Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
File:                     fqxm_CIxyyZW51M1of1mdx9Xqcw.mft (raw, json)
Hash identifier:          MCLfIKFawBW2MUH0vpXYqV+oS+nEOouZoyDoYrxfp+4=
Subject key identifier:   C9:95:5B:E6:5D:F8:93:1F:DD:1C:71:43:97:14:F1:8A:B4:D4:E3:6D
Authority key identifier: 7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
Certificate issuer:       /CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Certificate serial:       01967E33BF83048DFC11CC8E21CDED44F75C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
Manifest number:          01FA
Signing time:             Mon 28 Apr 2025 21:00:42 +0000
Manifest this update:     Mon 28 Apr 2025 21:00:42 +0000
Manifest next update:     Tue 29 Apr 2025 21:00:42 +0000
Files and hashes:         1: 82ywaE3JFKydhCtiLwP3kX3cHw4.roa (hash: HxQsJBHdoQOXXDmtm1dRn8dN912bmzuv+pkYTIzf//Q=)
                          2: fqxm_CIxyyZW51M1of1mdx9Xqcw.crl (hash: r7ImUK9vS+Xx1l/GXmri4dJ/lJbh4UpHEe/0omIydrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:33:bf:83:04:8d:fc:11:cc:8e:21:cd:ed:44:f7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
        Validity
            Not Before: Apr 28 21:00:42 2025 GMT
            Not After : Apr 29 21:00:42 2025 GMT
        Subject: CN=c9955be65df8931fdd1c71439714f18ab4d4e36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ef:8a:65:94:8e:7f:2c:75:a3:1d:32:1c:bd:
                    1b:98:d2:4c:a0:80:e3:39:d0:fe:f3:98:19:77:27:
                    6f:96:9f:12:62:77:a3:e7:0a:88:48:cd:41:2b:81:
                    4f:0d:ab:14:10:5c:00:04:65:35:8c:56:13:ad:fa:
                    cd:35:31:73:ed:db:a6:f0:16:54:c7:08:44:f4:f0:
                    b8:63:d3:0e:a8:7f:c2:6f:c5:35:24:cb:31:ba:73:
                    ae:f2:89:fa:a6:13:79:71:6a:6b:3b:8b:68:dd:6f:
                    e7:eb:5d:95:98:55:d9:f1:43:1e:0d:ce:5b:5f:ca:
                    2c:82:8c:14:6b:42:1f:07:e1:de:38:d9:26:37:26:
                    75:03:b4:44:c3:e5:bb:3c:2c:c6:4c:09:f2:d1:57:
                    a5:ce:05:0c:ce:1b:d0:1b:d0:ca:80:f4:dd:8d:a1:
                    70:a6:bc:31:05:b4:7b:43:55:0f:b1:4f:5e:72:15:
                    a5:0d:c0:09:48:94:59:11:95:07:70:47:c8:83:88:
                    a7:2c:b4:b4:aa:63:87:da:1c:8f:e4:de:0b:27:9c:
                    2b:e3:e0:2a:96:79:24:68:ea:0c:f1:17:63:d6:b8:
                    97:f6:71:d1:19:7a:47:88:1c:33:23:ca:1b:ef:5b:
                    ae:1a:ee:56:05:d0:03:64:fe:88:97:1b:d5:3c:06:
                    48:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:95:5B:E6:5D:F8:93:1F:DD:1C:71:43:97:14:F1:8A:B4:D4:E3:6D
            X509v3 Authority Key Identifier:
                keyid:7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b2:89:3d:a0:5a:b7:9f:d6:e9:e8:42:a2:18:4c:7f:42:26:
         05:f8:df:81:a2:f7:89:cc:94:59:1a:90:9b:a0:2e:db:5d:92:
         ce:db:35:99:63:2e:ab:bc:3c:49:d0:ba:44:71:01:9a:9f:36:
         d6:63:41:63:0a:01:66:2a:1f:95:89:90:5d:80:7e:ec:4f:26:
         fe:7e:14:16:7d:5a:ce:99:a5:3c:74:1d:1e:0e:de:fc:42:b3:
         28:7f:e2:ab:65:76:0b:a4:9e:3d:b4:20:f8:78:08:c7:3c:ac:
         b4:e7:d8:e5:8c:42:43:4e:f4:2e:49:47:89:67:a8:1f:90:84:
         4d:b8:19:d5:80:bd:9a:ca:8e:39:4a:53:2b:c8:dc:2a:0c:58:
         b8:18:53:ba:4d:b5:5e:80:24:77:bc:c4:07:17:0b:77:be:b3:
         43:31:25:05:d0:92:8f:ad:02:6c:b8:6e:e8:e2:d5:da:79:61:
         10:9f:0b:1d:cd:8d:e7:b6:71:98:1c:52:c0:aa:dd:34:6e:b2:
         43:82:bd:19:f8:cf:58:ab:dd:ab:9b:f6:07:2e:c3:8d:f1:49:
         56:be:1f:aa:09:4b:bb:a6:02:86:9d:b1:39:56:12:45:35:7f:
         5f:2e:1f:12:ab:ba:ac:c5:c1:b5:76:0f:17:de:33:65:c1:fd:
         8b:89:d9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:09:30 2025 by rpki-client