Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
File:                     FpjfAwCqteKm8ax45ZPsyXQNqts.mft (raw, json)
Hash identifier:          N9nbhRtmWig2YZFVkhmm8lah6TkzjSqUvpUkx4zRpvg=
Subject key identifier:   74:F9:69:12:6C:79:52:CE:71:9E:2E:F2:EB:94:57:7A:C1:1A:56:12
Authority key identifier: 16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
Certificate issuer:       /CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Certificate serial:       0197B77C28E72E89F82705938280B31A51F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
Manifest number:          08C0
Signing time:             Sat 28 Jun 2025 17:00:56 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:56 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:56 +0000
Files and hashes:         1: FpjfAwCqteKm8ax45ZPsyXQNqts.crl (hash: lt1oaagea8vo/ffgjELmwRqMDgm1njN1w35HMfnWtHw=)
                          2: IUfWM-T8xAGUnehJbHrihlR8Ip4.roa (hash: +ZYqqzAxCIjpw2v4zvSgH/2R+ZjJqO0o/ztNO/Ll//g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:28:e7:2e:89:f8:27:05:93:82:80:b3:1a:51:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
        Validity
            Not Before: Jun 28 17:00:56 2025 GMT
            Not After : Jun 29 17:00:56 2025 GMT
        Subject: CN=74f969126c7952ce719e2ef2eb94577ac11a5612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:cd:f8:30:9e:8a:ad:8f:de:72:c4:57:09:83:
                    d8:48:3e:a3:ed:ec:49:31:16:18:dc:84:0f:19:ed:
                    30:3d:e3:a3:a2:84:87:76:ee:d8:a3:2f:06:ff:5f:
                    13:f6:87:5e:54:79:c5:25:4e:ad:26:08:59:67:5c:
                    3f:dc:11:64:e3:5f:7f:92:57:ac:f3:6f:4b:01:c1:
                    e0:b7:90:24:b3:3a:ae:31:9e:df:29:c4:96:be:57:
                    01:a1:3f:a4:78:b6:ba:6e:96:d5:4c:8b:2f:33:56:
                    2f:c5:64:6c:06:2c:b9:ac:7e:9c:29:63:68:d2:24:
                    ca:55:2d:10:98:e2:14:df:ee:3d:47:d3:89:d0:81:
                    00:14:da:b0:c6:f3:77:ed:d0:5e:39:78:af:d3:b2:
                    75:2d:08:59:24:b2:90:41:bb:0a:f7:14:38:91:c6:
                    c2:ae:b2:43:a4:71:ea:76:46:f5:aa:12:3d:e5:4c:
                    51:b3:32:ad:29:57:2c:b0:ac:5e:74:4a:4e:df:c1:
                    fb:d3:47:ea:73:93:0a:f7:0a:90:9b:e1:10:31:53:
                    29:9b:91:cd:27:10:29:fb:1d:2a:34:f8:8f:f9:00:
                    d6:d3:62:16:c5:2d:ab:e6:59:61:9c:35:6f:f3:e4:
                    42:47:bc:69:a1:ec:7b:2b:2e:63:1e:45:65:a6:13:
                    14:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F9:69:12:6C:79:52:CE:71:9E:2E:F2:EB:94:57:7A:C1:1A:56:12
            X509v3 Authority Key Identifier:
                keyid:16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a1:20:1e:0e:7f:26:ee:e8:38:e4:fa:28:cd:5e:2f:cf:b7:
         5f:46:ef:c9:ba:f9:a4:62:6e:97:e1:0e:63:cc:c9:fa:c5:88:
         9b:08:95:3e:3d:c4:eb:77:e8:9b:d7:5e:3e:fe:b4:8b:da:20:
         35:da:88:7b:b9:84:bb:5c:2a:30:1f:52:21:7d:bd:d4:cd:6c:
         6a:a9:bc:c8:c1:9c:03:8c:ab:6e:e2:a8:f0:13:7d:3a:ad:cf:
         c2:6a:d1:e6:63:91:66:79:59:cd:6e:8f:8a:db:31:27:13:3f:
         f3:df:6b:a6:29:32:c8:d2:8c:72:25:10:8e:b8:98:75:21:15:
         32:77:cc:a2:24:41:8e:40:fb:be:c8:72:88:ba:79:2b:1f:10:
         61:48:b5:58:88:a3:72:e5:56:a8:b3:3b:13:f6:9d:87:2b:7c:
         9b:47:dd:b3:e3:a4:64:e1:85:c1:e0:74:4a:94:82:9f:3b:aa:
         d4:fe:7d:e6:7e:7c:ce:eb:a4:7b:8b:be:cd:db:89:32:8d:8a:
         b4:cb:aa:63:41:57:ec:95:4d:14:c1:86:79:b4:6d:31:44:f8:
         7e:51:20:1c:9a:52:4d:0f:fb:2b:14:b8:38:c3:83:bc:f4:e0:
         d9:59:eb:b1:91:7a:d2:de:90:16:da:cc:60:d5:3d:aa:aa:19:
         ea:42:3d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:22 2025 by rpki-client