Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
File:                     FczgYdJAjZqPayuUFi0fdPrD3Kw.mft (raw, json)
Hash identifier:          Lk29YsOm/j0hgppDvmOklz0wCoJzv0D9HdC9X+Qp8oE=
Subject key identifier:   54:51:F8:A8:25:65:ED:FB:1C:B8:1A:66:BA:9B:4F:EB:C0:C8:AA:B1
Authority key identifier: 15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC
Certificate issuer:       /CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
Certificate serial:       01977C0BDB46BF48D5437C5EC09223E58430
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
Manifest number:          0EBA
Signing time:             Tue 17 Jun 2025 04:00:41 +0000
Manifest this update:     Tue 17 Jun 2025 04:00:41 +0000
Manifest next update:     Wed 18 Jun 2025 04:00:41 +0000
Files and hashes:         1: AHAoAS0NTz8rAfdAi1-FKZQiZzo.roa (hash: UPpJLytuKjP0PEtk9/ACh8gURBOrfTZUj6sBll9GGNE=)
                          2: FczgYdJAjZqPayuUFi0fdPrD3Kw.crl (hash: PEg42jzJoPUCTS0jOt/96bRHFjZFwHJSijUsHQH4Cw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7c:0b:db:46:bf:48:d5:43:7c:5e:c0:92:23:e5:84:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
        Validity
            Not Before: Jun 17 04:00:41 2025 GMT
            Not After : Jun 18 04:00:41 2025 GMT
        Subject: CN=5451f8a82565edfb1cb81a66ba9b4febc0c8aab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:92:c3:03:e1:99:ad:32:29:c6:fa:6b:66:21:
                    30:52:4a:4b:30:c1:1a:eb:5f:e7:19:28:6b:70:18:
                    52:8e:1f:4a:1e:8e:88:0f:74:c5:a5:0c:b1:5b:18:
                    bd:f0:65:36:33:34:c8:0d:c2:03:a2:4b:c8:98:b2:
                    1d:97:3f:1f:6f:76:e6:11:91:4c:04:cf:8b:da:24:
                    7e:e3:8e:5e:75:5f:2d:6f:58:0a:ac:42:b3:06:35:
                    32:39:06:71:b8:bc:8c:70:38:5f:68:98:92:d7:bc:
                    3e:f7:c9:52:a4:b7:ef:32:51:96:97:ca:c4:6a:80:
                    87:78:68:d9:59:f5:46:78:39:79:82:9c:11:b8:57:
                    9b:8c:4b:1e:01:7d:03:69:80:77:5d:1a:59:57:0b:
                    be:d4:33:76:8e:19:61:16:47:fd:02:b5:b2:5e:5b:
                    d3:01:fe:00:b9:0e:72:80:d3:67:72:4d:1f:c7:ce:
                    68:86:50:91:e2:03:f4:ed:55:71:9b:dc:ee:ad:89:
                    21:96:4e:f2:b5:cb:fb:6d:2e:d5:e7:39:87:78:3a:
                    9f:35:75:77:5c:bb:b3:f9:c7:fd:62:c3:d3:02:ce:
                    e9:cd:c1:34:20:1d:e5:d6:15:45:42:f2:8b:63:0c:
                    68:bb:59:59:84:56:00:b3:10:e9:e1:df:74:e0:3d:
                    21:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:51:F8:A8:25:65:ED:FB:1C:B8:1A:66:BA:9B:4F:EB:C0:C8:AA:B1
            X509v3 Authority Key Identifier:
                keyid:15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:95:37:3e:ab:f3:a7:c3:c1:a4:a1:3e:61:ad:1c:a5:9c:8b:
         a1:c4:58:66:87:b2:d9:94:46:eb:c9:5e:f3:3c:23:ed:19:c9:
         ae:c2:05:0a:51:00:85:91:7b:d2:ba:ce:a4:45:4e:cb:81:f5:
         04:89:92:09:cb:4f:4e:c0:39:df:c1:c8:d9:4a:79:49:e9:8d:
         a0:fa:63:ed:f5:2f:be:cf:56:86:e3:2f:4d:9b:d3:61:0c:a5:
         9b:84:56:49:fe:90:a5:a5:a5:e7:b9:d4:09:ab:82:f3:dc:bd:
         a6:25:f7:56:78:84:b2:a4:04:3a:33:3b:e5:fd:4b:af:88:df:
         c9:45:c5:4c:06:4b:67:4c:c4:b5:5a:5b:9e:80:35:86:df:41:
         5f:1a:97:a1:b7:4f:d4:1a:14:31:bb:49:5f:64:84:4a:ff:01:
         03:74:8c:b6:86:36:84:50:d0:3d:70:20:b0:6f:3b:60:56:b5:
         f3:90:60:6f:46:b8:41:1b:46:97:cb:41:b8:d8:95:8b:83:15:
         94:69:ef:13:2f:1a:84:f3:66:b0:35:d2:ba:fa:0d:cd:4e:6f:
         61:9c:2a:2f:5a:fa:69:a5:b8:63:05:5d:3c:d4:e6:97:07:b6:
         23:c5:fb:58:2c:71:fd:d7:5d:05:93:7a:d5:08:e2:c1:5c:38:
         d7:26:3c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:20:39 2025 by rpki-client