b:18:af:bf:41:22:e6:75:e8:72:b4:e3:
                    f5:db:aa:f6:6f:81:80:e8:24:8f:29:b4:bd:a8:fa:
                    ae:8e:2a:9e:23:c7:e3:a3:eb:66:75:36:46:c8:b0:
                    eb:0b:73:cb:36:86:34:29:c0:4f:0c:a3:20:92:f3:
                    c3:b6:69:d0:7a:06:27:a1:30:71:96:9e:ce:6c:0f:
                    8a:c2:a2:24:6c:41:48:f2:c1:7a:80:03:43:32:ee:
                    e7:d7:a7:a7:b3:b1:9c:22:ec:5c:1e:ba:57:fb:76:
                    c0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7C:55:3A:49:52:F4:30:97:F3:B3:48:AE:3F:57:CD:32:88:1A:09
            X509v3 Authority Key Identifier:
                keyid:02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f7:05:de:69:3e:8f:33:31:b9:a5:e4:5e:85:fa:0b:a5:91:
         dc:6a:2c:ad:70:fd:f1:46:79:2e:3d:43:3e:6b:d4:00:17:68:
         de:28:87:a3:b7:87:da:ea:4b:b9:82:8f:b9:19:ef:76:a0:31:
         9c:61:4c:23:4e:12:c7:1d:3f:d1:b4:63:bb:1f:c7:1d:bd:e1:
         5c:38:c5:2b:d8:d1:ac:b4:b3:d3:34:e6:b5:3e:3c:05:04:6b:
         89:54:51:52:55:6f:2e:f8:aa:bb:9f:32:b6:30:b5:99:16:48:
         0f:cc:c8:59:f6:cb:42:b1:05:b0:6c:fb:5f:4b:00:b3:8c:01:
         a3:1a:14:a5:e8:57:66:cd:71:ef:66:57:84:89:46:22:f8:c8:
         22:31:d1:33:17:d1:eb:f8:2f:03:fd:ed:e6:e7:fc:66:8b:d1:
         0a:d0:cd:4f:49:31:25:8d:f8:1f:6f:a0:cf:14:bf:a1:4f:4b:
         39:79:4c:74:f9:72:67:3d:73:c9:3b:64:73:ec:6c:3b:7d:ce:
         64:12:b8:5e:de:b9:3d:06:57:53:4a:da:e7:17:b4:c9:65:81:
         68:fb:3a:b7:4e:08:83:7b:ae:11:8e:bf:95:25:49:1a:d4:8d:
         b8:e1:83:a7:38:d1:02:bf:98:ba:0e:2c:c9:ed:83:ff:9c:1a:
         41:7b:ea:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:22:52 2025 by rpki-client