Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
File:                     _PyV8biAEebcM9BBuYsxMHdsQo8.mft (raw, json)
Hash identifier:          ENndAvdfBQxGjQDPjYvpVt0WnkxFAzxGyRJck5wBZ+Y=
Subject key identifier:   36:CE:F1:D1:28:9F:8B:CC:C3:E3:2F:F7:A6:62:5A:02:A3:76:BF:9D
Authority key identifier: FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
Certificate issuer:       /CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Certificate serial:       0197684E0A76898F3AD551D47E102623EDD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
Manifest number:          06FF
Signing time:             Fri 13 Jun 2025 08:00:34 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:34 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:34 +0000
Files and hashes:         1: _PyV8biAEebcM9BBuYsxMHdsQo8.crl (hash: BtHliZtLHfORESCuFAXzelZPwjvla9U67suqsGBML4U=)
                          2: wbsu-F9aDLpOh1E-iGGerHKMETE.roa (hash: 4WuiCYXkI7bOEQ/qzC3UfWfQ5q7CLtdWh5T4lSpp9Nw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:0a:76:89:8f:3a:d5:51:d4:7e:10:26:23:ed:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
        Validity
            Not Before: Jun 13 08:00:34 2025 GMT
            Not After : Jun 14 08:00:34 2025 GMT
        Subject: CN=36cef1d1289f8bccc3e32ff7a6625a02a376bf9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:07:8f:bf:64:8e:f6:08:36:1f:4d:3e:87:78:
                    fb:ff:88:67:33:c9:e7:da:19:97:23:8f:62:17:c5:
                    49:09:7b:50:cc:06:88:a1:c6:fe:14:43:a9:16:c7:
                    75:3d:c3:80:fa:06:e1:d0:91:a2:c2:5b:ab:b5:29:
                    5d:10:6d:b1:19:f6:2a:f3:e6:23:05:cf:fe:4e:ef:
                    c9:fb:0a:04:58:84:f0:a0:66:dd:82:a4:19:58:56:
                    cb:e4:06:ad:46:a2:27:89:c7:61:01:38:fe:ce:3e:
                    cd:27:d4:20:b5:c3:99:a4:8e:4c:a1:26:e8:70:97:
                    d7:24:f7:1f:2d:9b:7c:b7:dc:c0:5f:2a:47:05:38:
                    b4:dc:c8:36:d4:e9:ce:df:a0:b2:53:c0:5a:3e:73:
                    d9:1a:51:9b:e9:ce:4d:d9:d0:38:a9:98:5d:0a:a3:
                    6c:bb:ee:ad:6b:4e:00:a0:19:fd:ee:60:90:30:f0:
                    e6:cb:99:25:9a:b1:0e:e4:a6:24:15:75:e0:c8:e6:
                    84:b3:29:01:84:07:82:be:0b:f4:74:7d:b2:32:97:
                    b8:0a:ae:fc:95:ce:10:b5:a1:8b:c1:08:a1:38:87:
                    f3:1e:29:0f:b5:43:45:bf:65:a6:36:e3:a8:2e:a0:
                    bd:ed:04:4f:6e:f5:dd:4c:d8:3c:62:4b:4d:f0:48:
                    1e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CE:F1:D1:28:9F:8B:CC:C3:E3:2F:F7:A6:62:5A:02:A3:76:BF:9D
            X509v3 Authority Key Identifier:
                keyid:FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:7f:da:8d:ad:89:b7:bd:cb:b6:bc:b3:22:e8:c3:b9:62:3d:
         38:23:e3:c8:84:e3:6b:61:5d:b4:1a:da:31:76:b5:da:14:fa:
         b0:15:4b:da:dc:a8:f9:01:34:fc:fb:9a:c0:74:00:b6:47:57:
         5c:54:be:6a:f8:24:5e:85:f8:9f:88:92:73:28:bb:50:a2:18:
         23:08:00:8e:f9:69:52:ad:95:de:24:73:c6:e7:ee:e1:6e:a1:
         b8:36:d9:f7:ee:40:c4:35:78:b2:f5:70:8d:8d:95:24:45:12:
         22:46:31:3e:53:ff:8b:2c:e2:d9:b4:88:a2:20:f5:28:01:98:
         a5:ec:28:b8:6c:62:9d:a1:02:d5:27:63:4a:1e:3f:d8:73:f6:
         17:d3:01:2d:1b:de:0b:dd:b1:9a:aa:9c:f9:b7:56:19:d9:8a:
         7b:c3:42:0a:f5:71:18:ff:e6:50:fc:16:88:5a:8c:a5:7b:cf:
         4b:26:fc:39:6a:39:94:9d:24:e3:d0:33:fc:aa:63:58:40:9d:
         60:dd:a3:c3:4f:2b:c7:c0:f2:da:83:cd:2e:b3:a2:a4:c4:d7:
         2a:b5:0c:c8:7c:f9:8d:1b:aa:08:d3:5b:eb:00:bb:47:16:53:
         46:1b:0c:7e:cb:cc:3f:58:df:1f:33:18:b8:37:f6:8f:70:f0:
         1f:11:35:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:16:32 2025 by rpki-client