Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
File:                     FQHIRfE91K1una5HDV_2nFzKN3E.mft (raw, json)
Hash identifier:          FMK0J64FXYunFLI1l2AMPuM3LFg6+XoN2FethBlfPqE=
Subject key identifier:   E7:AF:D0:B0:B7:7D:E8:E8:FF:6D:58:39:CF:F2:6D:C8:C8:B7:63:40
Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
Certificate issuer:       /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Certificate serial:       0196C15D2680DC90F922605A89997A658627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
Manifest number:          1538
Signing time:             Sun 11 May 2025 22:00:29 +0000
Manifest this update:     Sun 11 May 2025 22:00:29 +0000
Manifest next update:     Mon 12 May 2025 22:00:29 +0000
Files and hashes:         1: 9GIzAJUr_ot9Wk-LOBAg1Ku1CJ0.roa (hash: 9kCPW/zlShXMw7TqPRpG5YaYgI2ITqB9HqH456C8zHM=)
                          2: 9aibnbG15OYXr_CwwXWE25MOQzQ.roa (hash: uojCF0tqrH10N9391h4LuClKmMmHSTH14D7jK0LX19o=)
                          3: FQHIRfE91K1una5HDV_2nFzKN3E.crl (hash: 9pVFhXCLBiBS3TQ198eP1FSoeRr6PzPorOYPWzEFdzQ=)
                          4: JiiAQHHQ7ilOvQDebu3VRDZ4GHk.roa (hash: nCg2LBGRguEEYRzIikpWv4Lkalt9WCnhcWuH2ZKPobk=)
                          5: XNozD6gpDdwt0jGjIZYI-3jrZdo.roa (hash: hHWVNnpzJQhuwUuCwNB2KNKcpqNI3ZvRAGrTDP4DfJA=)
                          6: mFp3zFR1T75g9VSJshunQuImDjc.roa (hash: BipTnfO1xsn174nFqReyWGJxlVEfgezqCBk9woA8CoY=)
                          7: xpBtw8xNwQpBRT8ur2iAvN2a-zU.roa (hash: 9EOMXCiP71GUhwUoav13zuQOWQdLg+I/B4p7vGgCnlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:5d:26:80:dc:90:f9:22:60:5a:89:99:7a:65:86:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
        Validity
            Not Before: May 11 22:00:29 2025 GMT
            Not After : May 12 22:00:29 2025 GMT
        Subject: CN=e7afd0b0b77de8e8ff6d5839cff26dc8c8b76340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:41:cd:45:19:b5:09:b9:e7:2a:1d:b4:48:58:
                    62:b3:eb:d1:90:7c:f3:97:75:1f:28:6e:4c:85:7a:
                    bd:f1:dd:ff:83:02:48:55:18:cc:47:bf:d6:22:26:
                    f8:20:81:dd:d7:8c:d7:67:4a:8c:14:36:33:7e:57:
                    db:67:cb:9d:bd:64:b7:f9:6e:20:31:83:60:d2:7c:
                    60:fc:6a:b4:57:e7:7d:e0:63:e4:68:64:d0:bb:41:
                    9f:86:a4:98:73:ec:05:6d:bf:44:ca:03:6b:6c:db:
                    fd:71:8b:ef:c0:16:15:0d:64:67:af:c7:8c:da:0a:
                    6e:9c:26:4a:80:c4:74:b2:71:a7:7d:38:a8:64:9f:
                    dc:a8:2c:75:a1:55:62:22:0f:1c:54:24:9d:2b:00:
                    aa:b8:a4:41:fb:89:08:cb:ba:6f:0c:f0:45:b8:46:
                    24:7b:70:76:4e:1e:ae:66:49:e0:36:2b:29:cc:22:
                    9d:e8:dc:39:68:bf:5b:4d:20:c6:c3:83:74:59:28:
                    43:6d:d4:5d:1c:2f:51:28:a6:5f:09:04:7d:ca:be:
                    7c:4c:17:6f:82:db:72:68:08:ec:46:6d:c6:a7:0e:
                    9b:94:bf:f6:d1:1e:ca:7a:6d:9d:93:53:44:2b:20:
                    c6:03:61:83:6c:21:0a:b3:17:23:5a:c6:f3:b6:a7:
                    23:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AF:D0:B0:B7:7D:E8:E8:FF:6D:58:39:CF:F2:6D:C8:C8:B7:63:40
            X509v3 Authority Key Identifier:
                keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:04:6b:23:33:39:80:9e:a9:a3:71:d5:50:f5:2b:67:32:62:
         e2:e1:f1:77:98:87:04:f7:39:ec:0c:05:7e:fc:9f:c6:ff:7e:
         f4:6b:74:7e:7e:29:bc:20:32:17:3d:23:9e:fe:56:0f:b4:d8:
         27:87:a1:9c:a9:b2:98:c8:f6:c8:cb:51:c9:c3:5c:01:62:70:
         47:c0:ea:6a:ef:a6:f1:06:d0:b6:97:93:f8:68:e9:05:a1:17:
         9f:d7:6d:20:e8:db:eb:d3:a7:3a:69:12:0c:b7:92:09:83:15:
         5f:25:f4:5e:1f:15:6b:05:2b:1c:f0:c2:af:33:92:f1:ba:e5:
         24:e3:42:30:68:fd:98:bd:04:1f:19:1c:05:7f:ce:1c:5e:71:
         a6:b5:8b:dd:43:ef:d3:25:89:3a:30:a6:0e:18:06:fd:c9:6b:
         dc:e5:12:0e:24:da:fd:af:c9:ff:4a:32:9f:18:45:78:4d:39:
         c0:fd:41:e1:54:e9:c5:3d:80:64:fe:e3:75:77:56:34:49:0d:
         76:02:54:9a:e5:52:8a:c4:7b:53:51:1c:8a:d7:6f:e5:70:13:
         fd:b2:66:32:f7:db:7c:15:bc:96:c0:80:ee:79:4d:cf:4c:08:
         14:16:64:a3:ec:7e:69:5a:3c:97:6f:b9:d0:33:f5:8c:2a:50:
         1d:88:52:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:27:31 2025 by rpki-client