Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
File:                     fsgd4tovClqrQYJhS7zF5BPVUhs.mft (raw, json)
Hash identifier:          fEj9Jf8nBJ6XAO7qPVL54uV6s8FOPx2L+2XMCs41gC8=
Subject key identifier:   A8:5C:34:7E:6D:A1:32:A5:E2:71:49:C8:58:B0:27:5A:36:97:99:BA
Authority key identifier: 7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
Certificate issuer:       /CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Certificate serial:       019768F324ADB62A32D0EBD052ABA3AC8686
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
Manifest number:          1591
Signing time:             Fri 13 Jun 2025 11:00:54 +0000
Manifest this update:     Fri 13 Jun 2025 11:00:54 +0000
Manifest next update:     Sat 14 Jun 2025 11:00:54 +0000
Files and hashes:         1: Bm4fWDiAgtSgEEDsoqVp0hZs-1U.roa (hash: 4AYDFkMaa0ydrctcy3Ily/9B1nza0T1CPUGQdlaU1vk=)
                          2: fsgd4tovClqrQYJhS7zF5BPVUhs.crl (hash: ehR5FJAxJf2oMX/uO9or33O7HvIrH2EC55MJYgh1ToY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:f3:24:ad:b6:2a:32:d0:eb:d0:52:ab:a3:ac:86:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
        Validity
            Not Before: Jun 13 11:00:54 2025 GMT
            Not After : Jun 14 11:00:54 2025 GMT
        Subject: CN=a85c347e6da132a5e27149c858b0275a369799ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:94:77:e5:fc:04:53:67:75:7d:59:6a:e3:7f:
                    69:2a:f4:42:22:9e:43:d9:e1:7b:8e:18:dc:cf:69:
                    90:97:10:13:07:bb:e2:83:d7:8a:fb:60:23:6c:59:
                    9a:86:27:c5:62:f8:2a:0e:cc:37:ad:d4:68:d9:ad:
                    7d:3c:24:4f:33:74:db:41:16:4e:70:0b:11:97:cf:
                    5d:bf:4f:2f:1e:a4:ba:9f:cc:4d:83:54:56:b7:b6:
                    e6:dc:27:61:23:11:30:14:c9:bd:b1:a8:52:8b:4d:
                    16:cc:8b:ef:40:4e:d0:29:f0:ff:a3:84:b7:5d:22:
                    2b:2c:61:d7:3e:e8:85:b2:46:11:5a:38:15:70:d6:
                    ab:13:b4:a6:7f:8c:fd:73:c7:c3:01:70:91:61:7d:
                    8d:11:44:c5:cd:66:18:f7:d3:5e:20:63:8b:b3:96:
                    db:0d:07:b8:2f:2c:10:b6:5a:41:35:5d:39:56:5a:
                    01:e8:01:e0:a1:fb:62:f0:1c:e4:c7:47:19:77:bf:
                    7c:4b:65:5d:25:19:d2:aa:ce:15:8b:e2:14:af:aa:
                    70:7d:92:a0:20:5f:a5:fc:01:6e:34:af:63:20:12:
                    d2:4d:cd:a0:db:a3:fa:d1:48:ce:ca:23:25:c1:e2:
                    94:ed:07:35:e4:cf:e3:a4:9a:cb:84:ad:f3:7d:08:
                    3e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5C:34:7E:6D:A1:32:A5:E2:71:49:C8:58:B0:27:5A:36:97:99:BA
            X509v3 Authority Key Identifier:
                keyid:7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:66:09:61:2e:32:73:10:cf:b5:ba:a2:eb:82:98:2a:4f:89:
         99:e0:ff:eb:ed:5e:4f:ea:37:67:a6:9c:c6:6b:9e:e2:cb:0b:
         39:fa:f4:1b:82:2c:55:76:0a:fe:95:4a:86:f3:87:e8:42:ca:
         ce:67:32:a1:06:6d:61:2d:ab:d8:bb:08:88:68:dc:43:86:21:
         29:90:00:b5:c5:44:1c:da:a9:1b:52:03:90:b0:34:3a:75:08:
         d6:04:7f:3e:77:be:07:09:73:cd:95:b6:94:85:5e:3c:8f:62:
         ca:64:1d:b9:30:47:2e:16:e4:4d:85:1d:9e:ac:16:e1:4a:9e:
         ae:d6:a0:6b:1c:46:75:01:b8:6a:fc:fb:7d:b5:7d:f0:1d:7a:
         04:ca:7e:68:f6:a6:ef:8f:68:77:d1:66:29:ff:37:fe:3c:1a:
         71:e5:66:ea:b4:22:b4:90:c4:d3:03:bc:58:c6:6e:39:e1:3e:
         17:28:da:e8:d2:c7:23:36:7d:40:dd:53:ee:33:98:bd:8e:85:
         13:ba:70:18:9b:44:32:13:2b:49:e1:81:7a:9c:a5:50:32:45:
         f6:b8:23:64:8e:83:28:14:18:50:09:7f:fe:cb:25:87:44:23:
         ae:b1:16:3c:ce:fb:60:17:ab:61:31:36:d8:6c:00:ee:95:20:
         92:00:fa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:39:56 2025 by rpki-client