Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
File:                     fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft (raw, json)
Hash identifier:          eb3EVudNxdJICTzZm9CZZoFnO6dv6KVGg/L+M/ZFM/0=
Subject key identifier:   FB:7C:11:54:1E:BA:6D:A4:F0:D9:23:12:81:01:CB:2E:F0:10:AB:22
Authority key identifier: 7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
Certificate issuer:       /CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Certificate serial:       01976F2C634C61461B23067E7080DCAA762A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
Manifest number:          0E4C
Signing time:             Sat 14 Jun 2025 16:01:09 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:09 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:09 +0000
Files and hashes:         1: fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl (hash: cZL0P357ep87WagWKNlZBdxNlwMslLcobVHslHLg33c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:63:4c:61:46:1b:23:06:7e:70:80:dc:aa:76:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
        Validity
            Not Before: Jun 14 16:01:09 2025 GMT
            Not After : Jun 15 16:01:09 2025 GMT
        Subject: CN=fb7c11541eba6da4f0d923128101cb2ef010ab22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:39:20:97:92:46:14:87:d9:7d:67:bb:8d:43:
                    13:73:18:40:c0:89:90:c0:9f:5c:c3:2a:be:f1:04:
                    04:d8:ac:1e:1d:a2:2f:f0:99:cf:3d:3f:60:24:a8:
                    62:83:22:3b:27:1e:2e:3e:1a:04:8b:f7:f6:b1:22:
                    dd:1e:95:e5:a7:d4:ed:0d:60:9a:2d:da:bf:e8:67:
                    ae:93:19:57:5c:61:46:1b:d5:85:3a:22:57:7c:1d:
                    45:ab:71:54:72:fb:8f:0d:6c:fd:c0:38:e4:82:4a:
                    24:d7:5d:0d:37:90:22:77:ed:da:47:89:59:f2:ea:
                    14:48:26:8e:04:96:81:67:d4:76:1e:de:de:d2:8b:
                    a7:4e:0b:51:9b:4f:c8:fd:61:e6:6c:c4:31:c5:34:
                    93:65:72:42:f8:e4:59:94:e7:2b:03:99:70:da:b4:
                    b0:5f:bf:22:fb:42:12:57:af:fb:b4:1a:6f:a5:4d:
                    9d:c3:a8:7e:45:67:fa:b4:bc:eb:de:b1:a0:d4:2d:
                    b2:57:c1:08:34:21:c7:a7:2b:ca:43:57:0c:66:e1:
                    a9:44:1b:06:7c:56:68:e2:d4:4b:88:b0:fc:15:38:
                    96:aa:92:21:b4:24:d3:1b:ec:98:70:d5:7f:c2:84:
                    d8:b1:ea:39:1d:ef:2f:ba:81:83:d5:3e:9f:97:8e:
                    3e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7C:11:54:1E:BA:6D:A4:F0:D9:23:12:81:01:CB:2E:F0:10:AB:22
            X509v3 Authority Key Identifier:
                keyid:7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e4:8f:86:71:fd:6b:5b:48:e5:7d:e2:55:99:64:5e:d5:f4:
         bb:cb:a8:24:d5:e6:c3:4c:f5:b9:e8:48:12:1a:2e:05:57:91:
         42:ce:bb:53:d3:42:aa:92:01:7a:a8:17:12:c4:c6:45:32:86:
         f0:a8:c2:34:49:23:6f:b9:3c:8c:17:7a:6d:11:44:be:53:f2:
         4e:6f:1e:1a:0b:a8:f3:fc:bc:53:e5:70:a9:2f:cb:2d:33:30:
         77:a6:d1:b6:5b:5c:ba:ae:86:c4:60:eb:3b:e8:a1:e6:60:e3:
         41:70:df:5e:b4:64:ea:e9:e9:3b:38:af:9e:ff:b1:2b:b4:77:
         bf:e2:02:d5:fb:d2:f1:44:23:bb:36:4d:ed:37:c9:fd:cf:e8:
         7e:73:10:c2:bc:6f:3e:3c:8b:24:66:51:d1:71:84:10:f8:66:
         2f:fd:4e:a8:a2:0c:b0:54:ce:0d:95:ec:91:35:7e:ea:ff:31:
         a6:12:6a:05:1f:8b:ee:f8:ef:10:58:26:96:97:0a:3f:cc:78:
         ad:21:ac:72:c5:4c:4f:4f:1e:41:13:40:2c:d7:f6:dc:3f:f9:
         c6:8c:ce:60:b4:66:85:b2:7e:a7:3f:7b:8b:00:10:a2:c8:0e:
         fd:4f:0f:a5:ac:2f:10:a4:4a:82:b3:70:a8:20:53:d4:0d:7a:
         6d:f2:b9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:53:38 2025 by rpki-client