Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
File:                     Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft (raw, json)
Hash identifier:          vFfrjlBFn8CoYyzqDhMbUUxbWconmWMYnEdu85aqW38=
Subject key identifier:   18:80:56:69:71:90:CC:30:3D:97:23:18:35:F8:A4:9D:9B:48:6A:D0
Authority key identifier: 17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
Certificate issuer:       /CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Certificate serial:       019748C3643C0D24A0BC48D9D9A875208EFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
Manifest number:          0E4B
Signing time:             Sat 07 Jun 2025 05:00:54 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:54 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:54 +0000
Files and hashes:         1: 1-7k1BSVErLFvFpR9s4khkCRgcx8.roa (hash: OjA0u5BcNw+jfDFu4scr2j7odbJKWBNkQN28Ky+RjrQ=)
                          2: Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl (hash: uebnNEsmleI/hYAsadcqPdoG3TXheZVL/IluVzIYUzU=)
                          3: ZYpOnf_RMjUdQRpY5DSmoRhYWXo.roa (hash: 1MZ14FF0b6BfjlsKqzDJT2k9XMlDgyRHFf/YVDEx3LU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:64:3c:0d:24:a0:bc:48:d9:d9:a8:75:20:8e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1716ebd40a744a0c84f2535457047808ad2f17c4
        Validity
            Not Before: Jun  7 05:00:54 2025 GMT
            Not After : Jun  8 05:00:54 2025 GMT
        Subject: CN=188056697190cc303d97231835f8a49d9b486ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0d:69:0f:84:0d:4d:7a:08:f4:c1:3e:b9:50:
                    0e:eb:d3:88:a2:10:0a:51:ff:87:9c:fb:d4:18:fa:
                    fc:ba:f1:29:30:79:e5:e2:e0:ed:88:dc:0d:90:d7:
                    2a:49:52:ff:7e:d1:a6:00:93:a7:58:62:ed:c2:55:
                    91:64:a7:6c:32:29:38:8f:f6:f5:6b:0f:20:2d:a3:
                    32:55:62:a3:01:c7:c0:31:51:ec:a6:fc:7a:a7:b0:
                    d6:e6:84:6b:d6:fa:db:00:0f:bd:9c:16:91:4a:8f:
                    ab:e4:20:5a:be:6f:9f:02:0f:19:ea:e5:e4:26:35:
                    a5:11:17:69:65:58:ca:4a:3d:82:a0:32:74:b6:91:
                    d2:4f:49:65:df:f8:18:10:1a:89:44:38:30:45:a3:
                    04:73:81:e4:fa:4f:1c:73:c7:a9:82:7d:3b:52:a1:
                    c7:25:cd:26:58:ee:d7:48:9c:87:2c:4f:cd:6a:e3:
                    20:02:65:c5:4b:99:e9:a9:36:47:65:07:e2:42:53:
                    6c:2b:25:bd:71:85:a1:b2:53:f6:57:49:64:ac:63:
                    1d:6c:53:fa:d5:2e:ec:c6:68:ee:31:b1:d0:5f:bd:
                    96:c7:6c:47:6a:39:c4:c3:4b:ff:5a:b2:5f:a3:0d:
                    80:83:4d:7e:9c:30:d5:1d:0e:fa:4b:21:e0:01:a7:
                    27:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:80:56:69:71:90:CC:30:3D:97:23:18:35:F8:A4:9D:9B:48:6A:D0
            X509v3 Authority Key Identifier:
                keyid:17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:4b:0d:2f:a0:01:59:70:b0:10:5e:20:08:06:05:97:27:55:
         2d:8d:27:9b:0d:24:6a:85:ac:a5:df:07:02:70:ac:1a:6b:6b:
         9b:3b:61:b3:5d:dc:7e:02:47:dd:4b:b4:da:38:a3:07:77:1d:
         d1:ac:4f:09:f3:41:51:09:cc:ec:67:1a:ea:53:72:bf:92:e1:
         7b:1f:df:1a:7e:b2:8c:fb:1b:a7:40:bf:93:5b:13:fd:c7:0f:
         66:1e:70:1d:96:20:1b:86:05:c0:e4:0a:e4:d3:e5:c0:45:e1:
         5e:02:00:07:1d:a5:3c:bd:0a:fc:e6:36:81:85:02:e3:a6:d3:
         32:ff:ae:7c:52:5a:b2:3b:f5:b5:d7:70:b1:a8:e8:9d:82:e1:
         9d:14:9c:41:26:40:ed:f1:b5:b1:f4:a6:a0:86:73:4c:0c:dc:
         b9:54:a2:10:36:8d:cc:7f:4b:39:d7:69:e4:a0:00:b7:e1:72:
         35:95:eb:d3:3a:ff:42:b1:f7:7c:4e:59:9c:21:5e:08:b2:36:
         b4:8f:df:42:d7:52:b9:56:e4:0d:83:51:13:c5:fc:c3:9f:90:
         50:b8:67:54:5f:cb:ae:06:03:30:08:40:63:45:23:60:e9:7c:
         40:c6:cd:9a:6f:b1:cc:35:0a:e4:d8:41:1b:be:3f:05:85:ff:
         59:c4:88:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:30:24 2025 by rpki-client