Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
File:                     Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft (raw, json)
Hash identifier:          IsGK2ZK2NidQv20/sK93ebhEOZeIcZv/ZeFxvKTyndk=
Subject key identifier:   51:07:E1:CB:B8:0D:29:01:1D:E5:14:4B:FB:8F:8D:C3:98:E1:97:D8
Authority key identifier: 16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0
Certificate issuer:       /CN=169ea0275c765e17603eb59eef39e2fab5380ef0
Certificate serial:       019748FA4098C9858DB43A195351CE2833E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
Manifest number:          09F2
Signing time:             Sat 07 Jun 2025 06:00:49 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:49 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:49 +0000
Files and hashes:         1: Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl (hash: RbRTpW9sxCpKsBlzmq9mEkmgAqP4k6Z+tiEVBhTwE0I=)
                          2: wbh15XPn1kgCYyJ-XkIl20Yytuw.roa (hash: aWvLndo6Gq/HOzsYU6uHpO8FpYdNLyOKJEg8ZgZ7QAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:40:98:c9:85:8d:b4:3a:19:53:51:ce:28:33:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=169ea0275c765e17603eb59eef39e2fab5380ef0
        Validity
            Not Before: Jun  7 06:00:49 2025 GMT
            Not After : Jun  8 06:00:49 2025 GMT
        Subject: CN=5107e1cbb80d29011de5144bfb8f8dc398e197d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:37:5e:33:23:4e:95:f4:86:34:37:66:9a:86:
                    0b:4c:69:ce:0b:9e:91:51:8a:75:d3:ba:14:d3:47:
                    7b:d7:82:ce:c1:68:10:11:be:da:e5:d6:2d:6c:50:
                    35:fa:4b:7e:39:a5:6c:3b:e4:9e:cc:f3:36:6f:c4:
                    4d:51:4f:a5:5c:d5:0e:a6:6e:73:a7:42:92:2c:79:
                    5f:0e:d6:7d:0f:2d:ee:4b:21:e9:b6:52:9d:d0:df:
                    2f:05:53:03:75:30:f8:7a:b4:e4:a5:85:57:a4:bb:
                    bf:b2:97:c1:c5:f9:43:96:83:cb:7e:28:38:76:54:
                    c1:43:3a:85:97:04:e7:ff:7a:10:79:57:ae:28:59:
                    d9:2f:a7:d4:45:95:63:94:97:b8:bd:89:29:ea:2a:
                    90:6e:67:41:d1:3f:4e:0d:e8:45:f8:e5:ea:ed:e0:
                    86:b7:64:1d:e3:4f:ac:50:4f:86:55:c9:98:23:22:
                    43:88:71:18:6f:b2:0f:3e:8c:15:e0:27:f7:b5:d6:
                    03:2c:02:94:95:51:6f:2c:ac:c8:4e:bb:82:90:ef:
                    98:17:de:33:8d:9f:ff:88:e8:a5:3f:97:7f:10:c3:
                    ca:4d:21:d3:b9:dd:04:dc:26:12:39:d3:f9:a6:fc:
                    68:73:15:dc:ef:26:3e:ac:60:81:2b:b0:4a:88:cd:
                    4b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:07:E1:CB:B8:0D:29:01:1D:E5:14:4B:FB:8F:8D:C3:98:E1:97:D8
            X509v3 Authority Key Identifier:
                keyid:16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:20:c0:3f:bf:5f:d6:54:f8:13:12:da:ab:f5:8d:02:1d:58:
         1b:f6:fd:e9:d8:b1:cd:5a:89:9b:ca:5a:51:6f:27:73:a1:19:
         1d:7f:22:39:2c:42:38:48:27:13:11:d3:ea:bb:1b:5f:ff:38:
         90:3c:62:dd:2d:f4:20:f2:0d:fb:34:f9:aa:76:33:eb:71:b7:
         0b:c0:c8:68:be:e6:25:39:b1:99:f0:40:98:1c:b5:90:cc:fb:
         f5:99:79:ab:54:14:3e:2a:5c:ed:e4:13:e3:57:dc:c4:0e:1a:
         94:7a:b7:cd:99:a4:2b:7f:cf:14:e0:b0:b5:7a:2b:12:e8:9a:
         81:80:73:e1:05:db:61:53:f8:db:30:63:7e:c7:d5:88:b5:db:
         50:7d:c5:39:77:15:22:19:e4:08:cf:c7:94:62:f1:c0:1a:dd:
         87:0a:89:ff:c2:3e:69:81:71:bd:ee:16:88:41:e6:e2:54:89:
         d2:85:f1:54:9b:7a:d3:52:89:b3:68:58:30:f5:95:b2:ff:59:
         bd:c2:b2:6c:0e:34:72:c3:ca:74:a1:f5:00:85:10:4c:cd:dd:
         38:e6:b6:5f:23:5e:67:b1:e0:1b:1a:08:fe:f3:fd:f4:1d:f5:
         e8:0b:99:d0:58:1b:ce:f8:95:0e:49:43:c5:15:b3:6e:63:72:
         dc:62:85:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:30:15 2025 by rpki-client