Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
File:                     FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft (raw, json)
Hash identifier:          iFBv1br83/K/TF7/rjKRPYs8jvbkON+Wt1GKtOht4EQ=
Subject key identifier:   DE:9D:8F:92:DC:FD:96:90:E3:A2:76:87:61:72:86:CF:4C:EF:E6:0F
Authority key identifier: 16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F
Certificate issuer:       /CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
Certificate serial:       01974DE96D730579ADE7C2683215C6C66372
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
Manifest number:          09FC
Signing time:             Sun 08 Jun 2025 05:00:32 +0000
Manifest this update:     Sun 08 Jun 2025 05:00:32 +0000
Manifest next update:     Mon 09 Jun 2025 05:00:32 +0000
Files and hashes:         1: FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl (hash: j3WPP1zu0P5tAVEbHHu84qNrFPxEJbh+HkQd0C888UA=)
                          2: QNhj8szxUJQB2UJkTSFbnKRcj2U.roa (hash: G9tQdAu6v2DV1kcxNZeTfgXQ9D3NQf3F0+ROvxbmmRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:e9:6d:73:05:79:ad:e7:c2:68:32:15:c6:c6:63:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
        Validity
            Not Before: Jun  8 05:00:32 2025 GMT
            Not After : Jun  9 05:00:32 2025 GMT
        Subject: CN=de9d8f92dcfd9690e3a27687617286cf4cefe60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c1:02:c5:fa:8c:9e:fb:18:65:21:8a:aa:01:
                    59:0b:77:81:95:27:fc:3f:57:3a:f8:84:4a:6e:34:
                    bb:4d:d3:7b:7d:0c:96:95:f8:f8:b9:1b:c0:80:a9:
                    b7:08:95:92:66:55:4c:a5:a8:ba:88:25:cc:2e:d6:
                    da:de:72:02:17:17:35:1c:d4:67:ad:d5:2a:d7:02:
                    89:2c:57:98:e7:c2:b0:5f:da:66:1a:ef:d2:11:d7:
                    c1:f2:c2:6e:dd:e6:27:dc:cb:9a:fe:fb:e2:f1:e0:
                    07:e3:df:37:d9:21:51:66:43:6d:1e:a0:70:da:de:
                    90:c4:b8:a1:ed:a6:ff:6d:c4:32:dc:ac:72:d2:bf:
                    aa:9d:66:95:1f:7b:49:0e:1a:e5:72:3a:e7:84:9c:
                    95:de:74:71:d2:9d:e6:79:f3:35:b4:c8:cf:de:d5:
                    b5:28:9f:06:7b:4b:0e:2d:d1:24:45:53:92:85:67:
                    a1:27:d5:97:40:bd:0c:27:36:d4:a6:38:aa:26:13:
                    71:da:57:8b:ba:28:aa:68:d4:64:7a:38:46:b4:ba:
                    b0:77:5e:ff:e1:25:8c:95:8f:05:cd:a5:a7:a0:52:
                    c5:90:e9:03:ae:25:93:12:9f:34:a0:bf:4f:a0:9a:
                    3e:65:c9:72:f5:11:7a:2f:27:4f:bb:51:76:55:36:
                    75:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9D:8F:92:DC:FD:96:90:E3:A2:76:87:61:72:86:CF:4C:EF:E6:0F
            X509v3 Authority Key Identifier:
                keyid:16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b9:20:f5:a9:f9:93:b2:66:2f:fb:61:c0:13:ea:0a:41:4c:
         02:33:6d:12:c2:a7:b9:f6:27:9e:bc:cf:18:31:71:7c:87:9d:
         ae:28:46:17:26:26:ca:51:dc:9c:85:bc:fd:6e:17:80:41:d6:
         4d:85:c5:1d:d1:68:18:ff:45:30:2f:a7:11:d2:20:86:a0:c9:
         6a:cc:3a:99:c3:fb:8e:38:64:70:0a:e9:30:68:f1:41:34:a0:
         67:95:d5:c5:f9:19:5c:d8:0f:39:fc:98:92:5f:91:0f:c1:68:
         66:eb:fc:62:79:5a:9c:e9:6d:e3:92:55:56:ab:6b:52:17:1b:
         5f:b9:f9:1b:3e:af:3f:fc:7b:5b:85:d2:09:f8:a3:74:9c:87:
         b5:ff:f4:ee:f7:09:39:19:01:ae:40:87:a3:3b:4f:92:9e:fb:
         de:e8:a9:bf:a0:aa:08:3a:d5:cb:99:af:76:f1:b5:6c:24:a1:
         51:13:b1:87:89:73:4d:2e:19:cc:09:63:bc:2f:21:bb:1d:82:
         65:9b:fc:70:ff:91:03:ed:73:d2:a5:a9:c5:32:a6:7d:65:d7:
         fe:d7:e1:30:7d:7c:84:72:14:fd:bb:b0:07:73:46:e9:ca:fb:
         5d:ea:1e:d0:19:65:f8:9b:e7:ee:bd:bf:59:21:89:df:60:53:
         08:63:8b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:29:55 2025 by rpki-client