Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
File:                     fySblURiBoP5SziKdVGmimST7RI.mft (raw, json)
Hash identifier:          PbgU4KyPKzh46bLRknksg01g9Q0FguwcXvAESD3A1C0=
Subject key identifier:   A6:E9:D3:1F:7D:5A:10:98:02:CF:2D:59:CB:0E:EC:86:37:E8:0B:B1
Authority key identifier: 7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12
Certificate issuer:       /CN=7f249b9544620683f94b388a7551a68a6493ed12
Certificate serial:       019749D5B83C5D671F980A59AF9671DFA436
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
Manifest number:          01AC
Signing time:             Sat 07 Jun 2025 10:00:32 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:32 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:32 +0000
Files and hashes:         1: fySblURiBoP5SziKdVGmimST7RI.crl (hash: Bbe9vpJ2aGR1DOV3gAatERRD1jckAqeQyCgcpFCM4ZQ=)
                          2: h7ETLfyQmL_b22CUnmqfJbv8XcU.roa (hash: GvscP45iqYd2rs4fdmtdGUU7bJ6EyKUaKDdAzQiywgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:b8:3c:5d:67:1f:98:0a:59:af:96:71:df:a4:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f249b9544620683f94b388a7551a68a6493ed12
        Validity
            Not Before: Jun  7 10:00:32 2025 GMT
            Not After : Jun  8 10:00:32 2025 GMT
        Subject: CN=a6e9d31f7d5a109802cf2d59cb0eec8637e80bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d7:8e:3d:d3:93:3d:2b:d9:15:fc:37:bb:b0:
                    4d:a2:39:34:1a:fd:ff:00:a9:e3:68:8f:f1:9e:e7:
                    e3:e3:a9:b2:63:ae:77:9c:46:ce:10:e3:10:a3:50:
                    13:c5:97:6b:76:3e:ab:b2:00:71:87:d7:f0:6a:a7:
                    4d:b9:2e:a9:4c:4f:4f:0a:69:9f:32:e7:a6:28:fa:
                    17:d2:ad:e0:41:7e:21:42:1b:99:99:82:f2:6f:8d:
                    31:c8:97:58:77:95:24:f4:24:b8:63:84:ce:94:95:
                    a0:a9:e2:5e:fd:ae:9d:5c:3b:dd:09:f4:9c:4e:1f:
                    9d:ff:dd:d1:f7:2d:f4:c2:b6:74:77:3d:ac:24:8a:
                    dd:f5:61:81:6d:cc:da:6c:f6:36:bb:82:db:42:ef:
                    72:16:07:43:96:13:2e:b3:ec:5f:b7:71:e1:3f:2c:
                    57:14:71:13:26:63:9c:51:80:8a:6c:92:cf:63:97:
                    13:c4:d2:e7:0f:bd:15:23:95:de:6d:0c:98:92:89:
                    96:ca:e8:55:e7:d3:b7:4c:ce:42:af:05:a5:f3:8c:
                    72:8a:a1:80:df:3a:ed:ce:eb:ee:43:d7:bf:fe:31:
                    d9:df:39:f2:c6:d6:14:c2:50:b9:37:b1:9c:10:14:
                    b4:df:2b:24:c7:20:b3:57:86:b9:2c:a9:e3:31:17:
                    a7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E9:D3:1F:7D:5A:10:98:02:CF:2D:59:CB:0E:EC:86:37:E8:0B:B1
            X509v3 Authority Key Identifier:
                keyid:7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:24:d4:7a:c9:d4:58:d7:fd:81:6f:92:bf:f7:a2:b6:fc:b9:
         7b:2f:5d:2e:6b:38:3e:a5:b4:0f:99:db:43:af:63:81:b7:79:
         cc:92:1b:42:fb:1d:8a:4f:70:02:1e:59:2b:81:53:e1:ec:de:
         5a:6c:9f:0d:7a:4c:6c:9d:ab:65:8e:da:02:d2:e5:35:6e:a7:
         a6:69:47:f4:e0:17:7e:ca:8b:2c:0c:a3:2a:26:54:d8:eb:ee:
         91:b8:74:a7:dd:0d:cf:fb:50:be:79:5d:43:c4:c5:9d:d8:c8:
         1e:e9:1a:11:18:47:6c:98:d1:05:5d:6d:e4:3b:39:1d:ae:e6:
         64:72:de:b0:30:57:0f:8b:e9:0e:25:77:69:a9:e2:bf:e8:19:
         05:e3:a3:20:d7:21:58:16:5b:cb:e3:e6:4f:25:cc:41:54:e5:
         9d:61:37:f0:df:dd:2e:66:7f:40:07:2f:ec:5a:69:68:ec:f7:
         49:91:7c:e1:ab:3f:fc:fe:a1:cf:78:c0:86:bd:14:c1:89:b8:
         50:30:f8:eb:db:f7:09:9a:b4:6a:b2:b5:d3:63:6f:ef:19:2a:
         80:fa:06:0e:5a:bd:26:91:c1:be:75:78:b8:9c:61:13:45:3e:
         f7:aa:56:39:40:50:04:75:4a:fa:ec:b6:b3:2a:52:0f:7b:de:
         e3:b9:f1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:49:59 2025 by rpki-client