Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft
File:                     FTCm61I5adqSyIRMDftA7YIL1sQ.mft (raw, json)
Hash identifier:          EL30UfpNl0YEyDe0dTJKU1btduE/03oPQQVyF1YHL2w=
Subject key identifier:   23:66:2B:37:C0:CE:30:88:EC:9E:26:C1:3E:8D:6E:21:4D:60:66:8A
Authority key identifier: 15:30:A6:EB:52:39:69:DA:92:C8:84:4C:0D:FB:40:ED:82:0B:D6:C4
Certificate issuer:       /CN=1530a6eb523969da92c8844c0dfb40ed820bd6c4
Certificate serial:       01964D7EB17972313186EF95D687D06B7035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft
Manifest number:          0AF6
Signing time:             Sat 19 Apr 2025 10:01:10 +0000
Manifest this update:     Sat 19 Apr 2025 10:01:10 +0000
Manifest next update:     Sun 20 Apr 2025 10:01:10 +0000
Files and hashes:         1: FTCm61I5adqSyIRMDftA7YIL1sQ.crl (hash: +/TjjSDJ5T6+tkjy17b+nnLU6lellndDRGMBcxTUy0o=)
                          2: b6c5zm72T5u0EfOAbDE3JGGhXtw.roa (hash: OJH5Z8arKXzNL0yoYBrj6T/yS9sFayIfKvyurf8IbEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7e:b1:79:72:31:31:86:ef:95:d6:87:d0:6b:70:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1530a6eb523969da92c8844c0dfb40ed820bd6c4
        Validity
            Not Before: Apr 19 10:01:10 2025 GMT
            Not After : Apr 20 10:01:10 2025 GMT
        Subject: CN=23662b37c0ce3088ec9e26c13e8d6e214d60668a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6b:eb:6e:48:29:41:b1:99:16:bf:6d:df:5e:
                    58:38:97:8f:f3:ca:21:d1:86:fe:cb:ad:27:0c:5e:
                    00:4f:f3:c0:58:51:5c:bc:1d:09:76:df:7d:94:f7:
                    59:42:f2:42:40:64:8d:80:7b:55:22:ce:eb:ef:c1:
                    75:a3:73:ba:89:12:82:e2:f2:c2:18:15:4a:3b:b1:
                    99:43:ca:d1:83:21:e8:04:87:37:5f:ae:b2:c5:45:
                    32:b2:67:65:9b:3d:6c:d2:24:c0:9c:63:9d:db:dc:
                    a0:05:9d:a8:ab:09:9a:dc:c2:65:17:fd:86:bb:26:
                    f8:0e:fa:f0:98:d4:a8:72:f5:4f:f9:65:e8:74:ae:
                    e6:6f:f6:cd:9c:15:f7:27:82:11:d9:bd:84:a0:cf:
                    c3:f4:47:f9:83:fa:e7:1b:d8:66:81:76:51:54:02:
                    a0:14:11:e7:88:b7:ec:7b:61:dc:17:c4:81:b7:01:
                    9f:d2:a6:96:ee:95:ea:ca:64:cc:d5:04:8f:28:96:
                    be:e1:51:38:e7:1d:5e:1e:b4:ff:27:4b:79:4b:88:
                    db:95:ef:ec:a2:d0:d7:cb:ed:db:ef:06:61:0f:95:
                    a0:3d:75:50:ef:9c:2f:75:bd:cd:6f:ac:1d:5a:27:
                    3e:20:61:2e:9b:b8:17:51:7c:a1:b1:91:7a:f7:32:
                    09:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:66:2B:37:C0:CE:30:88:EC:9E:26:C1:3E:8D:6E:21:4D:60:66:8A
            X509v3 Authority Key Identifier:
                keyid:15:30:A6:EB:52:39:69:DA:92:C8:84:4C:0D:FB:40:ED:82:0B:D6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d7:55:98:59:0c:23:36:79:a9:b8:a3:47:68:5b:d4:9c:3b:
         2c:41:11:f5:ac:32:f7:b3:a5:9e:3c:16:27:5e:9f:2d:26:3d:
         b0:7a:5f:8a:f4:67:3a:20:e6:c5:1e:ec:ac:c5:6f:89:c0:9d:
         5c:e6:3f:77:e0:14:fe:2a:65:a4:57:5a:d2:02:7c:82:f1:d3:
         b0:b9:ba:76:4d:8c:2b:28:e7:c5:31:30:7b:f8:10:10:3e:41:
         28:10:75:f9:af:39:f6:6a:a2:04:36:31:5a:ed:9d:71:94:c4:
         eb:10:eb:fb:6d:8e:b8:de:30:1c:e8:69:ee:81:51:8a:65:40:
         64:6a:3a:58:20:bd:a3:44:a2:e9:0f:39:b6:c0:2b:d5:51:30:
         27:cd:32:b3:1d:ba:9b:11:43:2b:c2:0b:f4:5e:1a:d2:c7:3d:
         a5:e2:72:cf:3d:78:e6:74:cb:9b:27:74:d3:2d:db:68:47:e8:
         cf:7b:d6:2f:19:68:06:ab:06:0c:0c:8a:b6:93:bd:95:66:0d:
         da:7e:ab:51:c6:40:d4:b4:dc:36:a7:28:e1:0f:f7:3c:36:22:
         80:6b:11:87:43:53:22:d7:03:7c:a4:28:e1:51:d7:81:33:ba:
         42:19:de:b3:29:86:b2:4f:39:d6:f0:16:a1:45:ab:e0:76:39:
         f2:20:a9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:39 2025 by rpki-client