Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
File:                     Fo8OK6LQk0M6S2EpVye5m7FF93s.mft (raw, json)
Hash identifier:          zH17eklkyFhW/QKfzIjoR1glJKuPRXCb5HU97A04S5E=
Subject key identifier:   25:AD:EF:E7:78:8B:DC:81:E1:6B:AF:5D:72:57:EB:73:19:46:C7:9B
Authority key identifier: 16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B
Certificate issuer:       /CN=168f0e2ba2d093433a4b61295727b99bb145f77b
Certificate serial:       019745F8E4458DF275AFB0A3A07F8E53835E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
Manifest number:          04FB
Signing time:             Fri 06 Jun 2025 16:00:28 +0000
Manifest this update:     Fri 06 Jun 2025 16:00:28 +0000
Manifest next update:     Sat 07 Jun 2025 16:00:28 +0000
Files and hashes:         1: 41Kf3SCwnWPoeI3gwt6SuiM3U8E.roa (hash: u7Hgq9t6aNSvvpN1ap2hOUlss087XACBIUhudiFtYGg=)
                          2: Fo8OK6LQk0M6S2EpVye5m7FF93s.crl (hash: jk8OHQ9AICtyzKUq/juzV6dUC+6QG3L1vPXPPTjhHsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:f8:e4:45:8d:f2:75:af:b0:a3:a0:7f:8e:53:83:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168f0e2ba2d093433a4b61295727b99bb145f77b
        Validity
            Not Before: Jun  6 16:00:28 2025 GMT
            Not After : Jun  7 16:00:28 2025 GMT
        Subject: CN=25adefe7788bdc81e16baf5d7257eb731946c79b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2d:3f:1e:c2:d4:df:94:66:2f:e7:b1:78:fb:
                    1e:11:6e:10:0c:fb:9a:e6:c8:ed:62:fc:a8:6f:67:
                    51:7c:39:dc:dc:53:13:b5:4d:7b:bb:34:31:a8:dd:
                    2b:86:4f:55:96:0b:3e:8d:de:a9:e9:2f:f2:31:31:
                    33:11:23:89:19:2f:0a:ef:55:ac:c8:46:21:b0:d9:
                    fa:f6:41:5b:18:2b:60:e3:f2:d4:68:f1:0c:0c:45:
                    67:77:0c:a7:3f:cb:66:f0:a1:60:9a:e5:d2:df:1f:
                    fc:6e:64:40:39:ae:de:d7:34:62:c3:3b:d1:fb:9a:
                    39:2c:07:0d:54:4b:de:11:f0:bd:4a:97:a7:65:f6:
                    d7:b4:94:ae:a1:0d:02:b7:39:2f:69:c1:39:08:1c:
                    b1:18:c4:85:a2:fc:76:26:5b:22:da:8c:69:e6:40:
                    9d:92:83:b9:8d:bf:62:8a:e7:85:3f:ab:e7:3f:d0:
                    e8:06:6b:d2:f9:f5:c6:34:bb:9f:ce:aa:30:d4:45:
                    d6:e5:88:6e:6f:65:25:91:4c:9d:82:d6:55:fa:54:
                    b6:1f:17:b1:90:15:a4:98:29:f2:d8:6c:a7:90:4e:
                    18:cc:ae:91:5f:7d:78:6d:35:28:32:57:60:97:40:
                    28:bd:20:52:ad:dd:8c:00:e2:ef:e8:17:ad:a2:65:
                    fb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AD:EF:E7:78:8B:DC:81:E1:6B:AF:5D:72:57:EB:73:19:46:C7:9B
            X509v3 Authority Key Identifier:
                keyid:16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:73:19:7a:1d:7b:f5:e4:b2:24:12:2c:67:1f:8d:41:ef:42:
         50:1b:00:c2:66:2d:d9:75:7d:70:5d:8f:4a:0c:bd:f8:a3:31:
         36:a7:ad:31:d7:ab:2d:2b:f1:c9:e3:11:35:12:11:ed:25:06:
         40:4f:04:6e:39:dd:72:50:28:81:73:01:ad:b7:64:6f:98:82:
         23:1c:e8:21:65:78:d4:f4:f0:ad:dd:59:62:4c:53:b9:89:db:
         ba:af:83:c7:c6:d4:ad:d1:d7:80:9a:4f:05:3d:da:66:4f:6e:
         61:1f:da:f2:eb:06:72:b9:cb:da:be:bd:51:04:f6:94:f4:98:
         fe:eb:c1:a3:f3:c6:9a:78:2f:53:2f:29:42:3a:12:3c:43:d2:
         86:14:1c:f0:bc:71:be:ff:61:72:a5:ff:33:1f:b4:e3:c9:0e:
         c0:81:f8:fa:e6:3d:69:4e:4f:08:3b:f6:48:68:4b:40:f5:4a:
         19:69:ba:50:c1:dc:d0:f3:f8:74:82:dd:88:3e:38:15:2b:45:
         4a:ca:a0:b4:4f:e2:88:5f:b3:ee:80:40:c9:ff:bd:d0:59:55:
         49:56:d1:bb:ef:41:d0:11:43:3e:aa:60:6e:e3:63:38:23:9e:
         51:41:cf:04:8a:4b:e1:e6:6d:7b:98:f9:41:ab:9d:a3:e6:6f:
         8f:a6:12:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:29 2025 by rpki-client