Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
File:                     1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft (raw, json)
Hash identifier:          7HxOZvTWM6+uojdWDLXoflKupD3RldO0iqKBI4+kPj4=
Subject key identifier:   4F:71:0B:0A:0D:27:6B:73:83:28:4F:2D:8B:92:16:DB:BC:F0:30:FF
Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
Certificate issuer:       /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Certificate serial:       019780565E3699EE16B21977FDA5EF8A0DF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
Manifest number:          1599
Signing time:             Wed 18 Jun 2025 00:00:33 +0000
Manifest this update:     Wed 18 Jun 2025 00:00:33 +0000
Manifest next update:     Thu 19 Jun 2025 00:00:33 +0000
Files and hashes:         1: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl (hash: Jj7IEeCoobFFciDJgJZNyhL/CS9TU03LLMaAxgFzX0k=)
                          2: uSVVlqHZvV5YEhwqY0z-9BTB1zI.roa (hash: AWa2RaP+hTglbbgDdOdlnFQ+mgvTTY8nknDwYB/qQE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:80:56:5e:36:99:ee:16:b2:19:77:fd:a5:ef:8a:0d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
        Validity
            Not Before: Jun 18 00:00:33 2025 GMT
            Not After : Jun 19 00:00:33 2025 GMT
        Subject: CN=4f710b0a0d276b7383284f2d8b9216dbbcf030ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:c0:52:8a:e7:08:5e:b9:12:58:cc:13:32:
                    e6:d8:7d:6a:dd:8e:20:35:5f:81:ca:73:e8:ec:cb:
                    f2:85:f5:ee:73:96:26:70:c0:07:da:ce:46:89:b5:
                    0f:11:3e:7d:b2:11:0c:50:41:99:ad:62:fd:95:72:
                    e8:2e:e3:75:e8:b9:91:89:72:83:29:5d:1a:3b:2c:
                    b9:17:b0:27:e3:34:71:8b:8b:d3:62:7a:cc:53:5a:
                    0d:ed:29:31:9a:dd:3f:56:3b:72:8e:0d:0e:1c:c7:
                    8f:24:29:0b:80:64:75:45:5e:94:6c:8b:2b:93:ed:
                    33:7a:1a:f6:18:4f:1f:17:7b:d7:ef:0a:02:fa:9f:
                    dd:ce:d6:ad:b5:43:f7:06:2a:42:3b:59:7e:8a:ec:
                    4b:ec:dc:7e:36:fd:31:a3:2e:4e:1f:79:e5:7b:b6:
                    04:e8:fc:97:76:75:98:f0:78:8f:82:6b:88:5e:fe:
                    8b:af:ba:67:00:f1:57:27:fb:b9:bf:08:fa:3e:32:
                    be:22:73:d2:dd:72:cd:04:5c:c4:b0:b7:7a:ab:0c:
                    eb:e7:e2:18:3e:c2:f6:29:b2:d4:ce:98:a0:f1:f9:
                    27:33:f5:d6:cf:d0:8d:78:c6:9d:70:fa:c2:4b:26:
                    b1:37:65:e7:96:45:2c:18:4a:b9:c5:46:b5:ed:4e:
                    c4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:71:0B:0A:0D:27:6B:73:83:28:4F:2D:8B:92:16:DB:BC:F0:30:FF
            X509v3 Authority Key Identifier:
                keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:20:5f:5f:15:e4:46:a4:d6:ff:ca:d2:8a:a2:c4:d3:4a:c5:
         58:d8:99:61:a3:b3:f6:bf:f6:64:e9:51:fd:d9:87:50:8c:88:
         90:72:02:e9:8c:dc:9d:4b:28:c1:4a:b2:9a:1b:ea:42:f8:d3:
         03:a6:7f:fc:46:f6:75:74:24:5d:d8:31:cd:22:55:c1:d5:a9:
         d8:0f:bc:d1:ee:d3:7f:40:56:8f:25:77:dc:74:6b:ba:99:63:
         57:35:66:57:31:b1:d8:5b:96:45:7e:1f:e2:ef:04:86:73:83:
         40:c9:73:6c:f8:f4:0d:f4:10:6b:32:45:b8:0f:6d:22:e8:51:
         e4:84:75:e6:fb:9c:c3:42:46:00:57:72:22:5e:84:35:30:b1:
         63:1e:0f:b1:ec:ca:20:6c:a3:82:d8:ef:08:24:97:44:3b:7a:
         38:b1:bd:83:d0:1e:0a:6c:80:02:85:57:b5:bf:48:6d:f1:a1:
         a8:cb:10:fa:57:d2:93:89:74:66:5b:69:bb:a3:c5:73:91:01:
         95:02:2e:58:0e:b8:05:79:01:e0:b4:ed:73:6b:8e:4e:55:d9:
         63:8c:55:b6:db:1f:f0:bc:60:c7:45:0a:9a:b0:9a:42:97:14:
         ad:10:69:93:2c:d7:4f:ca:ad:e9:d0:c6:17:47:49:b4:8d:d1:
         09:b9:8e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:26:58 2025 by rpki-client