Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
File:                     _gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft (raw, json)
Hash identifier:          duH77gT0wEagKfHFOIoQM/rgLdQAR6uYuRzc4ewU5ZI=
Subject key identifier:   FC:4E:98:42:62:DB:E3:B9:ED:9A:48:CC:F6:39:60:04:32:DE:08:7B
Authority key identifier: FE:0C:14:A0:BD:C1:19:F1:ED:49:62:02:D8:9B:E4:FD:26:59:FF:01
Certificate issuer:       /CN=fe0c14a0bdc119f1ed496202d89be4fd2659ff01
Certificate serial:       0197B632BD5028F31421B3C13F149F9DA30E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
Manifest number:          069F
Signing time:             Sat 28 Jun 2025 11:01:07 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:07 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:07 +0000
Files and hashes:         1: _gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl (hash: dyFS1Rg0jqSRioOwHBQuzvkwuElLSvLkF2tBYS5VJc0=)
                          2: oYPmCSWvS8EzeEC8QLUq6x_eYrI.roa (hash: 1A9wNN6kYL22cNZ71fS4DQFjU5QHCoE6jNJ2g/Xtw44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 11:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:bd:50:28:f3:14:21:b3:c1:3f:14:9f:9d:a3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe0c14a0bdc119f1ed496202d89be4fd2659ff01
        Validity
            Not Before: Jun 28 11:01:07 2025 GMT
            Not After : Jun 29 11:01:07 2025 GMT
        Subject: CN=fc4e984262dbe3b9ed9a48ccf639600432de087b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fd:ba:1d:30:35:24:d5:24:f9:92:0c:09:57:
                    70:02:cd:e5:11:cd:87:aa:ec:e9:00:02:bd:7f:dc:
                    cd:3f:78:f1:88:37:04:62:75:a9:73:39:b4:8b:14:
                    9a:4f:9b:64:20:45:5a:ab:88:22:f8:d4:74:c9:0d:
                    0d:c5:dd:20:46:b5:25:b2:ca:8c:a4:19:25:06:a1:
                    88:d0:25:f7:db:ac:75:a8:27:da:9f:03:7c:8e:bf:
                    61:52:b4:d1:9f:e7:cf:3d:b4:a8:e3:56:97:1f:e2:
                    9b:3b:31:e9:2f:3c:25:26:e0:43:25:97:3d:a6:d9:
                    3c:3d:5a:e9:dd:08:42:5b:fa:1e:38:34:46:29:ab:
                    05:52:e5:c9:8a:b1:fa:fa:91:f0:18:c8:a0:d8:b5:
                    e2:b1:ca:02:66:93:33:77:f8:20:f1:51:9b:8b:a8:
                    20:7a:6e:96:bc:b4:67:a1:a5:1b:f6:c7:4c:d0:93:
                    4a:57:2d:29:dc:be:8f:0a:32:41:56:16:f8:5f:b6:
                    31:d2:ef:5c:e6:05:3c:82:60:c9:67:6f:60:65:d7:
                    d6:82:08:2a:68:d1:a2:bf:0f:90:47:0a:0e:b4:81:
                    b1:10:98:eb:c3:da:c6:3b:4c:c8:d5:30:c4:a9:72:
                    2a:f8:84:f8:0b:48:f3:8a:74:3f:e8:7a:78:4e:00:
                    07:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4E:98:42:62:DB:E3:B9:ED:9A:48:CC:F6:39:60:04:32:DE:08:7B
            X509v3 Authority Key Identifier:
                keyid:FE:0C:14:A0:BD:C1:19:F1:ED:49:62:02:D8:9B:E4:FD:26:59:FF:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f9:60:a8:85:c1:c3:b3:2a:88:49:66:d8:b3:97:53:00:72:
         b8:a0:da:63:72:1c:c1:47:63:be:d7:fb:3e:0a:07:6b:12:ed:
         6c:da:b5:ba:31:af:75:3c:09:e6:f2:e4:a7:92:9e:0e:ae:bd:
         be:7b:73:9a:e4:e7:f1:cc:cc:8b:74:6f:99:6e:d5:18:9f:ff:
         b6:2c:2a:c4:34:fe:94:1e:45:1c:e1:bf:2d:59:dc:fe:85:43:
         66:d6:c9:b8:e6:17:3a:ec:c1:dc:4d:46:61:40:0b:24:55:1f:
         66:07:2a:7f:82:f7:ca:9c:b3:da:15:46:a5:62:59:57:7d:6b:
         a2:9a:ab:42:1b:e6:45:20:d9:fc:69:ac:84:22:4b:68:d9:90:
         f2:ab:9f:6f:a1:e1:58:f5:bd:18:e0:54:90:73:e8:00:d3:1c:
         8e:68:76:ad:36:25:0c:12:04:0f:f1:1c:d8:81:56:a0:a4:45:
         83:fa:85:17:56:8a:f7:93:1b:39:89:fb:78:ae:c3:82:92:ff:
         47:00:64:d2:48:b9:15:c7:67:f3:84:e0:27:4d:d4:45:3b:b1:
         06:2c:2d:5b:9f:68:d0:a2:c5:e1:36:c5:51:70:58:e1:bc:5d:
         09:2f:6f:d1:c6:98:2a:d3:9d:2c:69:97:7b:70:30:53:72:ba:
         99:c6:d4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:45 2025 by rpki-client