Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft
File:                     F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft (raw, json)
Hash identifier:          3hvsnWdWp6YqixM5zpqsMP9ppXErjCNHb0to4pPZMZI=
Subject key identifier:   F7:93:A2:05:30:8C:9F:6F:70:59:35:16:E5:C2:A3:80:E2:8C:A2:22
Authority key identifier: 17:EC:31:44:16:91:B8:59:B3:47:FD:17:21:7A:5E:5D:1B:0B:E3:03
Certificate issuer:       /CN=17ec31441691b859b347fd17217a5e5d1b0be303
Certificate serial:       01967AC4EB8F057C9454A9D94202B3F62EDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft
Manifest number:          063E
Signing time:             Mon 28 Apr 2025 05:00:47 +0000
Manifest this update:     Mon 28 Apr 2025 05:00:47 +0000
Manifest next update:     Tue 29 Apr 2025 05:00:47 +0000
Files and hashes:         1: F-wxRBaRuFmzR_0XIXpeXRsL4wM.crl (hash: p/HeO//StYzCoE94c4HoUk+Vk9L/IQDEPgm58fpQP1I=)
                          2: ln-QKhvlXAjUZIdfkRE5U6oCsi8.roa (hash: gwe72yNPdMd17mqjkFbILfyleB7233AKjzKUNQmZ/xM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 05:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:c4:eb:8f:05:7c:94:54:a9:d9:42:02:b3:f6:2e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ec31441691b859b347fd17217a5e5d1b0be303
        Validity
            Not Before: Apr 28 05:00:47 2025 GMT
            Not After : Apr 29 05:00:47 2025 GMT
        Subject: CN=f793a205308c9f6f70593516e5c2a380e28ca222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:da:80:a0:fa:02:86:97:64:00:8c:ba:5e:a2:
                    a1:87:48:48:7c:5e:89:a3:ca:c6:6a:c1:1a:3d:d1:
                    b6:cf:79:25:20:37:0f:a5:0d:73:78:2d:32:e8:c3:
                    04:5a:21:1f:89:e0:f3:12:f1:27:fc:dc:af:cd:2f:
                    71:02:c4:a7:11:d4:49:12:f8:9c:67:d4:76:27:c7:
                    66:d5:a6:98:aa:dd:07:fa:c6:02:46:a9:25:21:27:
                    e2:5c:cd:21:29:de:b7:28:b8:3d:2d:1c:b4:ec:f2:
                    e8:91:3d:d2:30:85:57:b6:83:f4:ff:67:7e:0e:38:
                    bd:d4:13:a2:c6:ae:74:a1:66:c4:2a:3c:8e:4d:a3:
                    32:08:cb:b0:f2:97:aa:12:54:5a:d5:e6:68:2f:b5:
                    a8:a8:5a:3f:c3:83:7a:ac:4d:ee:11:7b:7f:1f:50:
                    34:e2:f5:28:36:6b:93:30:26:97:38:32:ed:56:72:
                    02:90:91:c5:44:67:ec:3d:c6:eb:62:b3:5d:2f:b0:
                    fe:0f:7c:bc:d7:5c:ee:3c:aa:d8:bc:06:f1:77:6a:
                    b9:e7:17:56:9d:98:ef:00:96:34:fe:a0:90:4e:ae:
                    ab:48:63:22:a2:6f:84:9a:b0:63:91:f2:d9:f5:16:
                    af:58:42:5a:b7:8b:80:9d:ea:de:b1:42:65:88:07:
                    41:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:93:A2:05:30:8C:9F:6F:70:59:35:16:E5:C2:A3:80:E2:8C:A2:22
            X509v3 Authority Key Identifier:
                keyid:17:EC:31:44:16:91:B8:59:B3:47:FD:17:21:7A:5E:5D:1B:0B:E3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:5e:2e:e2:d1:1d:e5:ba:ff:26:77:c8:fa:17:a3:77:ff:a3:
         73:1a:18:09:ec:30:67:d1:8e:b8:32:da:43:00:57:47:3f:c3:
         22:6e:ba:17:9f:9a:57:ba:d0:36:cc:58:93:b5:c6:44:17:c3:
         b8:10:12:f6:30:5f:f5:53:37:08:bd:51:43:48:58:f4:5b:29:
         0a:fd:7f:b6:38:b7:97:07:e3:6d:9f:d9:5a:df:b4:8e:47:24:
         8f:af:08:e3:8b:61:02:f2:46:17:c7:e8:5d:20:b3:40:79:9e:
         09:96:da:45:56:cc:6c:ae:cf:78:95:ee:18:c3:26:05:5c:a8:
         a8:a9:c6:46:c3:1e:a1:98:b0:5b:39:05:2d:d1:df:74:85:7b:
         07:2a:13:53:2f:87:91:3e:f0:c7:bb:56:17:19:ef:be:e8:38:
         bb:3e:c7:2d:f9:72:50:5e:65:6b:d5:05:a1:18:23:b4:d1:b5:
         11:71:0e:1c:1f:91:4e:f7:d0:5b:02:94:39:b1:14:85:95:f9:
         0a:ef:f9:a1:25:cc:20:00:bf:02:5b:89:f7:eb:18:0f:20:4a:
         2f:51:65:2f:f6:d0:8f:fc:e3:be:1d:9e:22:4d:c3:7a:bc:ae:
         74:06:81:b1:12:9f:35:8c:fb:3c:c9:da:7d:cf:f8:8d:af:9d:
         71:38:40:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:41:59 2025 by rpki-client