Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
File:                     FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft (raw, json)
Hash identifier:          /s0rC6I3EXuLhVoyl24STe6DT+0t2Rq392pZXdatPCc=
Subject key identifier:   16:9A:C9:EE:47:AF:16:1E:67:AF:8F:E8:1E:30:CA:52:DB:D0:DA:BF
Authority key identifier: 16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
Certificate issuer:       /CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Certificate serial:       019748FA3959B0FAF67B943558AC3B961991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
Manifest number:          0EFA
Signing time:             Sat 07 Jun 2025 06:00:47 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:47 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:47 +0000
Files and hashes:         1: FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl (hash: AFheKri79ustnIqJAQ9wxAzL7ggaJwRJ2tLpuaYmTqc=)
                          2: sdQpr9vBWbo2oFyAIJwywqV94V0.roa (hash: q2Hm5+yXKjxuN/cBMa4LO9usoHIS/gexRqRStEbsYf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:39:59:b0:fa:f6:7b:94:35:58:ac:3b:96:19:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1670e1bc5869c602b642449031d4b7116c9dfa26
        Validity
            Not Before: Jun  7 06:00:47 2025 GMT
            Not After : Jun  8 06:00:47 2025 GMT
        Subject: CN=169ac9ee47af161e67af8fe81e30ca52dbd0dabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:e7:2b:eb:02:72:0a:f4:dc:6d:52:85:35:
                    01:40:d1:b6:a3:36:7c:28:51:64:59:e3:ab:57:3d:
                    73:ed:0a:09:ff:14:7a:b1:38:cb:64:bc:76:c3:52:
                    53:2a:13:3c:06:89:76:fa:43:51:59:a4:30:f6:dd:
                    36:95:da:fa:fe:c0:19:76:43:0e:84:e7:e9:99:44:
                    c2:95:6f:51:91:3b:81:26:39:83:b1:9d:a7:da:94:
                    d3:3e:84:86:ff:98:87:2e:79:52:cf:a0:73:6c:b8:
                    43:87:c8:39:99:07:29:a3:06:dc:b6:9d:8c:a2:4d:
                    a9:18:cd:66:a6:30:8a:f3:a0:f9:3a:9d:d7:a6:88:
                    eb:aa:bd:af:65:3d:7a:8a:46:b2:8d:e8:5e:6b:b4:
                    44:49:80:36:92:3e:db:71:66:77:fc:be:71:80:23:
                    34:89:f0:70:98:0b:1c:41:b8:bb:cd:79:93:9b:09:
                    08:5c:51:1e:aa:6c:f0:ea:72:2e:99:bc:85:53:53:
                    86:1e:26:ca:aa:aa:2b:dd:74:4f:a8:b9:86:63:68:
                    7e:02:d3:d1:cb:72:dd:56:7a:1a:c8:87:2b:0b:33:
                    ae:71:0e:6b:d2:9a:04:ff:8c:12:82:a4:77:9a:82:
                    03:1c:81:90:8f:e4:25:fc:57:c8:c8:a0:f0:ad:96:
                    89:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9A:C9:EE:47:AF:16:1E:67:AF:8F:E8:1E:30:CA:52:DB:D0:DA:BF
            X509v3 Authority Key Identifier:
                keyid:16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:76:15:d1:2a:80:b6:22:94:c2:b3:35:de:7d:ae:be:27:93:
         85:bb:2c:cd:6d:c9:62:04:5a:8b:8e:d3:aa:99:03:f4:e3:87:
         8a:01:3a:56:c4:2a:55:ca:69:2b:f2:d7:d9:91:fe:5b:b5:e5:
         73:00:41:a6:84:f5:9d:1c:81:d4:5a:1a:02:cf:d5:9a:12:39:
         32:08:5c:24:3c:56:f9:77:17:9d:d6:d7:c1:1d:e0:aa:09:71:
         bd:ef:67:f7:84:db:65:35:f4:de:5a:69:29:37:2e:d3:82:38:
         81:59:7d:7a:17:94:49:96:f8:1b:bb:2d:a1:7f:4f:c7:aa:bd:
         1b:41:15:82:da:6a:08:66:38:42:7e:da:2b:ae:c2:ef:f7:ae:
         47:8f:88:92:d1:41:4c:48:b2:79:0f:92:05:57:68:e1:7d:56:
         b1:ac:ee:f4:c8:25:13:c6:ce:80:18:0e:0e:61:3d:f5:db:3a:
         2b:5b:d6:79:29:fa:cb:da:83:6d:89:bc:97:01:7b:0a:1b:1f:
         9a:ec:2b:52:0f:12:1c:29:13:a6:0d:d4:08:22:70:a5:10:a2:
         1f:fd:b4:c0:25:f8:9f:37:03:1c:2a:48:d3:cd:f3:e7:36:dc:
         48:b8:f4:f9:d0:39:13:25:38:cd:4e:f1:88:24:9c:4c:14:5a:
         f6:75:7b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:10:37 2025 by rpki-client