Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
File:                     fWNA43zPwSrrqsKl8z1F6gqIeoo.mft (raw, json)
Hash identifier:          uu9yOkD+HdCfxCZLqE4sT7oRsQAcSZYPbwubIFnOrTE=
Subject key identifier:   1B:41:6C:02:D2:C2:B0:B0:52:47:7A:5C:4B:05:C7:2A:BD:EF:16:1D
Authority key identifier: 7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A
Certificate issuer:       /CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a
Certificate serial:       019767A9487FAB17B896E629DCABEEA8B4E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
Manifest number:          0FD5
Signing time:             Fri 13 Jun 2025 05:00:36 +0000
Manifest this update:     Fri 13 Jun 2025 05:00:36 +0000
Manifest next update:     Sat 14 Jun 2025 05:00:36 +0000
Files and hashes:         1: fWNA43zPwSrrqsKl8z1F6gqIeoo.crl (hash: ibIvdwb80dvfaUn9doNzjBCgWO2cOxjXZhYxWjttZ5M=)
                          2: jRJwX_ZKuADln4pES5WgoVS__88.roa (hash: K3aJVjlqhUCHgSM5vEOmY3eFV+XqReoMzhLc+qeCd0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:67:a9:48:7f:ab:17:b8:96:e6:29:dc:ab:ee:a8:b4:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a
        Validity
            Not Before: Jun 13 05:00:36 2025 GMT
            Not After : Jun 14 05:00:36 2025 GMT
        Subject: CN=1b416c02d2c2b0b052477a5c4b05c72abdef161d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:54:eb:8e:f4:1c:49:cb:25:4d:80:0d:41:43:
                    e6:2e:47:b1:37:7b:0f:4c:61:26:8f:1b:b6:b4:ab:
                    9d:1c:d4:30:3d:30:cf:53:73:67:c1:3d:35:80:d8:
                    7e:3e:66:01:ff:63:06:8e:e1:66:a5:b4:07:ec:74:
                    13:cc:65:69:6f:99:66:4f:c0:8f:5d:55:7d:54:60:
                    bc:e0:26:44:87:07:21:cd:07:ae:93:88:2a:54:f9:
                    b9:58:06:b1:51:c7:65:07:8a:54:3d:db:15:7c:6e:
                    76:92:b6:39:6e:74:b9:a2:87:f4:9d:fa:41:fb:95:
                    c5:44:80:94:71:be:7e:f7:5f:d5:d9:8b:76:5d:03:
                    ac:08:52:86:e6:1f:71:06:07:92:1e:b2:dd:3b:ce:
                    e4:c6:77:eb:21:d9:c9:6b:09:19:a9:38:a1:b2:c2:
                    56:1e:8b:a9:71:b9:ec:17:b4:92:5d:7e:bb:5a:38:
                    26:44:10:08:93:12:f4:fe:0d:0d:83:80:66:6c:e7:
                    35:43:c5:da:fc:71:5f:ad:0d:39:06:f1:ff:1e:b2:
                    64:78:8f:27:34:a0:5e:02:3f:96:eb:04:6f:07:a9:
                    04:88:45:f2:f3:bc:19:bf:11:10:1b:b1:b9:5a:51:
                    a4:e9:7e:f8:41:73:64:8e:9b:7e:2b:8a:33:bd:3d:
                    ce:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:41:6C:02:D2:C2:B0:B0:52:47:7A:5C:4B:05:C7:2A:BD:EF:16:1D
            X509v3 Authority Key Identifier:
                keyid:7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ce:28:8d:22:57:b7:96:44:d3:ce:1c:ed:ef:dc:3e:da:44:
         9f:18:98:31:51:e6:db:23:ee:35:f1:7e:b3:cd:51:3b:73:4a:
         89:d4:30:f3:d8:c7:97:c8:01:e4:9a:07:4f:be:12:fa:ad:ee:
         f7:32:c8:62:14:68:4d:58:e1:1b:db:bc:31:0e:b7:93:07:55:
         dc:44:e7:1a:e0:fb:e7:ef:54:17:3b:8f:05:56:fd:7a:5f:ea:
         56:c4:c4:f8:a0:84:8d:ef:6b:39:97:00:45:85:bf:ae:75:48:
         88:68:d6:80:b6:04:77:7c:88:44:dc:4d:f0:fd:96:6a:bf:94:
         da:01:8c:07:71:a3:b4:b2:2f:36:1e:52:74:f2:09:16:ba:96:
         9d:fc:c1:0d:e0:15:18:50:be:cf:33:d5:70:e7:8c:7a:45:9e:
         9c:65:d1:5c:ab:ae:7b:54:33:79:fd:ad:14:ea:5a:65:93:64:
         a7:10:cc:f6:01:66:06:a6:b7:a2:b3:1f:d7:c1:ef:20:05:8f:
         8f:34:ad:1d:46:c2:01:a1:40:27:d2:aa:e2:6c:ae:27:4e:fe:
         59:ac:01:2e:9b:0c:d9:14:ee:eb:bb:55:f3:18:34:cc:e8:d1:
         e1:d9:dd:fe:76:09:6c:68:68:a6:de:14:90:80:7d:db:3f:52:
         c1:65:22:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 07:58:59 2025 by rpki-client