Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
File:                     fWNA43zPwSrrqsKl8z1F6gqIeoo.mft (raw, json)
Hash identifier:          f2vn0ZZ57LHIyJq8cA00MsZCmj/i1KirIp0UlfWKBLw=
Subject key identifier:   FC:E6:25:05:51:29:C7:08:93:C5:2E:DB:CF:4F:A5:3B:C6:ED:36:E9
Authority key identifier: 7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A
Certificate issuer:       /CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a
Certificate serial:       0196C94DC63295A3CDCD0C5DB7A41763D70E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
Manifest number:          0F83
Signing time:             Tue 13 May 2025 11:00:39 +0000
Manifest this update:     Tue 13 May 2025 11:00:39 +0000
Manifest next update:     Wed 14 May 2025 11:00:39 +0000
Files and hashes:         1: fWNA43zPwSrrqsKl8z1F6gqIeoo.crl (hash: xQpXxLD5lmVcnU8r+R5spzeE0Xcqg8NS1C2/iTU5tNk=)
                          2: jRJwX_ZKuADln4pES5WgoVS__88.roa (hash: K3aJVjlqhUCHgSM5vEOmY3eFV+XqReoMzhLc+qeCd0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 11:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:4d:c6:32:95:a3:cd:cd:0c:5d:b7:a4:17:63:d7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a
        Validity
            Not Before: May 13 11:00:39 2025 GMT
            Not After : May 14 11:00:39 2025 GMT
        Subject: CN=fce625055129c70893c52edbcf4fa53bc6ed36e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ba:f8:64:1f:66:20:1b:91:26:36:d5:da:28:
                    45:0f:f1:45:1a:17:69:6d:5d:ca:2b:9c:83:7a:79:
                    22:e6:b3:13:59:a3:f9:ff:29:df:dd:a0:f2:03:ae:
                    3d:89:3e:10:73:eb:2c:b7:a8:b1:cf:f5:f5:3b:22:
                    aa:f0:13:0b:49:4f:b1:03:67:ef:63:7f:4d:f1:8e:
                    29:b3:46:10:86:c1:ea:cb:4a:6d:39:9b:fa:ec:ba:
                    b5:64:f6:9c:9b:0d:9a:63:7e:06:09:16:60:31:b6:
                    e5:eb:7a:cc:79:9f:45:36:9f:2a:40:91:56:28:09:
                    d9:55:d3:91:da:da:be:31:2e:e3:85:fa:f5:f1:e5:
                    f8:8e:35:c6:ca:5c:f7:92:d1:65:c9:58:ef:b4:96:
                    21:77:c9:3c:af:4f:69:7b:b6:45:1e:c0:06:b9:77:
                    02:37:ee:85:4b:96:36:45:d7:29:2f:99:75:91:0a:
                    e8:49:ed:e2:6b:6b:bb:c4:61:70:44:26:03:08:85:
                    d0:6b:dc:e8:98:ea:b0:11:58:3d:e1:bc:d4:c4:5c:
                    32:6e:2b:76:46:1c:ab:9b:71:52:6b:c7:8d:f7:dd:
                    31:8b:7e:b1:63:d0:70:0e:28:bf:55:24:ca:72:16:
                    93:84:5e:f6:c1:c3:64:99:35:80:58:63:24:6a:ab:
                    78:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E6:25:05:51:29:C7:08:93:C5:2E:DB:CF:4F:A5:3B:C6:ED:36:E9
            X509v3 Authority Key Identifier:
                keyid:7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:7f:83:8a:14:11:19:48:c0:bf:a7:1f:3b:e5:a2:7b:85:7c:
         bd:e2:2a:e7:d9:cc:f2:46:8c:7c:42:ec:47:92:e7:ad:3f:5d:
         9e:34:f4:40:38:db:1a:87:7c:a3:0f:39:43:06:17:70:88:e2:
         85:73:fc:f9:87:6d:79:63:11:1a:eb:30:a5:51:08:a2:a6:6c:
         7f:b5:97:e1:56:16:cd:18:d4:c3:54:ce:8a:17:d1:79:ef:c9:
         d0:88:1c:16:93:57:2a:fe:c3:22:67:23:af:fe:10:da:0d:c5:
         e0:76:fc:07:ce:8e:18:09:b4:f7:f0:0a:15:80:d4:29:04:14:
         fe:e1:19:08:bf:42:41:de:0b:8d:8b:59:93:3d:31:f1:07:fc:
         f5:3c:84:12:11:c5:da:51:3a:ff:91:8e:34:11:e6:21:94:aa:
         34:61:c8:0c:d3:2f:68:28:2a:8a:46:65:c1:ad:f5:99:35:b7:
         f7:ba:3a:f5:86:b9:b5:71:4e:c8:db:be:7b:ea:c4:f9:8d:8d:
         e2:20:d6:8b:0c:b8:79:50:d1:98:4d:44:32:6e:d7:9f:89:df:
         d1:78:81:3b:0d:8a:14:82:73:95:21:1a:14:49:82:43:93:d7:
         3a:21:2d:7f:73:55:9d:dd:4d:ff:61:5a:da:28:88:7c:32:90:
         98:3e:b4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:26:46 2025 by rpki-client