Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft
File:                     ffgoIInih2ZRITPUI2r0FaN709I.mft (raw, json)
Hash identifier:          1n7/MgvdSrr+nUaSrhvG+zMP5k9S7FyehPCNPGUDagk=
Subject key identifier:   77:38:9A:02:CB:99:1E:B6:DC:BF:15:FF:07:1C:29:FB:82:10:06:76
Authority key identifier: 7D:F8:28:20:89:E2:87:66:51:21:33:D4:23:6A:F4:15:A3:7B:D3:D2
Certificate issuer:       /CN=7df8282089e28766512133d4236af415a37bd3d2
Certificate serial:       0197B820DA71627401EB97879A25C1B7957A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffgoIInih2ZRITPUI2r0FaN709I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft
Manifest number:          02F6
Signing time:             Sat 28 Jun 2025 20:00:50 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:50 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:50 +0000
Files and hashes:         1: ffgoIInih2ZRITPUI2r0FaN709I.crl (hash: gPkgWZzAwHEK3D53DZN7GyepmdLbFImOcD1bNsmSqA4=)
                          2: ig1FgJHLmhVp1HtQnDRiBOwALfo.roa (hash: IlHHwWSfIB2n4wpeo6hZD+s1jPc54zsXsSO0r9HX6WY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ffgoIInih2ZRITPUI2r0FaN709I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:da:71:62:74:01:eb:97:87:9a:25:c1:b7:95:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df8282089e28766512133d4236af415a37bd3d2
        Validity
            Not Before: Jun 28 20:00:50 2025 GMT
            Not After : Jun 29 20:00:50 2025 GMT
        Subject: CN=77389a02cb991eb6dcbf15ff071c29fb82100676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:13:a3:bd:bf:2c:97:84:ca:d9:d9:fb:c3:
                    e3:27:af:ac:19:d8:6e:bf:dc:e1:17:5c:0e:44:d6:
                    36:bc:18:d1:5e:36:b9:d4:52:4e:15:07:73:2c:f3:
                    53:f5:0c:23:79:e4:bb:7a:8a:1d:53:23:53:b0:14:
                    59:99:58:2e:95:be:a0:1c:72:21:1e:71:cc:6d:8d:
                    fd:74:7f:0f:1d:a1:12:a4:d2:33:eb:46:4c:cb:08:
                    73:ca:71:05:6a:12:73:08:b1:12:51:f7:d3:3c:26:
                    4b:94:1a:d9:9e:89:4e:4e:e7:ef:e8:22:9b:13:0c:
                    91:68:c0:c8:02:12:46:ee:1d:c4:e3:7c:d5:d8:3c:
                    4a:ec:f5:d6:4d:c3:14:7c:50:45:2f:5d:d4:44:a6:
                    ed:c3:05:cf:58:e2:19:bf:04:90:1a:52:54:9e:b0:
                    8a:d9:1d:71:37:37:96:ec:71:2f:55:0f:b6:f8:cc:
                    86:f6:2b:dd:c2:e3:bf:ab:43:9d:72:0f:06:6a:eb:
                    15:b5:a6:a1:fd:dc:a8:cf:b7:bd:26:74:71:28:de:
                    ca:09:1b:72:ea:62:3c:76:7f:57:47:3c:ee:64:d8:
                    8b:82:27:67:fb:6a:cf:1b:5b:d5:a1:d5:01:64:46:
                    02:1a:9d:8b:c6:f6:bf:c7:c9:15:04:bf:e0:08:57:
                    60:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:38:9A:02:CB:99:1E:B6:DC:BF:15:FF:07:1C:29:FB:82:10:06:76
            X509v3 Authority Key Identifier:
                keyid:7D:F8:28:20:89:E2:87:66:51:21:33:D4:23:6A:F4:15:A3:7B:D3:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffgoIInih2ZRITPUI2r0FaN709I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:0e:b0:20:be:ce:aa:22:12:86:20:f2:48:bf:3c:b1:0a:5e:
         dc:bd:d2:5a:66:40:af:87:93:97:b7:85:7a:e2:24:0e:10:c9:
         24:84:65:76:bf:0d:cc:25:64:42:b4:03:83:e0:b0:30:44:95:
         de:73:98:ae:cd:77:84:4d:e9:fb:76:b7:55:9b:42:4c:b5:2a:
         67:c2:8f:88:d1:31:05:3c:24:9a:da:71:7a:3e:1f:a0:5b:48:
         22:92:42:38:06:46:43:98:9c:67:13:bd:90:36:e0:ec:56:01:
         fb:88:6e:ef:56:bb:a2:06:71:a1:30:3b:bc:72:ad:83:b6:9f:
         cd:1b:4a:52:89:df:be:95:5b:0f:dd:73:93:9c:df:73:d6:26:
         32:c0:7e:b2:c6:58:1f:16:e8:b7:c7:c8:9f:7e:ad:f8:28:af:
         d5:98:26:fe:e0:4d:f0:bb:9e:17:07:61:8f:fe:29:68:96:81:
         e5:7c:4f:ce:18:30:4c:98:d8:fe:cd:e0:ff:8f:9d:16:74:e0:
         f6:8d:36:ed:00:27:78:ec:8f:74:7c:dd:c9:04:4b:b9:e0:d2:
         c3:16:25:41:77:de:5e:68:fd:0a:c8:94:0b:6e:b0:6f:9e:63:
         23:6c:e0:ce:0c:fd:60:5b:5a:ff:e6:33:b3:52:03:40:8b:4c:
         75:67:3d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:13 2025 by rpki-client