Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
File:                     FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json)
Hash identifier:          fTIgxT2aoAxtmiGNnTN+i9RaywV9ru4gK2Z5PVJ0IH0=
Subject key identifier:   20:1F:4E:25:06:8A:BD:33:62:A7:5A:53:83:9E:16:9E:C3:04:55:1B
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Certificate issuer:       /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial:       01976DABD83B89378FE6AE75E9CDB75259B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
Manifest number:          0EA5
Signing time:             Sat 14 Jun 2025 09:01:07 +0000
Manifest this update:     Sat 14 Jun 2025 09:01:07 +0000
Manifest next update:     Sun 15 Jun 2025 09:01:07 +0000
Files and hashes:         1: ECVhbk7HslDK7Yab6tRyfcUTM-w.roa (hash: Zu9vU6DdogZHy9494u0UUYh7x1SUMPG2Ju9mrOac5EY=)
                          2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: PvbSQf0/lv9pwK3BX3e+3khhCWbirXjRyzJtSs6+eGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:d8:3b:89:37:8f:e6:ae:75:e9:cd:b7:52:59:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
        Validity
            Not Before: Jun 14 09:01:07 2025 GMT
            Not After : Jun 15 09:01:07 2025 GMT
        Subject: CN=201f4e25068abd3362a75a53839e169ec304551b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c8:1f:be:fc:eb:2b:c2:40:14:82:1f:dd:97:
                    13:8d:7e:2f:d5:55:f9:41:48:17:a0:38:54:e8:2a:
                    06:ed:d4:3f:5f:b3:66:f8:22:ed:75:86:2e:db:6a:
                    d7:19:9b:7e:c7:f1:3f:1e:b6:21:76:24:a1:2e:0e:
                    89:5a:1d:64:4d:18:5e:f4:c3:2d:31:35:ce:99:5a:
                    25:0a:86:19:08:92:b9:71:e7:ec:a6:77:7c:7f:90:
                    8f:47:1d:b8:98:66:39:a3:99:73:cf:8f:a3:a4:7e:
                    76:d8:e8:bd:c1:2a:96:2c:f3:4c:30:fb:47:65:f8:
                    cd:94:03:2f:b3:a9:e6:0a:5a:02:e3:5b:55:16:ea:
                    8e:ba:a4:9b:37:43:ca:14:63:2b:03:f2:1f:30:df:
                    55:be:92:14:4b:0d:be:d9:8c:c6:f4:d1:e4:6d:51:
                    f4:59:ba:1b:9f:5f:fb:14:fe:f8:d7:8b:a5:03:85:
                    65:64:04:33:d1:b4:af:b3:4c:d0:69:c3:06:28:2a:
                    29:b5:63:d7:b8:20:60:04:b0:71:d1:f3:d6:77:fa:
                    77:8f:df:80:57:df:17:57:f5:c1:3e:33:9c:2e:67:
                    47:94:e6:51:4a:9e:8f:69:37:c0:b9:6b:78:53:5a:
                    9d:ad:c5:7e:45:2b:4c:89:f7:01:29:40:46:26:76:
                    b4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1F:4E:25:06:8A:BD:33:62:A7:5A:53:83:9E:16:9E:C3:04:55:1B
            X509v3 Authority Key Identifier:
                keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:70:fb:d4:d4:b0:11:26:ba:66:d2:26:bf:78:db:60:36:90:
         b1:0f:79:9b:62:5e:d0:ba:d1:22:88:52:a5:88:b8:f0:f8:34:
         ef:35:f5:7d:3d:84:ed:6d:f6:a4:8a:1b:dd:44:2a:47:65:1d:
         a2:51:3a:48:9c:03:6b:d9:32:d5:c2:d2:64:62:bc:fb:9a:24:
         ee:1f:ed:af:e1:85:f1:d9:3b:2b:07:2c:b8:bb:07:c3:db:89:
         ce:11:12:15:e2:24:a8:6a:65:10:4c:3e:86:b4:ba:18:71:de:
         05:53:6f:9d:e5:09:a6:e7:30:3f:84:45:4c:9a:a1:fa:f1:84:
         04:12:39:a0:4e:55:5a:99:1b:21:df:ad:e4:6d:09:ba:f1:f4:
         f7:56:25:1e:37:ab:da:82:67:2f:fe:ee:f2:fa:28:84:01:a1:
         cb:0f:49:48:94:3a:fe:49:b6:f1:98:df:1e:77:1e:ca:c7:8c:
         8c:d3:6f:10:ad:50:2b:54:53:41:98:40:f2:8c:4c:e8:82:19:
         60:49:91:c1:7c:76:d5:a4:c9:5a:67:73:33:a5:63:91:ef:c3:
         c0:45:cb:52:38:3f:52:c8:d3:4a:ba:0a:32:04:ba:76:00:2a:
         3d:8b:0d:0b:b0:d6:ad:46:da:d8:9f:09:c9:86:fc:18:72:4d:
         19:0f:6c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:37:42 2025 by rpki-client