Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.mft
File:                     Fjndvg_zoYcM20VQmNxC-s_VSfU.mft (raw, json)
Hash identifier:          xW8OutMrnkr0PV+ogOkrxlN/LKdI2/ProfrYdBdT1CE=
Subject key identifier:   33:4F:7C:50:35:11:20:A4:83:1E:9A:4A:FE:18:5C:9E:25:ED:E3:92
Authority key identifier: 16:39:DD:BE:0F:F3:A1:87:0C:DB:45:50:98:DC:42:FA:CF:D5:49:F5
Certificate issuer:       /CN=1639ddbe0ff3a1870cdb455098dc42facfd549f5
Certificate serial:       0197B6A0B448439EE996359EF03B4CA07602
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fjndvg_zoYcM20VQmNxC-s_VSfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.mft
Manifest number:          0A1F
Signing time:             Sat 28 Jun 2025 13:01:14 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:14 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:14 +0000
Files and hashes:         1: Fjndvg_zoYcM20VQmNxC-s_VSfU.crl (hash: EuPgksXb0wrmVfx+t1IXLUxRwfzkniW5UjYfb+v3tO4=)
                          2: _AaogpvsZ_kHaJAoO7eUxP8H-zY.roa (hash: a3qZI1EQuEaQg0ZHFbrz5Ccf6fiwQDzr5b8C2ZRATT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fjndvg_zoYcM20VQmNxC-s_VSfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:b4:48:43:9e:e9:96:35:9e:f0:3b:4c:a0:76:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1639ddbe0ff3a1870cdb455098dc42facfd549f5
        Validity
            Not Before: Jun 28 13:01:14 2025 GMT
            Not After : Jun 29 13:01:14 2025 GMT
        Subject: CN=334f7c50351120a4831e9a4afe185c9e25ede392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:49:8d:93:c7:07:dc:c6:b8:ea:9f:f0:7d:15:
                    84:b4:2c:d9:43:32:97:5a:96:67:7d:a5:9a:47:0f:
                    aa:37:83:b1:e1:e6:ba:04:cc:7c:b0:7a:ed:7b:e8:
                    f2:0d:55:07:14:63:0b:8a:ec:f1:5a:f4:ad:17:64:
                    a7:02:4d:75:4b:90:21:a4:82:a5:36:4c:d2:07:f8:
                    0e:0e:48:d4:8c:d1:25:e6:e6:e6:a8:d2:19:7b:59:
                    40:94:c3:69:d6:79:ff:12:3b:c0:ba:26:12:98:2c:
                    2c:75:a4:ec:eb:bf:a9:f2:de:d9:17:3b:bd:7d:78:
                    23:7c:df:cf:f0:e3:eb:ce:e6:a1:f5:dd:86:63:f6:
                    36:2c:d9:23:22:70:29:1e:c6:d7:a4:65:53:fc:03:
                    3e:33:a9:5c:ef:2f:d7:9a:89:43:d2:84:a7:55:e8:
                    78:08:80:75:4b:d7:41:98:d3:f4:dc:a3:ea:c6:5f:
                    d7:5a:e7:bb:a2:85:cf:6b:f1:86:b7:50:9d:7b:1b:
                    63:10:ce:6b:09:1e:15:9d:c7:37:99:90:12:88:1c:
                    d7:97:7c:12:59:f8:80:15:05:0a:d5:4d:03:5a:91:
                    c7:20:36:69:75:58:22:d4:e9:13:1b:d1:9e:65:ad:
                    7c:e2:96:b1:17:05:a4:d0:29:2f:0f:98:39:c3:e7:
                    51:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4F:7C:50:35:11:20:A4:83:1E:9A:4A:FE:18:5C:9E:25:ED:E3:92
            X509v3 Authority Key Identifier:
                keyid:16:39:DD:BE:0F:F3:A1:87:0C:DB:45:50:98:DC:42:FA:CF:D5:49:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fjndvg_zoYcM20VQmNxC-s_VSfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ea:6e:06:95:9d:19:98:f2:4e:07:b0:55:f7:27:28:12:be:
         d4:d7:e3:c6:f1:f2:b8:9c:36:3f:7c:4f:7f:1f:ff:cf:4a:68:
         50:ad:6c:cd:50:97:8e:f1:62:f0:ca:13:ac:ef:6e:cf:28:0c:
         34:c1:61:79:07:24:df:b0:39:a2:bb:e8:5f:bb:2b:94:26:c7:
         66:bf:2c:fd:4f:2e:b1:c7:97:38:79:39:4c:05:e3:b5:f1:c6:
         33:85:7e:72:4e:b9:ad:ea:27:86:ba:2e:8a:8c:80:1c:69:8a:
         5a:ca:57:a3:73:cc:d4:cf:13:0b:fb:94:06:12:75:07:ca:de:
         9b:ba:bf:26:b6:58:ac:86:54:16:fe:ff:1e:d1:9c:94:01:72:
         20:09:b2:3c:c6:f7:86:3d:77:1f:ca:75:e8:d8:26:aa:65:ca:
         d4:2d:da:a3:65:e7:1d:33:ef:35:92:bc:70:9c:f6:c4:1e:ce:
         ba:85:d7:94:04:be:1d:7a:0a:b6:08:45:47:92:98:af:be:ab:
         ee:cd:67:50:c2:25:33:79:53:c6:d9:4a:6e:ff:c2:8e:5b:21:
         43:da:9e:63:dc:cf:34:ce:74:2c:5a:b4:1e:53:37:a3:a4:ac:
         e7:f3:fd:d0:51:46:bc:62:50:be:af:02:9d:1d:36:3f:6e:17:
         ef:4d:0a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:43 2025 by rpki-client