Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft
File:                     FGK93WyF9js9vnfnrIVJwm_m8-w.mft (raw, json)
Hash identifier:          oSRytPCEeKU1EpyC8Eocdz99NzDeSpsPRvYGgmsEyGo=
Subject key identifier:   17:A4:E9:C9:A6:E6:DD:E2:5E:AD:D5:A6:12:5C:E4:AD:72:AB:2F:A3
Authority key identifier: 14:62:BD:DD:6C:85:F6:3B:3D:BE:77:E7:AC:85:49:C2:6F:E6:F3:EC
Certificate issuer:       /CN=1462bddd6c85f63b3dbe77e7ac8549c26fe6f3ec
Certificate serial:       01964E5A601E830FC1AF2B4968DA6AB4A483
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft
Manifest number:          0FE8
Signing time:             Sat 19 Apr 2025 14:01:07 +0000
Manifest this update:     Sat 19 Apr 2025 14:01:07 +0000
Manifest next update:     Sun 20 Apr 2025 14:01:07 +0000
Files and hashes:         1: FGK93WyF9js9vnfnrIVJwm_m8-w.crl (hash: kNTIEc+/rJ2Y0nZyX6xiS7YOcs/t1elhQeTjiidSjI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 14:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:5a:60:1e:83:0f:c1:af:2b:49:68:da:6a:b4:a4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1462bddd6c85f63b3dbe77e7ac8549c26fe6f3ec
        Validity
            Not Before: Apr 19 14:01:07 2025 GMT
            Not After : Apr 20 14:01:07 2025 GMT
        Subject: CN=17a4e9c9a6e6dde25eadd5a6125ce4ad72ab2fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ea:7e:7c:2a:5d:3e:4f:b5:93:6e:ac:22:56:
                    2c:2b:ad:5f:4a:d1:19:50:02:0b:4e:2e:9f:1b:11:
                    3f:a5:69:95:03:75:0b:4a:52:7a:c7:fb:82:2d:31:
                    ce:73:c0:75:8b:89:f5:b3:c9:02:d8:a4:21:63:26:
                    f6:ab:a1:1d:ff:e4:cb:52:e1:41:d8:b2:9c:c8:f7:
                    02:a1:47:a0:48:5e:e6:9c:99:05:91:bc:fa:6a:6c:
                    0d:3d:2f:a5:f5:e1:71:c9:3d:0c:ad:29:32:a1:72:
                    72:ca:4b:f1:c7:05:78:27:3e:5b:6d:1f:8a:38:b9:
                    5e:52:05:c6:1b:7e:e2:d9:27:1b:46:e2:38:e6:68:
                    24:28:31:5b:f3:68:d6:34:ea:d5:98:03:25:3c:5e:
                    4e:cf:f0:48:06:09:2c:a9:42:24:1f:45:f2:ab:2e:
                    49:be:76:ae:92:a2:d2:19:da:79:79:07:55:22:83:
                    d8:5a:86:87:89:45:e3:8c:90:0a:2f:97:5a:e5:cd:
                    b5:86:f7:a5:e3:37:d9:c5:db:50:96:d5:e2:f1:86:
                    9f:66:cf:12:8d:28:8c:3c:fa:22:3b:46:e5:61:da:
                    0c:77:a1:a0:09:de:f0:a8:01:c0:9c:9f:b5:e0:ff:
                    b0:83:5a:20:bb:ee:9b:48:67:95:52:ac:07:58:51:
                    f9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A4:E9:C9:A6:E6:DD:E2:5E:AD:D5:A6:12:5C:E4:AD:72:AB:2F:A3
            X509v3 Authority Key Identifier:
                keyid:14:62:BD:DD:6C:85:F6:3B:3D:BE:77:E7:AC:85:49:C2:6F:E6:F3:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:dd:69:42:d1:31:06:22:0f:7e:ae:9b:aa:a0:e4:28:8f:c5:
         ed:2d:ea:42:51:a8:66:48:ee:7b:1b:41:07:41:a8:0d:51:12:
         e3:a4:cc:68:51:5a:b4:03:75:89:45:f5:52:39:86:74:f1:55:
         df:72:9f:dc:78:31:1b:8e:3b:a3:a9:e2:b1:bb:76:c9:f9:b4:
         e1:bd:50:0d:d0:9f:c0:38:77:20:c1:53:15:72:7f:8a:81:b9:
         b1:f6:43:78:ff:9f:59:f4:09:77:cf:7b:bf:0f:6f:61:34:60:
         a9:12:4a:f8:53:23:af:cb:28:2b:05:9a:d0:a3:46:e7:59:1c:
         d7:3a:98:4c:89:05:68:df:6a:1e:94:f6:12:e4:02:80:3e:9c:
         23:c3:dc:ae:1a:13:66:da:42:d2:94:64:a0:1f:94:54:38:ca:
         96:fb:ca:89:77:ae:f9:b6:04:4c:49:ae:07:76:35:96:50:40:
         76:ac:dd:4a:c7:5d:18:c7:9e:10:ac:6b:f6:e6:02:da:65:39:
         e2:f0:7b:1a:fb:d1:b0:61:15:94:08:05:83:9a:2d:45:34:1a:
         70:a3:0b:bb:a7:ad:06:ad:0a:07:ce:93:a1:b8:f4:d4:77:0e:
         57:e4:79:20:96:01:13:9c:b9:16:d5:d1:a1:4c:a6:59:af:ff:
         54:c3:25:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:16 2025 by rpki-client