Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
File:                     1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft (raw, json)
Hash identifier:          nRWGMC29RumyWsaoaA4RC+WvBwaQQ9f+gZfo3QLDcq8=
Subject key identifier:   FE:82:6D:91:62:AD:24:1B:04:2D:1C:01:9D:B4:B9:99:67:B0:BD:5C
Authority key identifier: FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
Certificate issuer:       /CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Certificate serial:       019655DCB131011B9D9A5C18E599878E7875
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
Manifest number:          1191
Signing time:             Mon 21 Apr 2025 01:00:48 +0000
Manifest this update:     Mon 21 Apr 2025 01:00:48 +0000
Manifest next update:     Tue 22 Apr 2025 01:00:48 +0000
Files and hashes:         1: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl (hash: 8jw0bPozwiIvcWosAoADogG+pAIt9Se2NqIWiZC87N8=)
                          2: ZyGucPSPOyM0P5b_DaUXvuzWUOE.roa (hash: ztfMzzwOj8VE7vTZ4CVj6RjRwBwxtzf26mpD1v7zIUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:dc:b1:31:01:1b:9d:9a:5c:18:e5:99:87:8e:78:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
        Validity
            Not Before: Apr 21 01:00:48 2025 GMT
            Not After : Apr 22 01:00:48 2025 GMT
        Subject: CN=fe826d9162ad241b042d1c019db4b99967b0bd5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3f:b8:72:89:77:da:64:1c:bf:f3:39:27:9a:
                    65:bf:24:fa:57:bd:27:24:aa:ca:1e:c3:b2:e7:73:
                    28:0c:c6:8a:d5:a0:e7:e4:73:b1:33:34:8c:a3:bf:
                    3a:9c:4d:6a:96:bb:e8:1f:28:7d:72:23:fe:cc:53:
                    c9:c1:bf:65:05:11:0a:1c:5d:f2:79:61:ed:01:59:
                    56:66:ac:13:dd:67:cc:cd:0d:ef:cd:a3:b0:1d:6b:
                    01:4d:32:7f:09:ff:0f:cc:d3:51:7b:8c:5e:6a:50:
                    56:a4:7d:9b:00:c0:73:ba:78:b2:52:b0:85:6f:1a:
                    27:6c:90:8c:b2:26:7a:b1:2c:8b:2c:62:d5:2c:56:
                    7d:b5:b3:9b:2f:b0:2f:da:3a:c5:f7:e3:6e:ee:98:
                    e4:5a:12:27:fe:9c:83:47:ff:0b:9c:ae:79:e8:70:
                    14:76:5e:03:b8:d8:80:fe:75:f8:b3:df:76:5d:db:
                    74:88:8b:2f:1d:a9:0c:df:1b:f4:16:01:e7:ef:38:
                    d6:dc:cd:e4:bb:3a:ca:a6:c3:c2:3c:72:51:e9:c0:
                    3f:3f:56:ba:1f:02:6b:59:ac:c7:de:f8:6e:78:fc:
                    eb:97:1b:a8:58:15:de:bd:6e:52:ae:61:b2:41:29:
                    45:cc:b8:65:d7:86:7a:3f:9c:79:38:18:39:4b:5a:
                    e4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:82:6D:91:62:AD:24:1B:04:2D:1C:01:9D:B4:B9:99:67:B0:BD:5C
            X509v3 Authority Key Identifier:
                keyid:FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:45:84:d5:45:94:cb:be:2b:8e:5a:7c:a8:ee:d2:42:54:3f:
         67:13:3a:e9:f9:6b:c5:bb:d1:5b:6f:15:fa:ab:bd:17:79:bc:
         ec:e5:a1:c4:32:f4:1c:2f:8a:d7:2c:48:3b:49:2c:5f:44:e5:
         23:34:6b:19:4f:54:08:70:bc:cb:fb:b4:3b:a1:76:b3:b0:da:
         1e:bb:f8:48:05:cd:c7:73:ef:83:35:49:de:a4:ee:6c:c9:9d:
         5a:ec:ff:a4:3f:29:7a:dd:56:2a:02:ba:8e:ae:2c:04:9e:a1:
         c2:72:f4:7b:21:85:e0:fc:4e:e0:6a:5a:69:7e:6e:08:78:57:
         7e:12:e8:05:7b:4f:e6:54:ba:ba:91:c5:25:c4:29:72:62:dd:
         71:8e:23:cb:ae:f9:37:29:09:77:e3:eb:f4:c4:6b:88:00:89:
         14:1f:90:14:3d:63:04:6c:bb:74:c3:6e:69:2a:dd:f3:8f:a5:
         dd:43:1a:0b:cb:07:b3:48:e9:4a:1a:96:70:50:39:3e:56:de:
         09:9d:8d:9f:4d:38:37:bd:61:bc:54:cc:12:bb:4a:bc:16:1d:
         73:81:8b:d0:e6:af:48:ab:08:74:3e:84:ce:e1:9b:c7:e0:df:
         2a:e6:78:4c:20:5d:b0:fc:d2:9e:d7:af:01:25:af:30:be:c5:
         ae:f8:99:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:41:29 2025 by rpki-client