Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
File:                     F2MhQoAFWkfetVT-nLKNwMF5IwI.mft (raw, json)
Hash identifier:          tt3eByWVkjd6TE48RybfMt2OCoHMrMCnf4Tw6WMcyys=
Subject key identifier:   B1:5F:9D:31:4B:08:91:49:E4:59:22:3C:36:01:39:12:F8:DA:57:11
Authority key identifier: 17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02
Certificate issuer:       /CN=1763214280055a47deb554fe9cb28dc0c1792302
Certificate serial:       0197B74543E39A52AB8D96A4AE8D45531BDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
Manifest number:          0C48
Signing time:             Sat 28 Jun 2025 16:00:59 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:59 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:59 +0000
Files and hashes:         1: F2MhQoAFWkfetVT-nLKNwMF5IwI.crl (hash: 2eE4lxgH3pfkVbuyqL0hXWg1EbtM1OMQsBLBuzhIu5M=)
                          2: hVP7z7lmWoj5TlYxPEh7DnVK9VA.roa (hash: pMZmMKo2i/xc9OMa6Id6srmN8nXi279oYUGsaAWOPus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:43:e3:9a:52:ab:8d:96:a4:ae:8d:45:53:1b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1763214280055a47deb554fe9cb28dc0c1792302
        Validity
            Not Before: Jun 28 16:00:59 2025 GMT
            Not After : Jun 29 16:00:59 2025 GMT
        Subject: CN=b15f9d314b089149e459223c36013912f8da5711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:04:3a:44:ee:78:c6:85:c9:21:fe:5d:e0:
                    82:2f:5e:79:5f:61:32:c6:27:60:9f:6d:35:2e:81:
                    84:be:12:4d:65:34:4e:09:32:de:40:a5:b6:82:ac:
                    4f:0a:e0:7d:fe:dc:09:8e:88:a4:8e:09:20:cc:28:
                    57:6b:84:1c:18:f4:c5:dc:0d:38:51:d8:ea:5a:af:
                    3f:d7:99:29:a3:2f:ef:3c:fb:3f:fb:c9:14:57:47:
                    f5:f0:b9:fb:5f:a8:43:84:28:0e:da:ac:b6:d7:61:
                    22:19:4b:48:4b:a7:3c:96:be:eb:f0:3c:2a:9a:e6:
                    b3:74:8a:d8:59:0b:50:62:76:a2:d1:bb:04:a4:c7:
                    0c:03:2c:4a:19:3b:65:28:66:9e:db:6e:7d:a0:00:
                    93:90:b9:7d:cb:e9:02:8a:5c:c7:88:2e:fd:df:fc:
                    21:53:8a:96:6a:8e:71:2b:08:e8:e8:b6:ee:58:d5:
                    93:71:70:73:e7:06:f5:c0:e1:e5:d4:f8:cc:36:b0:
                    12:70:4e:ac:85:72:5b:9d:9a:9d:4c:96:63:b0:75:
                    f2:5d:1c:5f:65:78:f9:51:b0:4a:38:c1:4a:c6:f9:
                    e1:8e:13:44:09:06:f8:82:b3:5d:fe:89:de:93:be:
                    6f:bc:7a:cd:ee:51:04:bb:6d:a3:7d:0c:70:ba:5a:
                    c5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5F:9D:31:4B:08:91:49:E4:59:22:3C:36:01:39:12:F8:DA:57:11
            X509v3 Authority Key Identifier:
                keyid:17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:71:6f:d3:3a:0e:72:78:43:a1:c4:1d:83:c8:2c:44:41:c6:
         ed:73:54:b0:4e:fe:ea:88:97:31:ef:01:0b:94:8d:10:e7:2c:
         37:d6:a1:57:07:4f:24:61:72:9f:7f:2c:21:fb:f1:61:22:4e:
         92:08:7c:f6:5e:58:2b:c4:5b:0f:bf:31:07:1f:e5:1f:90:46:
         26:83:09:e4:7b:1d:92:ec:b3:2b:ce:32:30:3d:26:b7:cd:d0:
         c9:7f:36:98:63:f6:85:e4:77:ae:fd:47:f0:f7:6e:fe:eb:27:
         18:08:25:7d:01:ec:02:f7:c7:00:4e:b4:f9:be:61:af:47:38:
         89:a9:4b:67:fa:df:94:14:ed:c9:be:08:9d:93:30:d3:fc:62:
         dd:ac:71:7b:ea:10:47:b3:74:41:74:66:86:57:2c:22:21:72:
         46:11:1e:5b:cb:e6:ec:c6:f7:3c:cd:d3:98:98:1c:e3:81:d1:
         6e:86:8e:ea:70:91:62:dd:18:26:c3:b2:6a:8a:b2:cd:fd:01:
         a9:71:79:30:54:bf:2a:6a:9e:12:a3:c2:78:20:74:81:bd:09:
         f7:b9:9e:4b:ab:7d:7d:7d:3f:60:8b:d8:79:d0:0f:56:51:7f:
         ba:8c:54:cb:fc:3f:f1:8b:21:58:85:23:bd:f7:c0:28:93:ba:
         d4:4b:40:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:18 2025 by rpki-client