Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
File:                     FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft (raw, json)
Hash identifier:          vQwBsb39UpVYH4pWA9Znq7gar6ICCEXcl6+NWjRVT88=
Subject key identifier:   7D:F9:A8:85:A3:A1:41:21:28:67:23:CE:1A:E5:EB:28:8B:B1:57:BE
Authority key identifier: 16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F
Certificate issuer:       /CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
Certificate serial:       01977865D4B8900FCB575E7C661946611979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
Manifest number:          0A12
Signing time:             Mon 16 Jun 2025 11:00:28 +0000
Manifest this update:     Mon 16 Jun 2025 11:00:28 +0000
Manifest next update:     Tue 17 Jun 2025 11:00:28 +0000
Files and hashes:         1: FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl (hash: 0WGc+ccWfiNZZpMAPAn66Au3yuY4DrjU63DO/233rKQ=)
                          2: QNhj8szxUJQB2UJkTSFbnKRcj2U.roa (hash: G9tQdAu6v2DV1kcxNZeTfgXQ9D3NQf3F0+ROvxbmmRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:65:d4:b8:90:0f:cb:57:5e:7c:66:19:46:61:19:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
        Validity
            Not Before: Jun 16 11:00:28 2025 GMT
            Not After : Jun 17 11:00:28 2025 GMT
        Subject: CN=7df9a885a3a14121286723ce1ae5eb288bb157be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:db:72:80:b8:53:c8:23:da:79:54:a0:33:3e:
                    90:d5:93:5c:27:48:d4:80:e3:d1:e8:7e:b5:bc:85:
                    fc:58:5c:11:c8:af:7a:a8:e3:47:16:2c:3d:8b:f0:
                    bc:e1:2e:21:06:09:70:55:91:75:d6:17:cf:94:4d:
                    2b:ba:49:de:cb:eb:5b:52:17:f3:12:49:95:4a:c6:
                    cb:d2:36:c8:f6:61:92:22:49:88:77:76:f9:50:30:
                    ad:ed:a4:eb:35:ca:04:1b:44:07:5d:f6:95:71:5e:
                    54:57:4e:5b:f6:63:f0:e9:c1:17:57:f2:cb:6a:05:
                    20:64:9b:a7:92:b3:34:b2:96:a9:e4:77:03:04:b6:
                    91:8d:0e:9b:e3:6e:29:29:21:35:65:58:3b:a0:2b:
                    63:97:cf:98:2e:62:c0:0b:39:c6:d6:b2:65:43:66:
                    13:49:b1:e3:79:13:cc:d1:e4:f1:13:05:93:8d:1d:
                    86:6d:c6:c0:fd:e8:47:4e:f0:75:d9:34:19:fe:c9:
                    1c:e4:a0:91:cb:0f:00:6b:fd:ee:69:b7:6c:21:ad:
                    ed:4f:cb:26:1e:18:dd:2e:da:bc:3c:47:e6:9d:3c:
                    3a:c4:9a:ca:91:ff:db:a6:92:07:f6:d5:0b:d9:a9:
                    93:f6:81:0c:e9:83:bc:aa:7e:d3:aa:45:23:a9:d5:
                    50:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F9:A8:85:A3:A1:41:21:28:67:23:CE:1A:E5:EB:28:8B:B1:57:BE
            X509v3 Authority Key Identifier:
                keyid:16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b5:c6:cf:e3:9e:3b:5b:ec:cd:80:c9:69:48:02:d4:fe:df:
         9c:31:b9:bc:f2:0e:34:14:2f:b8:eb:67:3d:25:c5:f3:1f:64:
         f3:b9:37:a6:8b:e7:46:44:6a:63:0a:b6:87:d4:20:c8:9c:5c:
         59:11:42:39:54:f8:88:05:a7:57:d4:c1:8a:ac:e5:ec:b4:85:
         bc:f1:49:88:4a:d8:ba:f5:5a:32:48:9f:8c:66:a2:37:ca:70:
         1d:1d:48:d1:fe:d6:20:87:85:e3:ce:3d:71:eb:14:9a:05:da:
         48:72:a4:0f:c7:41:b6:5c:08:cf:ea:44:9f:9a:f8:b3:b2:f2:
         f5:e6:49:66:42:85:66:01:24:5e:0d:db:b6:a6:35:c3:bb:0a:
         73:b5:0e:52:e2:9b:b9:60:be:1e:2f:c8:00:ec:bb:61:38:b9:
         65:33:0a:88:e8:ff:76:4d:b2:85:7b:f1:89:ec:1d:66:6a:5f:
         4f:3a:40:8a:d2:4a:e2:f7:e8:24:3b:23:17:d7:aa:9e:c0:63:
         b6:d2:ab:23:eb:28:77:50:0f:2d:22:ce:50:03:45:55:ad:97:
         56:fb:a2:a5:51:3b:fa:de:bb:95:e6:7f:fa:09:28:52:14:3b:
         9b:b0:de:75:6b:62:fb:1c:95:67:a9:c2:1c:14:0a:0b:f3:34:
         5e:45:b1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:11:20 2025 by rpki-client