Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
File:                     FocxkXFwxLgb7jUdBFXDLLrWOyY.mft (raw, json)
Hash identifier:          ErpgxOqkF4+dh5FEt53rmZoZyRnETzvUBu+JIBy0ZKs=
Subject key identifier:   74:83:F0:80:79:73:B0:EB:C0:30:C9:BD:29:35:9E:7F:90:D2:F9:A1
Authority key identifier: 16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26
Certificate issuer:       /CN=168731917170c4b81bee351d0455c32cbad63b26
Certificate serial:       01974DB282E3DECFC8EF5CE9D61498F46484
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
Manifest number:          0C74
Signing time:             Sun 08 Jun 2025 04:00:33 +0000
Manifest this update:     Sun 08 Jun 2025 04:00:33 +0000
Manifest next update:     Mon 09 Jun 2025 04:00:33 +0000
Files and hashes:         1: FocxkXFwxLgb7jUdBFXDLLrWOyY.crl (hash: RAPaMfIlBSYI8w70E8/Pb1TimGi7QM01UVQHp38nbQE=)
                          2: LhUj1mCFxgCVgOclN_x_EPQsaaM.roa (hash: TwspggDMx9eKuIFMwLPIl1QzksuuFso9cmuKcnRQwY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b2:82:e3:de:cf:c8:ef:5c:e9:d6:14:98:f4:64:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168731917170c4b81bee351d0455c32cbad63b26
        Validity
            Not Before: Jun  8 04:00:33 2025 GMT
            Not After : Jun  9 04:00:33 2025 GMT
        Subject: CN=7483f0807973b0ebc030c9bd29359e7f90d2f9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:44:b0:fb:76:a1:26:62:85:1a:c8:89:76:76:
                    9c:bb:30:82:ab:43:f2:2d:9c:5f:55:b0:4b:ce:ca:
                    1a:37:26:ad:1d:dc:26:e6:1b:9f:67:d8:72:f1:a7:
                    bc:93:20:1c:c2:bd:63:50:c0:bb:45:6f:87:26:26:
                    ea:d9:48:a0:0c:39:3e:d6:ca:d5:ac:8e:a8:f0:c5:
                    76:8c:03:a7:88:56:78:4a:9d:64:f7:cf:ac:e9:d8:
                    68:0b:8c:76:74:86:18:91:56:24:54:54:8d:ee:3e:
                    0f:44:32:1d:f5:bb:d5:a0:44:75:05:b2:97:3e:81:
                    09:cd:f9:79:d1:34:0c:d0:a8:9c:36:19:30:9b:bc:
                    bb:30:06:90:36:14:62:5a:c7:c5:f9:01:d8:67:a4:
                    d6:dc:97:6a:26:e5:98:aa:e5:72:7e:4c:07:16:29:
                    a3:c5:c0:70:66:db:af:13:4c:36:e0:89:cd:a0:91:
                    c7:72:4f:b4:94:87:81:ad:da:bf:e5:9c:0b:b5:84:
                    82:dc:b4:00:a5:9e:96:42:60:bd:60:4c:da:36:2c:
                    a0:e0:f3:fa:06:87:99:fc:21:66:5a:8e:81:3c:e7:
                    e0:81:ac:31:54:b5:b6:0c:4f:43:7a:13:ff:71:89:
                    14:7f:42:98:50:5f:bb:d8:67:03:b7:9c:06:b1:40:
                    92:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:83:F0:80:79:73:B0:EB:C0:30:C9:BD:29:35:9E:7F:90:D2:F9:A1
            X509v3 Authority Key Identifier:
                keyid:16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:9c:41:3b:d8:00:97:7e:94:5f:07:5e:b7:d3:fc:77:e8:9b:
         f0:75:2a:a7:20:70:f5:90:73:fa:f0:f4:db:ac:18:13:96:7c:
         a6:0f:05:a8:48:1b:ab:33:a5:65:85:6c:a3:5b:8d:70:e7:90:
         ae:c0:f5:1b:62:4a:4e:d1:b5:7a:e2:14:63:38:7b:25:0c:e2:
         de:db:7c:cd:f9:cb:75:76:b3:b7:86:d1:ea:3c:ea:be:45:11:
         57:38:f0:42:54:be:c2:0d:9b:36:cc:bb:0b:0c:c7:6b:b7:fb:
         48:7d:ad:d7:52:4f:83:94:0d:c1:0b:88:42:23:d9:2d:06:18:
         70:ce:36:60:57:5f:a4:7f:a5:d6:7a:2f:a8:8d:7a:d3:ca:86:
         d1:59:8f:76:80:ec:26:67:24:a8:ea:f0:39:80:98:08:52:ff:
         b2:47:06:50:fb:43:99:43:c7:9a:7e:c2:6d:8e:5f:b6:e5:c7:
         4b:59:c8:77:ea:aa:9c:bc:0b:30:d7:6a:e7:e7:a6:19:cc:4b:
         85:c0:3d:14:c3:85:2b:be:58:ad:6f:9b:ae:03:0a:79:14:29:
         ad:d9:00:88:94:67:9f:87:a8:19:8a:fb:74:a5:39:ef:a5:4f:
         6e:1c:fe:5a:de:de:e0:2d:a1:c6:af:46:06:33:2a:ec:97:dd:
         64:30:e6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:52:43 2025 by rpki-client