Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
File:                     FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft (raw, json)
Hash identifier:          dUWAOKt51AYWYOKHbk9/Ylv5MgIjKa5LKw4k8VVGFxE=
Subject key identifier:   58:FE:44:BD:3E:2C:86:A1:B1:A1:CA:A7:F6:CD:CF:8D:CC:35:42:20
Authority key identifier: 16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
Certificate issuer:       /CN=16e49258dc76546dc595084d2593e181cd47983f
Certificate serial:       019749D5D11B62C6F7D41EB86BB0CD74E37B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 10:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:38 +0000
Files and hashes:         1: FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl (hash: C5L9ZGptIAM7BcelDMyfgqC6v2L7r2Z1NkQ8d2/Kc4U=)
                          2: VUbDzg-9AyYevbePTrpEdiRqwN4.roa (hash: t4/eKGmP5PXlxUDXBzE6y3aXXoUIuyqOs01O0kBzip8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:d1:1b:62:c6:f7:d4:1e:b8:6b:b0:cd:74:e3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e49258dc76546dc595084d2593e181cd47983f
        Validity
            Not Before: Jun  7 10:00:38 2025 GMT
            Not After : Jun  8 10:00:38 2025 GMT
        Subject: CN=58fe44bd3e2c86a1b1a1caa7f6cdcf8dcc354220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:68:c1:66:bf:b4:da:29:ac:83:2f:c4:9a:a1:
                    9e:a7:bb:6a:61:cc:9d:74:fb:91:62:0f:59:f2:0e:
                    dd:83:9d:ce:81:64:6e:1f:b7:b3:12:c9:bd:47:ce:
                    fc:49:f9:ed:73:dd:8f:62:fb:45:31:cd:fb:aa:5a:
                    bb:37:63:4c:bd:45:08:37:8c:72:8b:a9:49:aa:89:
                    e3:af:03:0f:9d:9d:2a:68:fe:cb:25:02:60:7d:03:
                    b2:af:17:9c:72:dc:2d:55:9a:bc:7d:a2:f9:43:20:
                    e1:21:95:b1:50:7d:4a:2e:f5:19:a4:7d:74:57:26:
                    f1:5c:fe:a0:ef:55:4f:e9:59:dc:c9:08:4c:ab:99:
                    78:e2:b8:82:d6:71:e4:eb:2c:eb:18:5f:73:d2:21:
                    79:bc:e5:7d:27:83:3d:91:33:65:82:f9:68:9c:8e:
                    8e:e6:60:3b:76:f3:b6:53:1e:7b:1f:c5:4d:45:32:
                    9c:0f:8f:6f:69:14:5c:68:7a:3d:ef:03:83:df:b2:
                    35:1e:7d:e1:27:c2:db:79:92:01:af:24:f1:3e:aa:
                    f9:d1:e8:fa:b8:79:c4:1e:99:44:cd:bf:1c:c2:d6:
                    50:21:d9:2e:c9:49:c4:80:e0:58:51:a0:83:e9:46:
                    d0:60:5e:ec:42:d9:96:7a:1d:27:e1:e0:88:fe:23:
                    9f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FE:44:BD:3E:2C:86:A1:B1:A1:CA:A7:F6:CD:CF:8D:CC:35:42:20
            X509v3 Authority Key Identifier:
                keyid:16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:be:ff:99:c3:7b:6e:65:f6:94:dc:b6:ca:25:06:f1:eb:26:
         33:ca:c8:29:0a:17:51:d8:b2:86:2a:8c:36:62:f5:b8:86:6e:
         08:43:2d:ff:13:8e:77:49:03:61:31:64:bc:6b:12:46:8b:3c:
         a5:3b:18:95:0a:b0:6a:fc:6f:d3:44:e9:7f:50:1d:71:40:80:
         ca:26:7f:7f:ca:12:2c:d8:ef:81:ce:42:79:96:0e:e6:87:4a:
         b5:87:15:30:33:cb:c3:41:e4:4c:ff:dc:94:c2:98:1d:7e:bb:
         9a:a0:8f:59:ee:95:56:80:07:58:3f:e4:e4:44:43:ec:9a:e2:
         eb:06:5a:97:4f:2f:de:a4:c8:11:49:9c:e0:80:f6:32:04:98:
         95:62:0e:a4:bb:40:0a:45:14:b6:23:ad:06:75:4b:0f:41:09:
         b3:63:1c:25:35:3a:58:36:e9:7f:f3:f4:08:1f:32:5b:d5:29:
         28:cd:fa:cf:e0:41:ef:cd:5a:0b:38:64:fa:ff:56:ef:c6:48:
         a4:f8:fd:fa:87:45:2e:4e:72:7d:1f:22:be:00:33:3a:ed:3f:
         8e:90:5c:69:ef:64:34:ff:42:bf:9e:17:d6:0f:b6:0b:6f:4f:
         49:8d:7a:ff:d8:e6:cb:c1:b3:e0:19:73:1d:4c:7d:01:d8:63:
         a3:ff:72:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:35:39 2025 by rpki-client