Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
File:                     FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft (raw, json)
Hash identifier:          gA/364iOn92PGV8ciaKgC7wlbgxtOmqv+D+dVf67vdI=
Subject key identifier:   8E:F6:BD:1E:71:41:AB:3C:DE:9E:C6:DE:DB:36:E2:17:B7:F5:18:BA
Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
Certificate issuer:       /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Certificate serial:       01967EA18325640601EE90B4CBEE9579C6B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
Manifest number:          151B
Signing time:             Mon 28 Apr 2025 23:00:36 +0000
Manifest this update:     Mon 28 Apr 2025 23:00:36 +0000
Manifest next update:     Tue 29 Apr 2025 23:00:36 +0000
Files and hashes:         1: FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl (hash: EJuuYAGfmDcwyctmBFEIVNyzzPtdNSPfW5P0Y9bHGeI=)
                          2: JFz1OMtyYE0bdrPpAzWAHxoNfr0.roa (hash: GCMi3F+baVVPvUwQFwt0LCTFyVV4lIfA34WPsvrvO6A=)
                          3: RnPjQu1TRB6OusL4aMQpC4JKqmI.roa (hash: fzeYA/Ogqc2irWhfM/UbWuBPWyUJiutWTEcNUX+4+LU=)
                          4: Ut6Isd3FyfcwFqXffcOSTj20big.roa (hash: 6WWf7LzHGfNpFV/UMH6n5UZ2IDbI9b8RYTztg7MMT9k=)
                          5: YrBEbKYcRihrrXhf5rGMn4NnWP8.roa (hash: 0EjDwiQerEsJrNpiAV/U41dtG8QfC+EEgtF9mTKQLqE=)
                          6: oVdkjWCoO6UKiUnCLGAAHjBO9ms.roa (hash: 60Qb8QX+Ft+JLMQ7m3ymUwisPXVeh0oMfLPMdsaJtK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:a1:83:25:64:06:01:ee:90:b4:cb:ee:95:79:c6:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
        Validity
            Not Before: Apr 28 23:00:36 2025 GMT
            Not After : Apr 29 23:00:36 2025 GMT
        Subject: CN=8ef6bd1e7141ab3cde9ec6dedb36e217b7f518ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:19:55:bc:66:c9:c6:29:3a:27:13:f5:fd:8e:
                    ca:d0:64:a1:a3:48:17:8d:a0:fd:a2:f4:08:a9:6d:
                    6e:89:63:02:ce:51:96:c7:db:b3:5b:41:08:cd:00:
                    f1:62:7c:06:6b:c7:d4:c6:28:51:dc:e7:59:5c:bd:
                    25:e1:e4:fb:37:90:29:25:15:56:ee:13:22:ba:9d:
                    b1:29:cb:25:ac:8c:69:c8:2c:b1:4f:c8:58:57:3c:
                    6a:0b:42:b2:d5:eb:a6:ff:d4:21:57:b9:54:0a:a1:
                    1e:32:7d:ff:26:9b:a0:bf:b7:2a:60:4f:5c:bc:dd:
                    19:04:fc:7a:9d:9a:c8:8c:15:46:eb:68:90:cd:98:
                    fe:34:9d:65:68:8d:0d:0a:bc:20:87:bb:5f:3c:47:
                    43:9e:df:6e:ad:c3:54:5c:3f:d5:05:21:1b:64:91:
                    77:66:f4:c2:3e:8b:67:5b:00:a5:d0:01:77:5d:71:
                    c9:ab:4e:21:f5:3f:2c:39:b5:35:91:84:a6:b0:82:
                    96:db:e4:a5:99:5d:65:ab:ac:d4:ca:5f:9e:74:d9:
                    1e:88:fa:3b:7b:53:fd:d9:22:ea:17:ee:a3:95:95:
                    05:3f:c6:53:68:ae:37:af:c4:36:cb:bc:35:45:77:
                    7a:aa:4c:2a:fc:a6:2b:c8:2e:04:3b:55:05:bd:8a:
                    c6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F6:BD:1E:71:41:AB:3C:DE:9E:C6:DE:DB:36:E2:17:B7:F5:18:BA
            X509v3 Authority Key Identifier:
                keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c8:4a:a6:d2:5b:f8:e7:be:98:36:4c:d2:ae:72:f8:33:df:
         48:7c:c6:d3:f5:69:5c:d5:3c:6d:bf:d0:96:7b:b6:61:ed:e0:
         24:61:3a:75:01:7f:e2:f2:52:ed:3a:25:06:56:82:0c:ca:d1:
         d6:74:40:77:53:fd:ef:6e:d3:59:74:a9:ad:cf:4c:38:a2:17:
         5e:60:6a:8f:67:20:f3:d1:b8:88:c5:07:54:da:cc:58:41:2c:
         76:c3:ef:a4:56:11:ed:62:61:2d:9c:34:3d:9d:cb:92:42:79:
         86:f8:5c:4a:2b:40:ac:27:b8:16:f0:9d:0c:1d:98:e0:27:33:
         b8:17:4d:4d:ec:00:cb:b0:7b:fe:2a:8a:be:a9:8c:5a:68:89:
         38:9d:5b:de:c3:70:50:6b:28:9b:fe:77:d0:0e:5e:a9:08:96:
         68:b7:e7:95:9f:13:6d:35:9d:16:b0:1e:55:14:a9:31:66:25:
         c3:f5:81:4c:9b:69:2f:b7:a4:96:d6:f3:fa:10:4d:66:2e:cf:
         a2:e5:5f:43:c7:c9:12:7a:13:a0:7e:cd:a6:57:a0:8e:f3:31:
         b9:22:10:0b:e1:6b:3d:b7:61:7a:2d:40:2f:a5:40:22:80:93:
         de:05:cf:d0:99:a4:e2:34:c0:ec:1b:ca:51:1e:21:da:85:69:
         98:8a:9a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:31:24 2025 by rpki-client