Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft
File:                     FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft (raw, json)
Hash identifier:          JSuxumSTD+q92cz/Xd0Or55QLrZA3QZTlPGd1s2mPws=
Subject key identifier:   C5:0C:55:79:B5:62:D5:D0:80:D9:C3:65:D5:6F:DE:21:14:1C:D8:FE
Authority key identifier: 16:B4:3F:B8:7E:80:49:22:D1:C6:D0:7E:25:97:B6:1E:04:EE:17:F0
Certificate issuer:       /CN=16b43fb87e804922d1c6d07e2597b61e04ee17f0
Certificate serial:       01976DE2DEFA2F7502A8E4DC1475575CC5F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft
Manifest number:          158D
Signing time:             Sat 14 Jun 2025 10:01:14 +0000
Manifest this update:     Sat 14 Jun 2025 10:01:14 +0000
Manifest next update:     Sun 15 Jun 2025 10:01:14 +0000
Files and hashes:         1: FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl (hash: aCUmyy+IrPH1O6Wzwf6t6Mzut6YDTcpt+0SpN3ZaYcM=)
                          2: saj-6seGjxdmUbifeNJvW_LjaF8.roa (hash: O4b1y8+uTEcNwAuT2Vp3OrGxpFXzD30149NauyrIq/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:e2:de:fa:2f:75:02:a8:e4:dc:14:75:57:5c:c5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b43fb87e804922d1c6d07e2597b61e04ee17f0
        Validity
            Not Before: Jun 14 10:01:14 2025 GMT
            Not After : Jun 15 10:01:14 2025 GMT
        Subject: CN=c50c5579b562d5d080d9c365d56fde21141cd8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:29:9e:34:43:8d:27:c5:7f:20:da:0d:88:b4:
                    27:be:89:dc:d6:a4:9a:ed:f3:19:52:d1:07:82:98:
                    b5:58:68:07:1f:21:13:68:9b:3a:53:7a:fb:c8:9d:
                    01:14:6c:ea:0f:09:f8:9c:a2:f5:d2:e2:a3:ab:3a:
                    13:26:36:ac:1f:11:32:22:9d:41:c9:ab:d4:c8:0b:
                    38:d2:2a:3d:72:f3:ab:39:e3:0a:4b:86:a2:28:5c:
                    9a:f7:cc:7b:02:b8:2e:22:5f:e3:53:69:34:ba:a1:
                    37:21:4e:96:6e:21:a3:cb:78:69:ad:41:e2:31:13:
                    4e:ba:61:71:26:46:1c:08:db:43:57:4c:7a:c0:8d:
                    e2:fe:3a:f5:8c:c3:b2:46:62:13:76:85:60:62:bd:
                    ad:57:ac:99:b4:b4:e9:8f:bd:ac:89:8e:c7:73:fe:
                    bb:d1:6b:39:02:a4:85:0e:b1:47:95:17:16:d2:38:
                    fd:e6:4a:9e:ea:e1:19:b6:59:8c:25:38:69:bf:3c:
                    89:6c:97:08:93:ed:97:25:eb:dc:ce:12:f8:e2:e6:
                    bc:09:25:3f:74:e1:93:de:1c:40:62:c4:80:25:25:
                    6c:44:fb:9e:66:d1:52:a6:b4:56:9e:57:b5:76:9b:
                    75:bf:de:93:41:4b:92:66:f9:35:42:10:5a:56:b5:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0C:55:79:B5:62:D5:D0:80:D9:C3:65:D5:6F:DE:21:14:1C:D8:FE
            X509v3 Authority Key Identifier:
                keyid:16:B4:3F:B8:7E:80:49:22:D1:C6:D0:7E:25:97:B6:1E:04:EE:17:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:72:f6:75:6e:ba:86:c0:bf:7c:68:5c:30:f7:5b:8c:40:13:
         35:93:50:fa:98:9a:56:13:0e:b9:69:9a:22:d8:87:f1:d3:5a:
         d4:25:d7:da:ba:1a:12:82:4c:03:b6:c4:db:df:fe:65:fc:f8:
         69:9c:57:db:12:11:aa:b5:7e:45:aa:90:5f:33:c2:34:68:50:
         95:a1:8e:0b:3a:3c:30:11:e2:76:49:5f:82:b5:a0:5d:3d:cc:
         b2:7a:43:34:ca:ef:9e:81:52:e2:6c:e2:95:a7:4f:87:70:6b:
         42:d0:13:d6:d9:f8:75:2a:97:b7:61:17:27:f1:d8:28:b0:5b:
         8e:ab:7d:32:ac:e5:2b:33:f3:c9:21:36:40:f6:79:b3:f0:d8:
         87:1a:a2:79:99:b2:53:3c:e6:c4:d5:85:36:f5:a1:c5:59:f8:
         ef:29:a5:70:40:8d:96:fb:e2:2a:d5:f7:a4:0b:71:5a:e4:ec:
         97:a9:31:2a:9f:0e:d5:a8:cb:9e:c1:5a:14:77:b0:a6:dd:2a:
         b0:9d:fe:c5:60:73:05:8c:3c:54:b4:2f:b0:cb:2e:cf:bf:68:
         87:c4:69:f8:b8:63:fb:e2:d3:fb:dd:5d:5a:f9:de:97:f9:1b:
         1e:4d:6a:f9:5c:1c:e3:a5:94:01:71:6b:f5:43:75:d3:d9:65:
         b2:9b:f8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:54:52 2025 by rpki-client