Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
File:                     Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft (raw, json)
Hash identifier:          7xeiC2DEMcRQjNplNqBNVA7G02kPv2mFjqXUcjgId6k=
Subject key identifier:   7B:FE:3C:F8:AB:B2:4B:DE:4D:49:3D:D8:09:3F:3D:5F:9B:25:2F:26
Authority key identifier: 15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C
Certificate issuer:       /CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
Certificate serial:       01974D7BF67D6C5A6952559CC3A5CB23DC18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
Manifest number:          029F
Signing time:             Sun 08 Jun 2025 03:00:59 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:59 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:59 +0000
Files and hashes:         1: Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl (hash: RE+e3jlKi+HVKabgZEu3Z+bkOnZgOQyZTtC/FJTOsUA=)
                          2: QXxZoEDTfmfi2igFXO5o23qZxBE.roa (hash: rgCm3B0IpeTPYIjtwWWmsRXdZPZn8nOJAF/gu4jmo9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:f6:7d:6c:5a:69:52:55:9c:c3:a5:cb:23:dc:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
        Validity
            Not Before: Jun  8 03:00:59 2025 GMT
            Not After : Jun  9 03:00:59 2025 GMT
        Subject: CN=7bfe3cf8abb24bde4d493dd8093f3d5f9b252f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5d:4f:76:d4:7b:7e:45:5a:55:98:c1:5c:ca:
                    d1:99:d7:71:fa:b2:3e:33:61:5a:b1:38:c9:f9:fc:
                    47:12:12:52:f0:f4:a9:9b:8f:ef:ec:7e:2f:27:51:
                    8d:87:74:06:59:69:f1:3c:bf:e4:dd:8a:28:db:40:
                    13:45:a9:74:1b:31:f1:7a:d1:23:b1:b3:2a:fd:1e:
                    6a:f5:ba:b7:4e:71:3d:97:eb:d6:ad:1c:bd:c0:75:
                    ba:97:2d:39:f5:11:78:4a:04:33:09:11:17:0f:bb:
                    23:55:37:f3:93:e6:a3:d2:88:50:ee:1b:bd:f6:8d:
                    35:05:af:1e:64:f7:ef:34:2b:39:17:cc:a3:54:a8:
                    e2:20:91:11:91:96:c7:c1:0c:21:fe:ef:a9:11:73:
                    1a:cf:eb:dd:71:42:bf:58:6b:80:2d:26:f3:54:d3:
                    66:57:98:01:55:d8:4d:05:3d:b2:73:0a:6f:8b:af:
                    83:d4:91:ae:27:f4:f8:ea:18:2d:5a:54:ac:7b:fa:
                    97:b5:c6:86:79:61:ab:f7:0b:53:12:d6:c9:50:a8:
                    c8:fd:ca:fa:c8:9b:b6:ed:2d:a0:95:1c:3f:c6:2a:
                    21:d3:c2:c8:d2:0b:cb:f0:2b:f3:1b:98:65:41:45:
                    f9:94:28:d2:6e:f3:e1:f8:9d:89:47:c5:81:9b:c2:
                    4e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FE:3C:F8:AB:B2:4B:DE:4D:49:3D:D8:09:3F:3D:5F:9B:25:2F:26
            X509v3 Authority Key Identifier:
                keyid:15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ac:45:0b:54:50:d1:97:ab:98:73:65:6a:51:c5:36:97:29:
         82:ce:1f:d9:ee:bf:bb:89:13:ca:58:f1:46:06:05:15:bf:92:
         1b:d6:3f:d3:76:32:68:aa:cc:91:63:1e:de:d5:78:1e:c3:35:
         20:c1:09:ce:67:34:db:21:ed:aa:83:26:e1:fc:1d:2b:39:31:
         23:5c:90:29:42:60:7f:b3:f5:ac:b1:0d:f9:2e:84:1b:50:a1:
         1a:08:4a:56:48:7d:70:01:67:8a:a7:56:85:76:cc:0c:f7:84:
         ca:36:37:64:88:c4:47:68:d7:65:b1:2a:48:b0:50:ee:06:2a:
         83:85:a0:6f:c5:f0:39:56:2a:ca:55:d9:0b:bc:21:5e:b4:b3:
         fc:3b:7b:cf:c9:72:65:f5:1f:de:e0:c3:a7:fe:8a:05:f0:4b:
         bb:c8:6c:ce:fb:55:d3:78:80:9a:a7:8c:0a:0b:e3:af:b3:37:
         d0:e5:b9:41:80:2c:fc:ef:c2:8d:51:cb:6a:ab:3b:c9:22:a7:
         40:50:47:1c:13:04:65:33:47:53:01:9a:87:be:9c:a3:76:00:
         d9:1b:3b:ca:3f:fd:1e:4f:a3:bb:16:d3:10:be:50:dd:fd:45:
         b2:d2:9e:93:f0:34:de:ca:6b:97:01:b2:34:72:4d:a0:51:ac:
         c6:05:84:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:38:39 2025 by rpki-client