Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
File:                     E-8y2L8VPATGOTviTwYyQ_fop-I.mft (raw, json)
Hash identifier:          hLRuXfn6AO+NwB8GpRoXhboioYSdrew11q5HcN/0Zr4=
Subject key identifier:   92:01:F6:E3:2C:71:C2:E3:36:10:F1:E8:FB:88:E4:79:7E:B8:B4:9A
Authority key identifier: 13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
Certificate issuer:       /CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Certificate serial:       01977187F6754EBADD0D2124ED54CD85A9C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
Manifest number:          07F5
Signing time:             Sun 15 Jun 2025 03:00:25 +0000
Manifest this update:     Sun 15 Jun 2025 03:00:25 +0000
Manifest next update:     Mon 16 Jun 2025 03:00:25 +0000
Files and hashes:         1: E-8y2L8VPATGOTviTwYyQ_fop-I.crl (hash: uK4i7jLEr4DLKBcPz/ZmweD7oPixGEpF6tgb6kYMBW4=)
                          2: _QgoRTMtyS5EtLyc5fzMPDI_ctA.roa (hash: zInvj3NFraNTsicxTEwbxiFyh/WcUo2wVcGwRT2Mtog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 03:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:87:f6:75:4e:ba:dd:0d:21:24:ed:54:cd:85:a9:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
        Validity
            Not Before: Jun 15 03:00:25 2025 GMT
            Not After : Jun 16 03:00:25 2025 GMT
        Subject: CN=9201f6e32c71c2e33610f1e8fb88e4797eb8b49a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f1:7e:5a:a4:66:8c:f1:e9:4f:ee:7a:2c:d1:
                    bd:be:41:d2:97:49:17:58:33:28:dc:d1:61:76:12:
                    0c:e9:d3:50:55:c2:09:88:6f:28:b2:89:7a:b7:59:
                    61:c4:d6:ad:e3:88:2b:20:da:de:32:33:dc:d7:37:
                    40:a7:bf:8d:24:93:60:af:97:7f:02:16:46:45:38:
                    ac:c1:bc:5a:e7:d5:df:06:26:05:47:55:47:50:90:
                    2c:74:98:36:23:d7:eb:3a:05:11:79:79:02:bc:66:
                    96:c1:f1:8d:90:e4:d5:5b:bc:fd:b8:3f:65:9b:d9:
                    b4:cf:0d:e5:7e:a0:88:3b:1d:be:b7:cf:c5:5e:ec:
                    20:a2:77:6e:90:e3:47:28:91:24:d7:f2:fe:fe:5e:
                    ea:2e:4d:d5:d9:02:6a:fc:36:ae:93:bb:80:16:d2:
                    2e:ef:9d:49:41:7b:41:36:74:99:49:b8:e1:5a:43:
                    39:00:5e:e6:4d:7e:17:be:d3:ee:82:09:11:11:5e:
                    ab:19:a1:21:cc:f2:2f:43:fe:11:ce:fc:51:94:82:
                    5c:01:3f:70:c8:7f:91:9b:46:3a:2f:d1:1b:ed:d2:
                    d1:09:eb:47:28:ee:46:e3:6f:e4:e6:d0:c6:d9:5b:
                    68:53:8d:eb:5e:9a:d1:b3:05:5c:c8:b7:c9:6a:94:
                    c2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:01:F6:E3:2C:71:C2:E3:36:10:F1:E8:FB:88:E4:79:7E:B8:B4:9A
            X509v3 Authority Key Identifier:
                keyid:13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:13:03:9c:37:0e:53:d6:0f:8b:df:57:0a:a8:e6:b9:33:c6:
         3b:1b:08:c8:f6:39:a3:8a:c2:bb:cd:eb:08:e1:d7:d4:f3:bd:
         22:57:f3:68:8a:b3:9c:f4:92:c6:77:39:11:68:eb:b9:bb:5c:
         68:93:f7:8f:a1:7b:7d:2b:83:1b:a4:0b:88:5d:ac:02:43:aa:
         fd:88:c7:13:48:7d:b6:0b:e8:9f:11:70:c2:07:33:b0:7c:73:
         ff:7b:9d:82:0a:a7:36:8d:51:8c:de:d3:8a:fa:2a:b7:dd:ba:
         d0:ae:4e:8a:8f:a0:c5:d6:f3:41:51:3c:ba:ce:a2:8b:6c:61:
         d8:c4:ea:ef:af:2d:b1:5e:e0:c7:7a:b4:2d:c3:da:96:ca:35:
         d3:7b:6f:83:bd:3c:3d:2d:99:f9:ec:cd:46:c7:2a:75:b0:79:
         52:c4:7a:e6:c5:32:ba:83:52:34:8c:79:4b:c2:0d:05:7e:69:
         ae:8e:a0:f8:40:cf:88:04:62:e0:a7:e4:3e:b1:c1:e0:46:10:
         a7:68:d8:78:aa:a2:bd:5f:e1:c1:1e:ce:65:09:c5:1b:d7:bb:
         25:68:c9:b3:3b:30:a9:6a:93:45:4d:c6:4e:bb:55:96:29:a5:
         fc:2a:e2:39:e5:c6:23:a6:05:b0:14:4e:a7:b9:20:65:ad:14:
         c9:df:17:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:33:08 2025 by rpki-client