Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
File:                     fqxm_CIxyyZW51M1of1mdx9Xqcw.mft (raw, json)
Hash identifier:          xlDUvXUeoGUSFHS3Y/OwnbDgs9MfGkDFXCzZHLjnFGo=
Subject key identifier:   B7:8E:BE:55:A2:31:51:96:8A:B1:0F:03:7F:67:8B:DE:D0:BA:2B:A1
Authority key identifier: 7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
Certificate issuer:       /CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Certificate serial:       01974EC569A5EA545C73D0285BEB1A910A93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
Manifest number:          0266
Signing time:             Sun 08 Jun 2025 09:00:49 +0000
Manifest this update:     Sun 08 Jun 2025 09:00:49 +0000
Manifest next update:     Mon 09 Jun 2025 09:00:49 +0000
Files and hashes:         1: 82ywaE3JFKydhCtiLwP3kX3cHw4.roa (hash: HxQsJBHdoQOXXDmtm1dRn8dN912bmzuv+pkYTIzf//Q=)
                          2: fqxm_CIxyyZW51M1of1mdx9Xqcw.crl (hash: V5JicyFIB9NQ1LmTQDLANjv7DEN8WUw0GXZ/1Hc5f/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:c5:69:a5:ea:54:5c:73:d0:28:5b:eb:1a:91:0a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
        Validity
            Not Before: Jun  8 09:00:49 2025 GMT
            Not After : Jun  9 09:00:49 2025 GMT
        Subject: CN=b78ebe55a23151968ab10f037f678bded0ba2ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:19:1c:f3:f2:6c:ed:88:31:21:c4:0c:8d:18:
                    cf:0a:60:de:0d:13:af:62:ef:0f:7d:22:b8:75:00:
                    7a:0f:58:60:2d:4d:4d:eb:d0:2c:22:84:53:4f:4f:
                    63:24:03:13:9f:a4:0e:43:71:a2:f1:de:bc:30:75:
                    45:fc:0e:98:f5:7a:4e:cf:39:dc:eb:8a:2c:f2:a0:
                    3d:bf:9f:52:a3:b9:a6:b6:ef:5b:0e:b2:29:a2:15:
                    cc:5e:65:5d:ba:5a:d2:05:90:1b:f5:e5:c8:b4:96:
                    51:66:07:00:47:9e:6c:0c:df:5a:bb:aa:30:3d:27:
                    f1:b4:04:2e:f8:02:77:ae:6e:eb:10:31:fd:67:a9:
                    be:e2:b3:92:de:be:86:18:56:20:a3:70:51:41:9d:
                    3d:a9:28:6d:9f:b8:3f:24:8b:2d:29:52:e3:81:c1:
                    1c:03:39:68:93:7d:bb:5e:28:0e:9b:dc:bb:fe:e8:
                    1b:68:b1:3e:bb:3c:bc:99:1f:aa:2f:91:dd:e9:6f:
                    93:f2:74:f5:59:0c:e0:d9:2d:4c:2b:c1:ef:de:a9:
                    d5:b4:2d:a9:73:54:89:b7:88:85:57:3e:17:53:0a:
                    7b:e6:e8:77:5e:2b:e0:c3:05:22:a7:61:cb:1a:cf:
                    83:9c:c0:25:48:11:02:0a:2b:4f:9b:8c:a0:27:33:
                    fb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8E:BE:55:A2:31:51:96:8A:B1:0F:03:7F:67:8B:DE:D0:BA:2B:A1
            X509v3 Authority Key Identifier:
                keyid:7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:94:56:a0:66:df:1e:e7:30:21:c4:ef:f8:9c:c1:66:5e:af:
         64:9c:6a:8b:59:0d:6e:7b:b3:1b:c1:3a:3e:09:7a:23:6d:f9:
         9a:68:8d:1d:4b:c3:b2:ad:a1:2f:df:60:e0:92:35:b4:06:6f:
         02:a9:f4:a5:4f:ff:1d:b5:6a:20:df:6c:cc:90:24:81:0c:5d:
         b6:bb:df:51:76:87:fd:44:5b:bc:90:89:a2:23:ca:c4:48:e0:
         29:8b:df:ae:3a:eb:c7:bc:37:6d:b0:8c:0e:77:a5:ff:a6:0f:
         f2:54:27:0a:76:e7:cc:9b:9f:51:51:99:37:42:0f:9b:dd:62:
         74:8b:0a:07:a9:24:0d:71:b4:9a:39:e2:26:e3:fe:91:a2:fe:
         27:c8:2e:97:17:fb:5a:14:a9:3f:be:a0:b5:0c:11:10:49:0f:
         86:80:7d:a8:32:4d:b5:96:f8:24:eb:66:e4:59:15:ed:c5:26:
         ad:87:e2:e1:68:f9:f4:74:15:af:df:93:2c:ac:a9:28:0b:5d:
         8d:bc:9a:30:14:a3:23:ce:e6:27:37:9e:cf:69:c0:f7:66:54:
         48:e6:52:c0:62:ba:92:c6:74:bc:60:18:d6:6b:54:6d:fb:c8:
         a9:16:0c:40:80:8f:04:fc:bc:7b:d3:18:11:37:5f:c9:93:6e:
         48:78:87:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:31:45 2025 by rpki-client