Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
File:                     FmqYZpgAXVfnuS96ONIZu7gP4f8.mft (raw, json)
Hash identifier:          CYzxr/xxdrSFf2bjBQZ6CHe9stPB2SMo4h5C+ksRSbg=
Subject key identifier:   03:3C:0B:F2:CD:DC:21:81:DE:67:6E:5B:E5:33:48:50:F7:F8:92:A4
Authority key identifier: 16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF
Certificate issuer:       /CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
Certificate serial:       01974A7AFA7655CC67347A816E011D4E278C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
Manifest number:          1005
Signing time:             Sat 07 Jun 2025 13:01:02 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:02 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:02 +0000
Files and hashes:         1: FmqYZpgAXVfnuS96ONIZu7gP4f8.crl (hash: 7NUDJZ0GRCz45W7FC2SD+XKFYEpoatB1tpdb4De+dj0=)
                          2: c4nEiNEeJD2vFf8wumBi1yYvs6E.roa (hash: aF0QKy6JcPOas0fgNBBJCKQQxMBB/xZccd3mvICIadY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:fa:76:55:cc:67:34:7a:81:6e:01:1d:4e:27:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
        Validity
            Not Before: Jun  7 13:01:02 2025 GMT
            Not After : Jun  8 13:01:02 2025 GMT
        Subject: CN=033c0bf2cddc2181de676e5be5334850f7f892a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f4:a2:42:6f:61:af:a2:43:cf:29:37:1c:44:
                    9b:b0:40:9d:b5:f5:dd:77:27:74:28:7e:f9:7e:92:
                    a3:f5:69:8d:f8:6e:98:dd:ec:72:4e:cc:3f:5b:4e:
                    ce:60:4b:d1:2e:00:07:15:68:49:c0:b8:47:86:cc:
                    cc:b3:24:aa:41:55:7e:36:5a:92:82:f3:5b:96:54:
                    bd:57:06:41:3f:28:54:a0:d8:02:82:ef:21:bd:c4:
                    d9:e8:e0:2b:70:a0:4a:89:26:a8:5a:cb:22:0d:c5:
                    57:bc:f7:22:65:1d:14:23:44:fd:25:32:69:29:c4:
                    74:2b:d7:20:fc:11:29:a3:82:bd:6f:94:fb:49:16:
                    57:48:9d:77:f2:11:f8:07:43:11:cb:fe:87:25:05:
                    17:fd:dc:1b:31:d2:46:0d:a9:60:86:12:f3:4f:82:
                    b0:96:00:28:58:a5:fa:4d:b7:ee:41:7c:5e:2b:8a:
                    c2:3f:35:89:22:aa:87:eb:5a:26:85:b1:87:5e:e3:
                    49:b1:47:85:c6:a2:a9:32:53:ec:33:f1:6c:d7:70:
                    ed:d9:1d:3f:d2:bd:6c:e3:b4:cc:0c:d7:e1:36:9c:
                    83:10:e4:ff:7e:93:60:53:5e:0c:c3:cd:6a:a0:af:
                    a3:12:7d:28:00:b0:a7:67:7a:60:60:51:07:4d:1c:
                    12:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3C:0B:F2:CD:DC:21:81:DE:67:6E:5B:E5:33:48:50:F7:F8:92:A4
            X509v3 Authority Key Identifier:
                keyid:16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:76:9e:3e:b6:59:08:8c:94:fd:62:a5:9d:70:0d:57:d9:02:
         e2:5c:24:ce:7b:04:1c:29:f9:f2:ef:fb:c8:30:b7:52:64:1f:
         be:fc:7e:f4:07:66:fe:28:aa:2d:d4:73:c7:52:ce:ce:f4:1c:
         78:31:11:34:09:9e:b8:e3:46:85:64:b9:47:0c:00:03:7b:65:
         ce:57:6b:d9:49:c6:f5:b6:fc:7a:4f:ac:8e:74:13:19:79:02:
         c2:95:fa:9b:fb:87:52:bf:6f:71:8a:5f:cd:f9:17:dc:d7:0d:
         64:e4:fe:9d:61:1e:9d:64:5f:5e:7d:a2:b2:dd:e5:f1:d5:3e:
         76:79:a5:54:cf:d3:ce:03:02:de:10:2a:7a:f9:d0:3c:0c:31:
         e0:d8:66:b6:6f:18:10:63:ec:74:e2:c5:5e:1b:f8:1d:5b:4a:
         d3:a5:a2:44:0d:26:15:5e:17:18:51:bd:30:60:c0:14:1b:5f:
         db:61:1f:0f:9b:b9:ae:a0:72:77:15:86:bc:6d:64:cd:67:18:
         6f:46:67:19:61:53:6e:51:01:07:d1:00:83:52:06:6b:0e:0e:
         bf:69:d1:8d:85:07:18:38:ab:c4:f9:56:fb:5e:a9:15:be:ab:
         1b:3a:0a:b0:e2:20:ea:e3:50:04:1b:bd:4c:08:e2:50:e4:3c:
         17:ed:4d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:11:32 2025 by rpki-client