Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
File:                     fWNA43zPwSrrqsKl8z1F6gqIeoo.mft (raw, json)
Hash identifier:          tgPOJTAM4xMOs6nhOo6yGmIvD1wY5GKQP3et3rtfc8M=
Subject key identifier:   92:2C:FC:69:72:D6:26:C4:19:91:0A:86:12:14:A1:B7:79:D0:94:79
Authority key identifier: 7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A
Certificate issuer:       /CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a
Certificate serial:       019761DE274A572B71B05720EFB19B61C601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
Manifest number:          0FD2
Signing time:             Thu 12 Jun 2025 02:00:38 +0000
Manifest this update:     Thu 12 Jun 2025 02:00:38 +0000
Manifest next update:     Fri 13 Jun 2025 02:00:38 +0000
Files and hashes:         1: fWNA43zPwSrrqsKl8z1F6gqIeoo.crl (hash: TLejyQBH9yIhupid6rdHbZVJGuw4PnPto2OyrKUYLXg=)
                          2: jRJwX_ZKuADln4pES5WgoVS__88.roa (hash: K3aJVjlqhUCHgSM5vEOmY3eFV+XqReoMzhLc+qeCd0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 02:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:de:27:4a:57:2b:71:b0:57:20:ef:b1:9b:61:c6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a
        Validity
            Not Before: Jun 12 02:00:38 2025 GMT
            Not After : Jun 13 02:00:38 2025 GMT
        Subject: CN=922cfc6972d626c419910a861214a1b779d09479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:13:3a:8e:b0:91:f7:df:9d:d1:d5:5b:18:3b:
                    3f:3f:2c:92:d2:27:f4:b5:ba:ef:3d:29:c3:d2:98:
                    14:07:b0:04:2b:c7:1c:0d:a5:91:aa:a5:6a:51:0d:
                    e1:6e:53:1c:ac:52:4d:32:c9:4f:33:a7:ab:ff:50:
                    70:3f:04:dc:aa:2a:47:3a:f7:6a:ca:ca:8d:42:65:
                    6e:52:67:91:2f:b2:18:b4:5a:7f:73:0d:80:91:6e:
                    21:c7:53:0b:41:de:ef:dc:93:13:ed:2d:70:06:60:
                    03:f8:46:42:12:6b:69:2b:8c:e1:0b:6d:d0:92:91:
                    08:96:e4:53:f2:c1:86:1c:2f:80:9b:e3:a3:84:94:
                    7d:14:7e:1f:1b:73:a3:6d:52:4e:02:47:38:8f:48:
                    9f:8e:6d:fb:ba:bc:29:d7:61:2c:55:70:f1:74:f5:
                    dd:06:c4:87:91:62:2e:e4:ae:0e:2b:79:60:53:e5:
                    36:33:04:63:4b:1f:62:41:44:4d:1a:6b:4e:74:7e:
                    1b:c0:c0:36:d6:e3:08:51:60:35:df:23:6a:fe:6b:
                    ea:aa:50:61:67:b9:d6:dc:2d:8a:04:dc:a9:e5:7d:
                    85:d1:1a:00:02:23:58:ba:dd:81:62:7e:8e:03:f2:
                    55:45:71:f3:5f:e1:dd:06:42:fc:cb:cd:3c:77:a9:
                    c7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2C:FC:69:72:D6:26:C4:19:91:0A:86:12:14:A1:B7:79:D0:94:79
            X509v3 Authority Key Identifier:
                keyid:7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:8c:38:0b:0c:87:d4:a6:b8:75:72:6e:55:ab:34:77:b2:a3:
         e1:a8:51:a9:70:59:86:1f:71:b1:ab:bd:a7:9f:9d:fd:c1:0f:
         53:50:a2:9b:f6:08:52:9a:4f:b5:e8:a2:97:8f:06:f3:65:74:
         18:4b:28:b6:ec:c2:f4:4a:4a:7f:f0:c1:64:a5:c2:31:a3:e2:
         dd:5e:51:76:b6:0a:37:8b:dc:5c:be:b6:94:b6:e9:12:eb:7a:
         ee:82:78:9b:66:52:e2:51:6f:bc:4e:6d:ef:5f:db:24:9f:45:
         1d:ad:92:4c:a6:b0:03:18:1c:77:c9:bf:50:ff:49:ab:56:5f:
         0a:b0:cc:65:df:2b:1a:74:32:f8:7a:b8:d5:77:9e:bb:15:aa:
         b3:8c:b0:67:fc:34:84:b3:6d:bf:79:12:b3:f8:64:fc:94:c2:
         6e:3b:67:86:90:8c:48:f5:87:f1:2c:b6:3d:5d:98:b5:9c:64:
         de:59:a6:4e:1c:66:fb:6e:f5:20:1e:cd:55:3b:13:44:14:59:
         a4:f7:79:f7:f8:ec:45:5a:bd:91:f3:12:71:45:85:cd:17:03:
         be:ea:0f:d8:3c:7f:2c:73:cf:3d:58:7b:89:da:90:f5:06:02:
         53:2b:ed:73:55:93:cb:25:0a:90:0a:f2:06:60:43:f4:fe:2a:
         34:8d:10:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 12:40:03 2025 by rpki-client