Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
File:                     FjvL2byThJp__fcpTC3p37Hq8oM.mft (raw, json)
Hash identifier:          l1ysjGxcx/blhq/Fy3bwwIXD+ZWSgmunhqL+vwTaQUg=
Subject key identifier:   EE:94:B0:92:41:18:F2:0B:AA:7B:0B:32:32:45:B9:62:87:05:4A:1E
Authority key identifier: 16:3B:CB:D9:BC:93:84:9A:7F:FD:F7:29:4C:2D:E9:DF:B1:EA:F2:83
Certificate issuer:       /CN=163bcbd9bc93849a7ffdf7294c2de9dfb1eaf283
Certificate serial:       019642C342226F1F9A8C4F6CE72D990AB481
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
Manifest number:          06C2
Signing time:             Thu 17 Apr 2025 08:00:14 +0000
Manifest this update:     Thu 17 Apr 2025 08:00:14 +0000
Manifest next update:     Fri 18 Apr 2025 08:00:14 +0000
Files and hashes:         1: 3UNyKDhAIctkIaiCHfw-i8AjC60.roa (hash: RbaiVZW2VnfBiQ5GEAYbSY+TEp7BHi5lhZORNmt7Iwo=)
                          2: FjvL2byThJp__fcpTC3p37Hq8oM.crl (hash: zjrq5nFcRaVbOXW0qXvRu1wx9RLNn99XzSDPcpLZxrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:42:c3:42:22:6f:1f:9a:8c:4f:6c:e7:2d:99:0a:b4:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163bcbd9bc93849a7ffdf7294c2de9dfb1eaf283
        Validity
            Not Before: Apr 17 08:00:14 2025 GMT
            Not After : Apr 18 08:00:14 2025 GMT
        Subject: CN=ee94b0924118f20baa7b0b323245b96287054a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:7f:84:4e:5e:5e:6b:1b:d0:5c:fc:84:27:
                    25:6b:ec:00:f0:df:65:94:ee:04:2a:1d:37:13:c2:
                    09:d5:61:93:ef:e9:65:2d:96:ed:95:36:f0:8b:7f:
                    2c:91:1e:7d:d3:91:97:75:53:02:37:04:53:8b:a2:
                    1e:22:97:f0:a3:56:66:7d:e3:a8:6d:a5:c2:10:80:
                    cd:d7:af:d4:23:06:8a:fe:55:b7:ad:5f:28:da:5b:
                    c2:33:83:6b:ee:b7:be:42:da:de:49:ff:65:26:e7:
                    19:21:86:33:c0:d2:cd:12:b8:19:f0:35:bd:08:d0:
                    f6:d2:06:bf:18:45:1b:54:b7:b8:f8:e2:b1:59:eb:
                    54:f6:be:fd:fc:26:e3:3d:02:66:18:24:62:b3:a7:
                    d4:36:c3:19:e4:d8:13:46:0f:ee:12:1c:50:51:58:
                    a3:de:08:db:39:a1:0d:11:68:dd:85:b7:e0:f2:08:
                    2d:7d:e0:29:38:b5:b2:8c:22:d1:86:5c:c5:65:f3:
                    2d:7e:a4:bd:56:3a:08:18:0c:5c:55:9e:09:94:53:
                    9b:5f:e9:eb:b6:cc:b1:7c:07:da:17:7f:5e:cf:50:
                    da:f1:56:63:17:85:7e:ce:e7:c4:9b:e1:48:3a:bc:
                    42:d4:85:30:68:38:39:17:d3:06:aa:f3:3f:a8:53:
                    f6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:94:B0:92:41:18:F2:0B:AA:7B:0B:32:32:45:B9:62:87:05:4A:1E
            X509v3 Authority Key Identifier:
                keyid:16:3B:CB:D9:BC:93:84:9A:7F:FD:F7:29:4C:2D:E9:DF:B1:EA:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:25:43:50:63:96:9c:56:4b:62:58:f8:8f:9b:fb:d8:13:ea:
         4b:fd:c6:64:27:9c:53:30:a9:17:be:e2:d8:02:14:40:97:de:
         fc:b8:be:dd:85:59:51:21:87:0b:13:21:99:fb:c5:29:7c:cc:
         66:3b:9c:42:c9:d2:38:0e:f9:d3:72:f4:0e:98:b5:e6:60:7f:
         c4:4b:d3:b3:2f:03:31:1a:3b:31:fe:b5:cb:45:16:5f:45:eb:
         63:ec:eb:6a:6e:41:f3:b5:c7:93:42:a0:80:c4:c0:bf:91:b9:
         5e:aa:5d:c0:ba:22:79:58:4d:f3:7e:6d:dd:fe:5d:ff:c8:65:
         30:4f:d8:57:65:00:31:a3:1b:4b:44:20:d6:b2:89:ae:9f:32:
         cf:11:75:75:27:41:23:5e:38:34:47:1e:da:5d:79:6a:d9:f5:
         63:4a:1b:1e:da:08:11:2a:56:bf:64:d1:fe:a0:fd:a6:ef:1e:
         ba:9a:75:0d:25:c0:8f:6b:13:5c:a9:d8:63:f7:42:0e:70:0d:
         53:7e:b4:e0:92:24:e0:22:12:2a:a2:4a:01:fd:9c:96:7a:5a:
         fd:bc:f5:fc:8b:ad:5b:58:5e:bb:7c:00:14:e2:1a:f5:17:a8:
         81:f6:a7:da:c2:cf:b3:47:5b:45:59:03:e5:df:75:9a:2c:98:
         3c:af:ab:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:29:58 2025 by rpki-client