Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.mft
File:                     Fjndvg_zoYcM20VQmNxC-s_VSfU.mft (raw, json)
Hash identifier:          bM6AXVkk5Img5qniR9uhEeKcWncdmiglfxc/aZ1K5Mk=
Subject key identifier:   68:38:E8:59:FE:F8:93:04:3A:F0:9C:1B:78:CC:CA:7E:55:22:8A:54
Authority key identifier: 16:39:DD:BE:0F:F3:A1:87:0C:DB:45:50:98:DC:42:FA:CF:D5:49:F5
Certificate issuer:       /CN=1639ddbe0ff3a1870cdb455098dc42facfd549f5
Certificate serial:       01976F2C772AEFCE752E6F0FC06A726C919C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fjndvg_zoYcM20VQmNxC-s_VSfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.mft
Manifest number:          09FA
Signing time:             Sat 14 Jun 2025 16:01:14 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:14 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:14 +0000
Files and hashes:         1: Fjndvg_zoYcM20VQmNxC-s_VSfU.crl (hash: V8R2d2fjTPUbYX/465xgtd3ZmY4AEOkNRX9xpU5Us8k=)
                          2: _AaogpvsZ_kHaJAoO7eUxP8H-zY.roa (hash: a3qZI1EQuEaQg0ZHFbrz5Ccf6fiwQDzr5b8C2ZRATT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fjndvg_zoYcM20VQmNxC-s_VSfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:77:2a:ef:ce:75:2e:6f:0f:c0:6a:72:6c:91:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1639ddbe0ff3a1870cdb455098dc42facfd549f5
        Validity
            Not Before: Jun 14 16:01:14 2025 GMT
            Not After : Jun 15 16:01:14 2025 GMT
        Subject: CN=6838e859fef893043af09c1b78ccca7e55228a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:13:a6:8f:35:d8:80:b2:e0:81:48:da:b3:72:
                    3d:ca:a1:fd:45:85:51:b3:3b:36:02:df:b1:31:aa:
                    f2:99:e6:12:90:a2:c7:da:d1:49:5d:bd:62:a6:b4:
                    46:95:11:83:f2:8c:81:2d:40:2d:b9:1d:a5:ff:db:
                    f6:f3:23:ba:d7:b9:87:59:fa:83:b0:87:48:58:90:
                    38:39:55:b3:54:18:1f:76:d5:ce:f0:46:0f:7c:18:
                    83:93:69:a0:ab:eb:52:c3:66:14:81:9d:85:33:e6:
                    7f:4e:0c:fb:87:28:18:82:f6:90:10:32:dd:75:2e:
                    7f:1e:3c:54:82:98:77:93:15:a6:90:35:50:50:81:
                    66:a5:b1:da:07:89:9f:52:d8:71:22:9a:37:2c:3d:
                    8e:60:d3:90:a9:99:6e:2b:8f:20:db:16:30:88:fa:
                    0b:ce:98:f4:fd:6c:93:2d:95:84:a6:ba:eb:a5:6f:
                    b3:55:6f:eb:7d:ce:86:60:80:e3:0a:cd:5f:47:ed:
                    14:ee:32:50:03:23:65:c9:8f:b2:44:29:42:b8:fe:
                    41:c2:05:02:01:a9:38:bc:9b:4b:ed:73:66:39:b6:
                    4e:04:0b:52:93:ca:2f:cb:ed:6f:0e:82:a8:8c:5b:
                    94:bd:35:24:8c:78:4d:0a:4e:5f:a5:d4:83:5d:f0:
                    e8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:38:E8:59:FE:F8:93:04:3A:F0:9C:1B:78:CC:CA:7E:55:22:8A:54
            X509v3 Authority Key Identifier:
                keyid:16:39:DD:BE:0F:F3:A1:87:0C:DB:45:50:98:DC:42:FA:CF:D5:49:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fjndvg_zoYcM20VQmNxC-s_VSfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:14:2c:d6:02:2c:bd:06:16:5f:f1:43:37:69:08:77:ab:90:
         7b:dd:45:8b:a0:d0:ca:a9:de:af:fe:52:73:00:a1:82:f0:45:
         3b:9a:6b:04:8b:e1:79:ce:bf:b2:a3:dc:d1:af:a2:35:70:b2:
         95:ca:14:1a:9d:df:84:da:f1:36:49:6e:9f:f8:29:86:90:09:
         d7:08:93:b9:ca:49:32:03:06:32:78:18:b7:44:60:b4:e0:96:
         ee:52:eb:a9:03:41:a9:19:25:65:bd:ac:77:93:aa:ef:f5:5b:
         80:a0:dc:cf:c9:e9:dc:66:0f:e7:e8:75:86:03:a4:ff:bc:2a:
         f0:c1:e3:ed:76:f9:65:da:22:87:18:1f:4b:7b:bc:f1:07:63:
         90:d1:47:a1:ad:b4:17:90:d4:6b:c6:18:7f:4a:4b:73:3d:28:
         19:31:e5:07:00:26:b5:3a:9e:05:71:53:6a:9a:94:fe:c0:fd:
         78:1b:e1:ef:db:6a:49:ab:3d:f3:08:f3:fc:5c:20:00:05:b1:
         6a:93:51:e6:75:d6:21:72:20:86:35:19:06:4d:50:d1:13:63:
         64:b0:85:56:6a:06:ff:22:82:dd:07:6d:b5:bb:c7:41:50:97:
         f1:59:de:42:4d:47:4c:5d:2a:65:af:7c:75:c4:77:06:4b:47:
         b1:8e:88:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:11:37 2025 by rpki-client