Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
File:                     Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft (raw, json)
Hash identifier:          JLUuxQai4G4Ur6VOqRm+BJp3KEmMp2vvHju9K9LDZx0=
Subject key identifier:   39:1A:63:27:73:5F:76:7E:F1:DB:37:99:B9:06:C7:8E:A1:1F:83:D9
Authority key identifier: 16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0
Certificate issuer:       /CN=169ea0275c765e17603eb59eef39e2fab5380ef0
Certificate serial:       019683FF48BB0E52AD444EF9819813853E91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
Manifest number:          098C
Signing time:             Wed 30 Apr 2025 00:01:07 +0000
Manifest this update:     Wed 30 Apr 2025 00:01:07 +0000
Manifest next update:     Thu 01 May 2025 00:01:07 +0000
Files and hashes:         1: Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl (hash: 62jYaua3L3cGKJjilYYzX0+vK2CuUzSn9KwLAV8V7oU=)
                          2: wbh15XPn1kgCYyJ-XkIl20Yytuw.roa (hash: aWvLndo6Gq/HOzsYU6uHpO8FpYdNLyOKJEg8ZgZ7QAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:ff:48:bb:0e:52:ad:44:4e:f9:81:98:13:85:3e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=169ea0275c765e17603eb59eef39e2fab5380ef0
        Validity
            Not Before: Apr 30 00:01:07 2025 GMT
            Not After : May  1 00:01:07 2025 GMT
        Subject: CN=391a6327735f767ef1db3799b906c78ea11f83d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:7a:cb:32:dc:11:12:e9:a8:32:51:7d:a4:2f:
                    e8:27:13:36:2b:5d:27:d2:fc:89:5f:76:b8:42:f4:
                    9b:32:08:e1:67:fd:9f:4b:a6:8c:f0:e2:c7:13:97:
                    f1:bf:5d:f7:ff:e4:ef:b6:65:6f:02:dc:94:b0:65:
                    c8:d9:94:ce:96:fc:fd:9b:33:79:dd:d3:78:8f:de:
                    dd:44:60:b5:ed:f1:22:24:30:ed:1b:4e:b8:99:3e:
                    9c:1c:a2:eb:34:14:0e:b4:21:3d:0e:e1:29:5d:3c:
                    89:ac:c6:f6:84:71:9e:1d:80:67:ca:f6:1c:be:8a:
                    a5:7a:f3:13:ea:d7:cc:42:bf:64:f6:83:2e:0d:ab:
                    27:12:c1:dc:dc:ac:2f:db:05:58:0e:72:86:17:39:
                    12:eb:21:32:f0:69:e8:22:fc:85:cd:87:d6:34:21:
                    d1:79:41:e0:92:c3:f1:6c:aa:71:24:c0:7f:48:47:
                    ac:6e:20:12:e4:74:d3:ee:15:46:f5:00:ff:1c:3a:
                    a3:44:fc:91:78:29:2f:6a:cf:d4:b1:a9:39:3e:70:
                    5f:75:74:17:14:b5:fa:e8:d8:b2:4f:96:5e:74:7c:
                    6c:97:d9:df:f7:b5:a0:93:39:1e:4e:18:1f:bf:9a:
                    c5:df:6f:f8:32:c0:7c:9f:9a:14:e4:22:97:df:f0:
                    fc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1A:63:27:73:5F:76:7E:F1:DB:37:99:B9:06:C7:8E:A1:1F:83:D9
            X509v3 Authority Key Identifier:
                keyid:16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:46:44:87:a1:7b:66:3c:e4:4c:67:9e:4e:6d:c5:aa:9b:52:
         a5:33:63:04:d6:d2:90:46:42:17:70:ef:0c:d0:15:b8:ab:a3:
         83:d2:1c:ec:34:7f:29:ac:15:17:e6:6a:41:ac:ad:6b:c1:b0:
         c5:f8:0d:12:fd:a1:37:bc:72:c2:d5:7c:54:2f:7a:18:b0:3b:
         c6:2e:f9:a8:2e:cc:7b:12:b8:74:3c:17:8e:09:59:da:3e:42:
         41:4a:16:9e:80:22:ce:e7:4d:5c:b3:0e:df:b0:b8:93:76:b8:
         32:d6:69:21:4e:7d:8c:96:4f:06:76:4f:12:1d:99:9d:2b:5d:
         fa:c7:bb:69:3a:55:63:3a:8d:25:25:4f:bc:9f:9c:3e:06:7a:
         e9:c9:a4:38:b8:cc:c2:03:de:20:a3:bc:1e:58:fe:48:78:71:
         e6:fb:de:3f:db:0f:da:67:98:90:17:a5:72:0f:86:40:af:89:
         72:65:76:ca:a8:4b:3d:40:79:44:83:2e:1e:b6:4d:60:f2:c1:
         e7:26:6c:3f:89:cd:c0:81:b2:18:33:12:8a:be:4c:a6:0a:db:
         8f:5f:13:1e:86:4c:03:67:fd:5d:0d:72:bc:f3:fb:7c:e5:a2:
         85:50:46:44:8a:01:77:d3:72:f0:7e:ef:29:39:0e:b7:30:59:
         2b:23:3c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:46:25 2025 by rpki-client