Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
File:                     Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft (raw, json)
Hash identifier:          wJpFgfQOp7YuXmTI1idQdioqnqZkuIU2LnVQQaL6Bdc=
Subject key identifier:   48:C9:19:20:0B:27:CF:90:95:97:1A:2C:E5:22:A0:F2:4D:F9:F4:E8
Authority key identifier: 16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0
Certificate issuer:       /CN=169ea0275c765e17603eb59eef39e2fab5380ef0
Certificate serial:       01977B309F0F885E031A3260CC8422758546
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
Manifest number:          0A0C
Signing time:             Tue 17 Jun 2025 00:01:13 +0000
Manifest this update:     Tue 17 Jun 2025 00:01:13 +0000
Manifest next update:     Wed 18 Jun 2025 00:01:13 +0000
Files and hashes:         1: Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl (hash: 2GHq9py9774sSdWngTbzA2ozZ8WmO6wChB0c4AyWvVg=)
                          2: wbh15XPn1kgCYyJ-XkIl20Yytuw.roa (hash: aWvLndo6Gq/HOzsYU6uHpO8FpYdNLyOKJEg8ZgZ7QAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 00:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7b:30:9f:0f:88:5e:03:1a:32:60:cc:84:22:75:85:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=169ea0275c765e17603eb59eef39e2fab5380ef0
        Validity
            Not Before: Jun 17 00:01:13 2025 GMT
            Not After : Jun 18 00:01:13 2025 GMT
        Subject: CN=48c919200b27cf9095971a2ce522a0f24df9f4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cf:77:47:f0:a8:46:7b:f7:77:44:c1:47:e8:
                    06:2f:3e:e8:1d:aa:90:ca:33:b0:6b:f3:44:ef:08:
                    f2:7b:ed:f4:57:ec:b2:62:fb:68:b7:55:c2:c4:93:
                    c7:17:6b:bb:53:fc:25:21:88:7b:f0:7b:33:ef:39:
                    7e:26:1d:db:36:20:b5:4c:62:80:cf:2b:d1:08:29:
                    39:48:79:e4:c4:70:17:e8:8a:fa:a0:4b:a6:9f:1b:
                    64:32:ab:fd:b1:95:08:fe:4a:64:2c:45:ed:29:60:
                    85:ba:d1:90:55:c1:34:2d:f5:41:40:37:95:b4:d1:
                    77:74:da:34:16:be:7c:65:e8:79:73:16:67:a9:1b:
                    80:3a:6d:75:d1:8f:02:48:62:ef:85:2e:1a:08:fe:
                    e9:9b:4a:e7:ce:32:97:0b:95:dd:4d:e6:50:68:5e:
                    a3:11:ac:44:0b:66:c3:ee:ab:81:9e:ed:c9:7e:05:
                    6a:1a:c4:6c:78:c8:0c:4f:c4:ca:66:8d:f4:ec:c4:
                    5b:76:27:ef:35:d5:88:37:a0:16:fa:84:7e:ea:d6:
                    1e:aa:64:29:fb:68:f2:fa:bd:f8:4f:18:4f:b1:c1:
                    ff:67:41:4b:aa:1b:25:ce:b2:24:ef:56:94:f6:69:
                    74:e6:1c:94:0f:7d:33:a2:4f:6a:9d:bd:ef:b2:4b:
                    a9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C9:19:20:0B:27:CF:90:95:97:1A:2C:E5:22:A0:F2:4D:F9:F4:E8
            X509v3 Authority Key Identifier:
                keyid:16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f3:16:99:18:1a:2b:16:43:75:62:ac:00:e2:b5:2d:68:63:
         9a:6a:bd:07:2a:d3:54:e7:2d:a2:df:7e:c3:0b:97:00:ab:41:
         4e:ef:ec:2e:7c:7d:3a:d5:b0:19:c1:50:c8:ba:98:70:f7:73:
         87:4f:cd:9c:90:9d:e8:6b:e0:b2:bc:9e:59:80:cf:e1:f7:1c:
         ef:fb:39:1a:10:8d:7f:61:7d:76:ac:11:7b:42:63:f3:22:02:
         ec:19:5c:a3:e8:6f:af:fc:1d:d4:19:fb:18:a7:56:61:8b:f1:
         70:40:f5:f6:bf:04:20:73:cf:0e:65:50:64:46:08:d9:cc:8d:
         ed:79:93:4f:bd:b9:3b:2b:44:f6:bb:4f:fb:cc:b3:1c:a6:a8:
         68:38:93:53:a0:dc:e1:ec:84:39:63:dc:11:8f:63:75:e2:f3:
         5c:ff:70:dc:f3:d7:15:c4:f0:bc:b4:fd:f5:12:de:a4:76:b5:
         fc:40:b8:84:99:dd:f1:87:1d:67:b3:40:3d:ca:78:fc:26:94:
         4b:0b:c0:6c:36:8e:bf:a8:19:44:c9:42:71:e9:b0:47:ce:ca:
         8c:a7:63:89:96:4f:8d:9e:ed:88:7c:5d:30:70:5d:5d:1a:54:
         5d:bf:29:de:8f:86:12:e5:19:42:04:e0:0f:9b:6e:e5:51:fc:
         be:ea:3d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:10:29 2025 by rpki-client