Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
File:                     _FNNTENDzYmRiWnVbaGFZ0sWY1U.mft (raw, json)
Hash identifier:          6UBk409akoyVj7rdt5pqUp96AKknygtowv3rR2rJcVg=
Subject key identifier:   51:5E:64:AA:85:AC:03:76:B8:35:44:54:2B:1E:DA:50:46:98:06:B5
Authority key identifier: FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55
Certificate issuer:       /CN=fc534d4c4343cd89918969d56da185674b166355
Certificate serial:       0197B7B38872DA3E9813D5BACC1C80533847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
Manifest number:          0FB1
Signing time:             Sat 28 Jun 2025 18:01:25 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:25 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:25 +0000
Files and hashes:         1: _FNNTENDzYmRiWnVbaGFZ0sWY1U.crl (hash: B71fWOkTwh4M78jEO48U01WmiB0gsFQdYmxHg86r0jU=)
                          2: bjwBa29o8sLtvq0lB3wmXidRAXM.roa (hash: voja3TwiIQ0KziGC7wSgsvdSwQWHXLdVHcxuiguvZGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:88:72:da:3e:98:13:d5:ba:cc:1c:80:53:38:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc534d4c4343cd89918969d56da185674b166355
        Validity
            Not Before: Jun 28 18:01:25 2025 GMT
            Not After : Jun 29 18:01:25 2025 GMT
        Subject: CN=515e64aa85ac0376b83544542b1eda50469806b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d0:b5:6f:9d:ae:5f:d0:de:58:e9:b3:6a:1c:
                    57:2e:49:29:7a:ee:b5:2e:aa:3f:c0:72:f4:13:2c:
                    f3:e9:cf:b0:07:ec:44:1b:e6:2a:02:7b:5c:20:53:
                    3e:75:93:09:fc:a5:67:6e:c0:8b:77:0b:f6:f4:4d:
                    e2:66:3f:fc:37:9b:c9:ad:18:42:3e:15:35:9e:fc:
                    33:26:b5:56:1b:08:b9:37:65:9f:5e:ba:66:90:7c:
                    39:a9:10:24:34:42:43:19:65:39:73:de:9b:93:db:
                    fc:a0:bc:c2:ba:ba:ad:67:0c:4a:82:6b:13:72:64:
                    71:c5:e2:46:c5:a8:b6:22:86:1e:d4:4f:cf:cd:5b:
                    1a:8b:82:0e:d9:dc:d2:9a:05:e3:e7:47:5c:41:44:
                    8c:31:b8:75:bd:3a:18:62:db:41:ed:14:44:54:e3:
                    8f:f9:12:34:e3:12:cf:52:10:2b:ef:26:d3:0d:86:
                    6a:18:77:43:64:7e:45:7a:f9:a9:90:e5:f2:f6:a1:
                    d6:f5:44:99:c4:10:eb:90:66:92:58:f2:66:52:27:
                    4d:14:bc:38:6f:2e:67:34:31:9c:d6:e1:b7:2c:ed:
                    50:3f:72:88:36:e5:b1:97:0f:8b:0d:ba:e5:d6:e7:
                    1e:32:9e:cf:08:e8:b5:be:57:50:58:0b:a0:a3:58:
                    71:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5E:64:AA:85:AC:03:76:B8:35:44:54:2B:1E:DA:50:46:98:06:B5
            X509v3 Authority Key Identifier:
                keyid:FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:82:74:64:5f:20:5e:6c:81:77:cf:31:a7:30:2d:27:74:21:
         3d:88:b9:0f:e3:68:39:64:64:83:d0:84:7d:80:8d:be:7d:95:
         4c:94:d3:87:c1:b3:f4:1b:23:78:78:95:e2:a4:fd:6d:fb:32:
         5d:3d:c5:f8:37:32:1e:41:9a:8f:3a:0d:74:22:ad:e1:36:b4:
         88:89:1b:6b:24:2d:4d:26:ab:5a:4f:75:62:3c:1c:7c:57:f4:
         68:fc:9a:83:5e:2b:27:6c:fc:9a:3e:65:2f:54:b7:0b:4b:79:
         00:a7:31:64:e7:1d:21:09:bb:1b:eb:4e:aa:db:e4:3f:06:6c:
         9e:b6:fd:a8:17:34:5b:ad:cb:fa:d9:5f:94:c3:6f:6c:9a:ee:
         e7:82:44:f0:bf:04:e3:73:88:42:78:47:03:c8:2b:2b:50:aa:
         ea:53:9d:3e:7d:2e:7a:c2:32:7c:5f:d4:1b:22:6a:6a:bc:6f:
         1c:96:6d:7e:96:99:30:11:3f:25:de:69:20:40:eb:cf:64:de:
         80:3b:dc:e5:3c:6b:3a:f9:45:0e:23:2c:90:2f:58:2a:47:9f:
         4a:b5:c1:b0:38:12:ea:f5:26:7f:fd:31:76:42:fe:b2:3f:c3:
         e7:b5:18:86:a8:db:ca:41:8c:4b:05:53:26:5f:b7:9e:4b:b7:
         d0:0b:47:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:20:24 2025 by rpki-client