Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
File:                     fpCf6oHjmP7ZMEndegB-_WlzVWM.mft (raw, json)
Hash identifier:          bbJyfHkYHwVTg7z5Rp+yy9LwbwVHE4PKgsa/WeWFcYs=
Subject key identifier:   5E:43:96:CC:67:A8:56:5F:5C:99:F9:00:84:DE:E8:07:54:16:66:70
Authority key identifier: 7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
Certificate issuer:       /CN=7e909fea81e398fed93049dd7a007efd69735563
Certificate serial:       0197470C2516439364626B7A215185091F17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
Manifest number:          0B6E
Signing time:             Fri 06 Jun 2025 21:01:07 +0000
Manifest this update:     Fri 06 Jun 2025 21:01:07 +0000
Manifest next update:     Sat 07 Jun 2025 21:01:07 +0000
Files and hashes:         1: WCe1OXd2fAiJz2bGRLY2dHMiVAs.roa (hash: XasTDlDBbIh1cL69G7L/yxnH5MsXPkwslxjCA22OVkQ=)
                          2: fpCf6oHjmP7ZMEndegB-_WlzVWM.crl (hash: ARBZNUcEMn/Yl1kvdK0X6/MdY8J8wuMcVrNVYx8hDD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0c:25:16:43:93:64:62:6b:7a:21:51:85:09:1f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e909fea81e398fed93049dd7a007efd69735563
        Validity
            Not Before: Jun  6 21:01:07 2025 GMT
            Not After : Jun  7 21:01:07 2025 GMT
        Subject: CN=5e4396cc67a8565f5c99f90084dee80754166670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a8:37:2e:ac:07:f7:61:f3:d4:6f:c5:78:e9:
                    e6:4d:09:82:0f:81:5d:08:c9:13:67:1b:48:1b:a2:
                    30:46:29:5d:a9:25:ef:59:52:b8:84:02:ff:33:96:
                    44:78:23:ac:70:16:aa:64:99:7f:5c:7c:fd:94:d6:
                    ed:6d:20:40:aa:9e:e5:5f:73:1c:27:f5:2a:18:36:
                    9b:01:f2:98:0c:bb:1f:ce:97:fb:ed:4b:b2:d1:03:
                    cd:28:a6:ae:14:3c:7a:f2:ad:3b:3a:3d:11:9d:17:
                    49:5f:8c:50:0a:ca:3c:80:32:b6:2d:16:f3:ba:3c:
                    66:a8:b3:8a:38:5a:a5:d0:46:49:b1:ff:18:ef:55:
                    7b:b1:b4:1d:af:57:be:12:98:19:c3:c1:7d:2d:0b:
                    8f:f2:f6:73:0c:ac:15:db:cc:f2:c5:95:da:eb:13:
                    a7:ca:bd:e0:d9:f9:f4:2f:6c:54:0e:a4:3e:ba:57:
                    d0:6c:db:f2:13:bb:02:fa:63:86:0c:16:12:cf:01:
                    ca:1d:8e:aa:c4:3c:d0:e4:29:32:e0:01:57:b7:92:
                    f4:3b:99:d4:db:62:56:b2:f4:5d:c1:b7:02:ff:45:
                    f3:11:59:d5:94:68:dc:14:94:0f:ac:60:3f:28:b8:
                    8b:21:b7:a9:ec:f3:50:1d:a0:d0:7c:ba:19:6c:92:
                    59:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:43:96:CC:67:A8:56:5F:5C:99:F9:00:84:DE:E8:07:54:16:66:70
            X509v3 Authority Key Identifier:
                keyid:7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6c:6b:c8:70:fc:1f:7b:c0:cd:4b:ae:b8:65:58:02:de:90:
         9b:71:d5:74:fd:97:e3:6d:99:6c:86:f8:56:2c:b6:01:61:c4:
         b2:e3:4d:93:8a:53:fe:f3:7b:2b:c7:c2:05:8c:93:d6:9b:6b:
         aa:d4:ce:67:95:55:5e:42:b7:5d:3b:85:79:74:cf:81:2f:5f:
         d3:8a:76:f7:c8:2f:86:93:29:34:12:8f:d0:a7:c7:f1:b8:89:
         cb:9e:3a:ee:20:d2:1d:e6:42:1b:51:af:34:b9:3c:37:da:b4:
         a6:93:5a:f8:17:3a:03:4f:76:f4:7a:45:1e:cb:f0:ad:c1:a9:
         e5:de:c7:98:4d:b1:87:9b:20:01:8d:f8:86:e9:39:18:a4:29:
         59:bf:e0:4a:3b:ab:ec:f7:4f:38:35:6d:a0:b0:b5:33:e8:21:
         33:59:f0:9d:24:31:30:24:76:24:6b:d9:30:80:f0:7a:61:79:
         e2:02:a0:16:c5:66:0f:8a:7c:4c:b2:bd:e7:73:ae:1d:1d:69:
         3e:5b:1f:18:17:9d:25:cd:08:38:93:54:9b:d0:14:21:1b:57:
         57:6c:4b:fa:33:72:d5:5d:a7:c1:c9:4e:41:ca:19:cc:2c:a5:
         bf:34:dd:3e:0e:b0:63:fc:ad:c9:9f:f8:0e:b6:b9:1f:04:3c:
         3e:b2:ef:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:16:32 2025 by rpki-client