Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
File:                     Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft (raw, json)
Hash identifier:          ep0Qk8BFtzbpBWjRxnBfkX5wwnd+N0VkrPtccOEG7oQ=
Subject key identifier:   AB:FD:5D:52:97:3D:C4:36:A3:8D:CC:12:7A:43:E4:9A:65:57:27:91
Authority key identifier: 15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C
Certificate issuer:       /CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
Certificate serial:       019777F8712695240776D8D0AE3E9EA520A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
Manifest number:          02B5
Signing time:             Mon 16 Jun 2025 09:00:59 +0000
Manifest this update:     Mon 16 Jun 2025 09:00:59 +0000
Manifest next update:     Tue 17 Jun 2025 09:00:59 +0000
Files and hashes:         1: Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl (hash: RAy+9kxXQk7MiCiXYc6PonLY3F6ifC+9MMosEUEpC/A=)
                          2: QXxZoEDTfmfi2igFXO5o23qZxBE.roa (hash: rgCm3B0IpeTPYIjtwWWmsRXdZPZn8nOJAF/gu4jmo9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:f8:71:26:95:24:07:76:d8:d0:ae:3e:9e:a5:20:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
        Validity
            Not Before: Jun 16 09:00:59 2025 GMT
            Not After : Jun 17 09:00:59 2025 GMT
        Subject: CN=abfd5d52973dc436a38dcc127a43e49a65572791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:49:8d:b0:1e:e8:ef:83:32:db:5f:52:ec:24:
                    d3:73:af:28:55:73:cd:11:5a:5f:f0:75:9c:16:af:
                    8d:9c:d1:0d:1c:56:af:0c:4e:c1:a5:2c:04:07:33:
                    8e:f9:41:68:ba:e0:a3:81:e5:ee:ce:3d:e6:ec:4d:
                    21:1f:3c:ee:4c:a0:70:5e:6c:c3:cf:6b:23:07:26:
                    ec:de:72:5d:6d:13:3f:7e:bc:d3:8f:55:02:9d:e7:
                    45:ff:31:60:76:23:7b:81:2d:b7:5f:87:09:fc:45:
                    47:52:02:02:d5:cd:3e:53:13:61:32:16:2b:0f:cf:
                    8a:e3:fd:42:eb:5c:f1:ce:c4:30:a5:9c:94:db:ef:
                    50:7c:c9:54:44:b0:15:eb:96:c5:45:f1:e1:68:82:
                    65:9e:3c:ca:47:c7:d6:c0:3d:a5:ac:12:90:7b:ea:
                    d5:8b:cf:3b:82:73:9b:26:76:5a:1f:95:95:4d:e9:
                    0a:44:23:f3:a6:31:7c:4b:19:9d:fd:b4:43:86:e7:
                    65:a4:5b:5e:2b:1a:ee:41:a3:1e:af:88:b2:e0:4d:
                    dc:4d:37:bd:85:af:44:e2:71:c7:c1:cf:03:5a:af:
                    d8:cf:82:46:21:ed:9b:7e:ba:95:67:20:ef:f7:91:
                    07:ee:23:86:78:e8:5c:94:7d:28:d5:9a:bf:d3:6c:
                    78:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FD:5D:52:97:3D:C4:36:A3:8D:CC:12:7A:43:E4:9A:65:57:27:91
            X509v3 Authority Key Identifier:
                keyid:15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:87:ee:71:72:c0:da:7c:9b:e9:b7:53:ff:05:f8:96:32:e8:
         ea:4d:e8:00:1b:ee:88:b1:7d:0f:48:ca:47:05:1b:5d:b1:52:
         d8:fa:e7:3e:fd:66:a1:bd:4a:83:fc:76:37:ca:1e:65:fe:7f:
         cc:a5:b6:c1:65:f8:ff:50:e7:f1:f1:4d:da:4a:d5:2a:74:6f:
         98:94:0a:07:fc:a3:27:3f:55:cd:b3:cc:55:4c:30:fb:12:4e:
         59:72:6f:46:22:9a:32:93:d3:5c:2b:da:b5:9e:76:21:f6:5f:
         76:e2:b9:4f:a5:20:00:a1:41:43:1b:49:e3:9e:ff:d7:7a:dc:
         99:c4:1e:11:d6:10:5a:43:fe:7e:a8:9e:60:e8:42:29:05:98:
         ea:ff:bf:8e:d8:d9:4b:da:93:8c:2b:3e:5e:06:67:64:98:f7:
         99:89:94:f4:ab:b1:3a:46:88:b6:08:c0:0a:10:8d:43:03:7a:
         84:48:5b:4a:68:78:77:08:9a:66:2e:e3:34:bd:7f:59:e1:b0:
         28:7a:43:17:86:eb:97:bd:fc:21:d3:f8:35:8d:21:2a:55:41:
         1a:ec:14:39:ce:bd:e9:c4:c4:06:72:eb:b6:2a:c9:01:e2:79:
         01:94:23:f0:71:25:df:1b:1f:e9:1a:93:9a:30:8c:08:62:03:
         05:9f:4f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:14:54 2025 by rpki-client