Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
File:                     Fd3Uydwj-sNVdPzitClDmK3YUhw.mft (raw, json)
Hash identifier:          ypK/brVT0A5njjN+knbiUxKM6SvEZ7cFjbMFNK4x1ic=
Subject key identifier:   DC:C4:C6:51:F1:51:6F:67:0D:ED:F5:22:18:81:3F:3C:E9:4F:6C:95
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Certificate issuer:       /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial:       019770755E75E0599D857AC5AD40FEC8ADA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
Manifest number:          0D2A
Signing time:             Sat 14 Jun 2025 22:00:29 +0000
Manifest this update:     Sat 14 Jun 2025 22:00:29 +0000
Manifest next update:     Sun 15 Jun 2025 22:00:29 +0000
Files and hashes:         1: 2elU8M79ZokIDRQA4FCMvXhZ_30.roa (hash: xpy/QNiCAMomRGDsG3lcQqLW5mZVYEG99RtMqAQeBgw=)
                          2: Fd3Uydwj-sNVdPzitClDmK3YUhw.crl (hash: RUVozwJ37rJiyUIIPfgMN6z+8n/AERgkKIBq7QYVd7w=)
                          3: aivWngKJz6YVhMe876fRwO2Pwak.roa (hash: QrxS5tWIMxcDOD99WB/oU0c4ZizRW8rYWP871u28/z4=)
                          4: kgsIk8ju0wKKr0nkwVgHsRJydGg.roa (hash: 22cjkPvdduHGA9XlrCi4AiJihfCCZjAqzu2Hbki4taU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:5e:75:e0:59:9d:85:7a:c5:ad:40:fe:c8:ad:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
        Validity
            Not Before: Jun 14 22:00:29 2025 GMT
            Not After : Jun 15 22:00:29 2025 GMT
        Subject: CN=dcc4c651f1516f670dedf52218813f3ce94f6c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:76:52:5b:ed:e2:5e:95:2d:01:65:9e:74:a2:
                    36:df:d7:14:ac:0a:ca:f3:09:86:df:b6:f6:25:a2:
                    46:42:5e:08:3e:68:77:74:a1:d5:56:3b:69:85:8d:
                    2e:95:73:ea:3a:d2:06:94:64:39:d1:2b:e1:e4:a4:
                    9f:29:b9:97:07:b1:0d:c3:20:ce:86:ad:1d:a5:96:
                    b9:7f:82:58:f8:aa:2c:3b:4f:e4:99:58:cd:90:57:
                    2a:98:e3:5f:47:ca:5a:b1:ef:bd:fd:ab:59:bc:1b:
                    20:1d:94:53:a2:06:1c:f1:45:f7:67:01:42:a1:2f:
                    48:19:78:30:27:2f:c2:91:c7:fa:40:e9:9d:8e:63:
                    aa:5d:53:c5:6e:01:14:46:b1:f9:1a:bb:1c:af:88:
                    73:e4:7f:89:55:fe:22:71:68:a2:4a:be:43:80:da:
                    18:fe:c9:5f:c2:c0:b3:c1:7f:d2:a6:dc:51:cd:05:
                    ae:c7:88:e6:41:74:7d:49:b3:92:56:d0:37:3d:9b:
                    2f:59:ee:be:5a:4b:5a:a0:46:36:38:28:8d:a2:27:
                    e8:b6:5b:af:10:e8:14:9f:c4:17:c9:98:e9:89:62:
                    23:ea:e0:56:d0:10:9d:d3:31:b7:04:78:35:76:31:
                    9c:10:27:d1:e5:23:84:18:38:ae:d4:cc:e6:42:3d:
                    7e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C4:C6:51:F1:51:6F:67:0D:ED:F5:22:18:81:3F:3C:E9:4F:6C:95
            X509v3 Authority Key Identifier:
                keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b9:08:23:0a:6c:b6:e5:8c:a4:de:92:e2:6e:31:34:cc:a8:
         9f:d8:3d:52:66:82:d2:08:a2:bf:19:59:8f:8e:e6:11:68:e0:
         39:96:c2:fe:16:0c:da:33:73:86:19:3a:bb:6a:79:4e:6e:be:
         96:9d:e4:87:7a:8e:c3:23:a4:f1:2c:ba:d6:68:db:0f:e9:18:
         62:ac:b1:0c:41:0e:8e:1e:b9:d5:cc:40:92:7b:0d:39:7b:86:
         84:46:d2:c3:61:d4:16:27:42:92:de:f6:a4:1b:d7:ae:61:d3:
         a2:71:c4:45:26:e1:68:b1:93:73:17:81:f8:90:ec:25:40:bc:
         6f:4f:e9:89:e0:2b:87:5b:9f:04:7f:ca:71:18:d2:e8:ec:39:
         20:36:da:6e:c6:16:fb:fa:e6:06:7b:eb:07:9e:28:67:49:e6:
         7e:41:19:6a:bc:3d:3d:4d:32:fb:df:88:70:b3:29:52:c7:8c:
         7d:7c:9b:0d:53:04:82:06:b2:05:c7:80:71:f4:e9:30:b4:76:
         59:7d:d9:c6:2f:c4:a6:1b:63:1a:ef:32:50:ce:43:49:e4:fa:
         28:4f:ce:9c:f8:91:36:7a:75:0e:4c:18:e4:a5:e3:6b:d6:a6:
         0e:59:0b:45:e7:df:72:11:76:79:47:72:0e:56:c1:06:90:3c:
         b1:bf:74:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:04:53 2025 by rpki-client