Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
File:                     FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft (raw, json)
Hash identifier:          tFLBcVxPS/Vx+nkuTaAvI0ukoBsKqRtD/pAgmMLEajc=
Subject key identifier:   3F:08:C0:48:4B:D4:71:EB:57:9F:97:A1:14:D2:36:A0:96:33:C9:8D
Authority key identifier: 14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41
Certificate issuer:       /CN=147341d30575144be32cd7c8e3ebd4c6329a3141
Certificate serial:       0196DB5424BE7B16FF7F0E53FB7F45431FB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
Manifest number:          12BF
Signing time:             Fri 16 May 2025 23:00:46 +0000
Manifest this update:     Fri 16 May 2025 23:00:46 +0000
Manifest next update:     Sat 17 May 2025 23:00:46 +0000
Files and hashes:         1: FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl (hash: UP/O5S5eL9mkVfWgGeXQdxVRCGsjBqAp8JK3JsdMA34=)
                          2: _0Ovr-P6Apyo_tveovy4IKn6bqU.roa (hash: ocYJ6sP+UnlpINi5qB4yLeRqouA2cf9W4NHegtvwt7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 23:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:db:54:24:be:7b:16:ff:7f:0e:53:fb:7f:45:43:1f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=147341d30575144be32cd7c8e3ebd4c6329a3141
        Validity
            Not Before: May 16 23:00:46 2025 GMT
            Not After : May 17 23:00:46 2025 GMT
        Subject: CN=3f08c0484bd471eb579f97a114d236a09633c98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bd:d9:21:58:7c:1f:d9:92:79:c7:4f:cb:c9:
                    26:f8:10:5c:f2:d0:63:2e:c4:2f:77:e2:90:d8:f7:
                    73:56:eb:bd:87:b8:11:6f:99:43:aa:26:43:88:31:
                    40:6f:e9:a9:53:25:7c:f5:9d:df:3b:9d:de:42:3b:
                    18:72:97:ed:7a:22:50:03:e8:de:53:f4:39:99:5a:
                    45:d0:07:a6:cf:ad:73:78:7f:dc:41:ae:14:5b:d0:
                    b8:ca:5e:4c:3b:91:14:fa:c5:28:6a:4d:9d:22:70:
                    9f:bc:76:ba:8b:2e:f2:9e:45:ec:8b:b9:83:05:34:
                    dc:21:fd:4f:3e:6c:7a:3e:15:cb:1c:eb:71:3e:69:
                    ef:ec:28:72:1c:4a:ab:f6:17:9d:b9:bc:00:ce:eb:
                    ce:12:df:60:ee:6d:fd:bd:9e:0a:58:f7:4a:4a:b7:
                    c4:47:2c:08:61:10:28:71:e7:69:93:4a:1a:17:59:
                    59:48:38:7b:2d:fb:37:81:ba:05:3e:e1:84:ae:b1:
                    9a:e5:f3:57:13:54:ae:0a:8e:69:24:14:ce:0c:49:
                    c2:35:69:be:33:69:c8:ee:4c:d8:cd:63:f4:35:16:
                    78:77:4f:6c:df:2a:40:73:bd:99:26:b7:8d:82:d1:
                    49:ba:d0:b7:68:cf:0d:b1:7e:73:49:01:6c:5d:a8:
                    fb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:08:C0:48:4B:D4:71:EB:57:9F:97:A1:14:D2:36:A0:96:33:C9:8D
            X509v3 Authority Key Identifier:
                keyid:14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:72:b8:33:bc:e0:50:d4:da:95:8d:ec:9c:76:23:46:e2:f1:
         73:fd:6b:89:41:2e:40:ce:9b:01:83:de:1a:88:17:a0:34:ab:
         24:60:6b:23:eb:ba:51:ca:43:9b:63:13:5c:a1:3e:6f:d8:0f:
         da:f4:a7:4d:4e:44:c4:d4:59:3c:cd:aa:10:73:ba:b0:b9:b9:
         b5:8e:84:da:d4:3c:f8:c7:e7:14:20:a9:47:c4:b2:8d:c8:2e:
         d7:ea:49:ca:3f:4d:af:4d:02:0a:2e:75:cf:f4:d9:c6:a0:21:
         fb:c2:b6:64:98:cd:20:06:59:0f:41:99:0a:91:f2:77:72:78:
         15:61:f4:74:3f:b3:21:a6:58:0d:0b:e4:b0:9f:95:c5:b3:fc:
         a9:1c:ab:42:a2:8f:28:3a:16:9c:7e:87:a4:63:ae:a7:36:1c:
         df:ff:6f:89:93:fc:a9:c4:fa:30:e0:50:ee:63:3a:20:16:4f:
         5a:87:ee:de:2b:07:96:98:36:87:ef:1c:3d:d4:a9:6c:eb:2c:
         52:98:05:4f:b0:bd:b7:1f:88:01:29:7d:1d:94:4f:5e:a2:5a:
         cc:4a:d7:61:4c:b0:d3:87:a7:e4:26:92:4e:8e:b2:bc:04:bd:
         4f:18:1d:1d:be:5f:5d:ae:c7:c2:53:4e:73:5b:ce:35:74:0b:
         12:74:1e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:28:54 2025 by rpki-client