Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
File:                     fpCf6oHjmP7ZMEndegB-_WlzVWM.mft (raw, json)
Hash identifier:          oz3W5gY34Aw+jtT5bK7dq9T7+er3222DseTVmzV1DkM=
Subject key identifier:   FE:ED:4F:D3:FC:D4:09:EA:37:38:0F:A1:22:DA:B4:CD:43:B4:F4:46
Authority key identifier: 7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
Certificate issuer:       /CN=7e909fea81e398fed93049dd7a007efd69735563
Certificate serial:       01969D19729F1184B1F62E6170F0CC017A1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
Manifest number:          0B16
Signing time:             Sun 04 May 2025 21:00:12 +0000
Manifest this update:     Sun 04 May 2025 21:00:12 +0000
Manifest next update:     Mon 05 May 2025 21:00:12 +0000
Files and hashes:         1: WCe1OXd2fAiJz2bGRLY2dHMiVAs.roa (hash: XasTDlDBbIh1cL69G7L/yxnH5MsXPkwslxjCA22OVkQ=)
                          2: fpCf6oHjmP7ZMEndegB-_WlzVWM.crl (hash: grkZO+HomyLYLneC31quR3WP8+xQE+qXf/+uTV9p970=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 21:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:19:72:9f:11:84:b1:f6:2e:61:70:f0:cc:01:7a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e909fea81e398fed93049dd7a007efd69735563
        Validity
            Not Before: May  4 21:00:12 2025 GMT
            Not After : May  5 21:00:12 2025 GMT
        Subject: CN=feed4fd3fcd409ea37380fa122dab4cd43b4f446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2b:39:c0:99:f3:65:12:31:82:d2:eb:32:e5:
                    f4:01:a4:35:19:36:3d:ed:34:5c:88:09:4d:61:86:
                    d2:d0:ee:a7:6e:6c:e4:d8:97:0a:0e:59:1b:c0:b6:
                    7f:7a:28:29:6c:4e:ad:71:64:97:e8:9a:7b:36:8b:
                    08:85:74:c4:ae:3e:6a:74:c9:7b:b4:93:14:69:58:
                    f0:10:d0:82:e5:bc:e7:64:d0:de:c8:93:d6:7e:5b:
                    ed:44:01:0c:c7:01:05:11:5b:f2:20:14:0c:2c:f3:
                    47:46:6b:92:db:29:b1:4b:a1:dd:54:ca:ec:51:1f:
                    dd:89:15:0d:79:a2:49:ed:db:8b:94:61:f2:58:23:
                    7d:32:7c:16:2c:58:2d:44:60:36:80:4c:2d:c6:bf:
                    2a:69:d0:2b:4f:14:4b:61:aa:1e:c6:66:12:5d:ca:
                    5d:a7:1c:f0:d2:ed:d8:33:49:81:01:13:12:fa:07:
                    bc:40:d9:d3:ed:e8:fe:44:82:92:61:34:90:4f:40:
                    a4:ef:87:84:c7:ae:e6:16:7b:63:a9:6d:9b:aa:27:
                    2a:c8:f3:85:79:a4:e8:a3:cc:74:61:0a:fd:cb:0c:
                    cc:d4:55:ce:48:c7:98:66:f2:ea:12:8c:5e:e7:33:
                    69:36:d4:d1:6f:c1:43:da:8a:57:8b:eb:88:b5:4f:
                    60:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:ED:4F:D3:FC:D4:09:EA:37:38:0F:A1:22:DA:B4:CD:43:B4:F4:46
            X509v3 Authority Key Identifier:
                keyid:7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ac:8b:d5:6b:00:60:1a:bf:cf:a7:14:b7:da:8b:98:6c:6f:
         87:e7:15:ae:05:01:46:e6:1f:69:de:f1:99:0d:72:3c:29:36:
         43:5e:22:19:c3:2a:76:8a:3f:47:09:d4:6b:de:b5:27:25:98:
         e9:28:59:4f:9e:aa:15:6c:ba:fe:f1:b6:c0:ab:7b:e6:e6:44:
         a8:38:dc:78:5b:ad:94:8e:f3:a4:d8:6f:69:5c:12:02:25:c9:
         a9:2d:6a:c7:7c:de:d3:fd:24:20:32:e4:ba:47:44:ae:06:ab:
         03:2a:a9:4d:1b:e7:84:c1:e2:5e:5b:48:67:2e:ba:51:9c:60:
         a0:16:92:29:c2:de:27:cb:e9:40:68:28:d8:96:b1:2e:3d:7f:
         a3:28:19:e7:68:b3:fa:52:ec:75:a8:5f:99:b8:3f:76:06:d9:
         dd:58:30:ea:69:0f:d5:45:90:14:cc:e0:1e:ee:87:84:b1:e0:
         36:2d:1f:68:11:c4:d2:aa:d1:a9:eb:d8:64:4e:08:97:d9:33:
         82:b5:64:e7:82:1a:1d:36:4a:ee:d4:5e:a9:2d:71:4e:11:c3:
         bb:bf:28:77:ea:e8:0b:b6:81:21:71:68:38:00:89:48:c5:c9:
         bc:4a:09:19:29:8f:06:13:be:cc:79:ec:ea:55:0f:52:cd:6a:
         44:41:a8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:08:28 2025 by rpki-client