Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
File:                     FqwWDambNJSla1R8aKjiwJGGkbU.mft (raw, json)
Hash identifier:          XuNeYELNEJBI+nBSK6KxKRoCdbZnEATGTzu28VYmi+E=
Subject key identifier:   AB:D0:BF:96:B7:2F:63:A8:80:A1:E6:8E:C0:EE:F5:A8:B2:FB:D6:E6
Authority key identifier: 16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
Certificate issuer:       /CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Certificate serial:       019644B2395DF854143CE71075634F4E2DA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
Manifest number:          106E
Signing time:             Thu 17 Apr 2025 17:00:52 +0000
Manifest this update:     Thu 17 Apr 2025 17:00:52 +0000
Manifest next update:     Fri 18 Apr 2025 17:00:52 +0000
Files and hashes:         1: FqwWDambNJSla1R8aKjiwJGGkbU.crl (hash: 61MNMKnJknxVnlzkdqYpDdcOJTiEt0rRMZLT0iXbxqk=)
                          2: H9dXCbHCAXGOrGOV28k8umzrLKQ.roa (hash: sDapbNuHEvC3TdmduqXaXIUkjYECPGi1w550P+lUprw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:b2:39:5d:f8:54:14:3c:e7:10:75:63:4f:4e:2d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16ac160da99b3494a56b547c68a8e2c0918691b5
        Validity
            Not Before: Apr 17 17:00:52 2025 GMT
            Not After : Apr 18 17:00:52 2025 GMT
        Subject: CN=abd0bf96b72f63a880a1e68ec0eef5a8b2fbd6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:6a:f7:a9:2e:df:db:f7:8f:73:6e:25:d7:49:
                    cd:81:b9:5d:46:63:9c:44:fa:2a:82:fc:59:7e:1e:
                    d0:15:d0:7f:7f:25:4d:9a:b4:84:ec:ee:18:b0:01:
                    7a:1a:cb:03:d9:b7:e4:e2:57:de:db:5f:c9:06:3d:
                    52:d4:ee:2e:00:84:20:aa:7c:ce:05:25:5d:44:10:
                    b2:93:ce:07:f0:a0:9a:1d:99:be:bc:e2:e3:5d:5f:
                    36:12:8a:9b:e4:89:27:02:90:98:14:89:14:c8:64:
                    2a:25:ac:15:83:6c:47:af:d5:a5:40:7c:95:54:da:
                    62:74:59:ef:e7:8f:ae:81:48:0a:f8:0d:8a:18:32:
                    2a:c3:0f:9f:cf:84:a5:0d:63:bf:af:6f:58:af:7c:
                    6e:88:ba:c2:ce:aa:ed:6a:8e:80:c1:38:18:93:d3:
                    c6:4f:f0:b2:01:07:dd:92:aa:41:34:61:3e:47:92:
                    62:80:61:ee:98:0d:e5:4a:66:38:9f:51:66:a3:5f:
                    e0:7f:63:59:8b:09:76:15:cd:92:64:73:fa:af:05:
                    75:4e:2a:29:9f:05:b2:c6:fc:f6:f8:dd:67:5d:01:
                    cf:46:26:59:11:54:56:6d:06:67:5e:20:ab:39:c8:
                    d3:c5:33:0a:96:7a:7e:63:f4:01:03:4b:e0:51:55:
                    d7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D0:BF:96:B7:2F:63:A8:80:A1:E6:8E:C0:EE:F5:A8:B2:FB:D6:E6
            X509v3 Authority Key Identifier:
                keyid:16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:35:ad:1a:a0:15:4d:2c:c3:89:06:6a:b2:02:c3:67:f1:91:
         61:73:ed:2c:ef:a0:6f:19:7f:0c:7a:5c:76:a2:97:35:7b:9d:
         c6:9a:70:63:06:a8:11:ad:f3:12:b5:f1:da:61:a6:6c:b9:88:
         2c:92:b8:d3:8f:78:b2:8d:c9:b3:70:23:a3:2c:4e:65:88:03:
         54:af:e0:ef:48:47:ea:ea:ef:e9:4f:57:9d:4d:4b:f0:6b:17:
         94:67:13:5a:b2:c8:a0:0f:bb:71:bc:35:6e:6a:68:96:a4:15:
         92:e8:78:5d:76:8b:2e:8c:67:fa:d1:71:6f:3c:13:0a:4f:22:
         f9:7f:e8:c7:45:2c:cd:bd:6e:50:6e:fb:e8:f0:23:e2:36:ca:
         f2:7c:e7:95:be:6d:92:3d:ea:af:0d:67:4a:10:26:09:a5:a5:
         90:13:50:1c:71:ee:e4:d2:87:4b:b4:96:78:9a:a0:59:fa:35:
         89:7f:ea:fb:3e:23:ef:f8:20:cd:a9:0c:5e:11:ad:05:20:fd:
         6a:4e:5c:5b:44:e0:03:38:44:58:87:3d:47:34:b0:c4:c7:ec:
         56:cf:bb:c1:ee:12:7b:2e:85:57:35:e2:ea:cd:27:33:62:05:
         60:16:7c:27:f8:af:e1:c2:e2:a7:78:e0:de:e1:40:53:08:d1:
         49:f0:4e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:35:23 2025 by rpki-client