Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
File:                     FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft (raw, json)
Hash identifier:          2eTh2zMrnIr8+RotJoCJww0diLQonwAcdBiOaYlfYIo=
Subject key identifier:   DF:59:75:1B:C8:41:BF:D7:E8:7A:D3:4A:9A:B3:59:E1:DD:BE:4C:1C
Authority key identifier: 15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
Certificate issuer:       /CN=159ba29a75ae1325c0382fb484b321d68d154384
Certificate serial:       01978A35D5D58C6268788C79D98BD929E06A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
Manifest number:          08CC
Signing time:             Thu 19 Jun 2025 22:01:13 +0000
Manifest this update:     Thu 19 Jun 2025 22:01:13 +0000
Manifest next update:     Fri 20 Jun 2025 22:01:13 +0000
Files and hashes:         1: 7DjRNlYtbNd5bWrkd68Y0hn_S8U.roa (hash: cnlLc3cQObaHjRU9oZ4ntBC1caogWw9gydNQ78TPtE8=)
                          2: FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl (hash: rEEdE/dhGSKrWTCsj8JFtbV9JY62NMyynKPwfiVItEA=)
                          3: Ljv2UgPaOFE3ERmB4rgUv6okXUM.roa (hash: 4NqznF8HQ3h3IuTIewXo/Zoj/y7IiGwjWIy/bmyiBBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 22:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:8a:35:d5:d5:8c:62:68:78:8c:79:d9:8b:d9:29:e0:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159ba29a75ae1325c0382fb484b321d68d154384
        Validity
            Not Before: Jun 19 22:01:13 2025 GMT
            Not After : Jun 20 22:01:13 2025 GMT
        Subject: CN=df59751bc841bfd7e87ad34a9ab359e1ddbe4c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7a:95:c5:5d:13:2e:a2:63:8c:9e:50:f0:79:
                    8c:9a:17:4d:c4:91:34:4a:1e:4e:6e:a6:55:eb:23:
                    06:72:21:8c:4d:14:30:26:ff:05:d1:83:1e:f5:52:
                    e2:d4:d3:4b:a9:fe:03:a5:23:25:b1:6d:c7:65:22:
                    e6:11:f0:79:fd:51:bb:f8:39:2e:47:f3:24:db:99:
                    67:f4:b2:40:a3:3d:9b:20:6d:29:3f:c8:b3:7e:32:
                    f0:54:96:e6:f0:ad:d2:47:e1:bd:8e:82:56:e2:b3:
                    61:d1:65:f5:2a:6d:b1:cf:94:d6:c6:0e:6c:e0:49:
                    f0:3d:a6:88:2d:33:99:ac:56:43:fa:d5:f8:0e:35:
                    d1:7f:fb:c1:74:bb:17:88:77:f1:69:2a:04:f5:72:
                    a0:95:92:9d:ba:c0:a6:67:9a:83:0e:09:1e:15:a7:
                    68:c2:73:04:c5:2a:f3:df:c9:42:77:a6:af:30:d8:
                    4b:6f:c5:bb:bb:58:fd:d0:37:2d:f4:63:6b:57:62:
                    d6:38:11:11:be:42:19:78:cf:83:bb:e3:19:eb:98:
                    4a:8b:60:fa:16:e4:51:7f:fc:ca:6a:14:5f:a6:a8:
                    f1:07:cd:e2:74:b9:e7:44:6e:42:e2:2d:b2:7d:c5:
                    79:b0:87:44:30:77:e2:08:81:01:01:e3:95:e5:6f:
                    5e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:59:75:1B:C8:41:BF:D7:E8:7A:D3:4A:9A:B3:59:E1:DD:BE:4C:1C
            X509v3 Authority Key Identifier:
                keyid:15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:be:c6:cb:11:ac:92:51:28:83:ca:44:9d:bb:c7:99:a9:80:
         a3:b3:b6:e7:3f:30:6b:15:83:a8:f1:13:1a:20:ea:59:5d:a9:
         27:6b:4a:2a:73:25:c2:54:d8:52:33:0a:0d:04:8d:47:f5:ab:
         28:f3:31:40:63:c5:af:75:c1:7e:5a:f0:cc:ae:04:55:fd:1e:
         d9:46:5e:4b:4c:4f:85:df:69:74:79:b2:f9:31:a3:0f:77:98:
         f0:ca:db:6b:79:bc:e0:af:fa:32:da:7b:1e:80:fe:1e:34:51:
         81:e2:a7:d2:a8:3b:af:3a:b8:6a:d5:a7:ec:1c:d3:e9:48:e3:
         73:9e:7c:8c:5e:bf:e8:6b:30:ca:50:1f:0a:92:da:75:e6:7d:
         84:12:77:61:c4:6d:e4:6d:fd:e7:01:59:7c:83:c8:12:27:51:
         60:ed:27:ba:e8:89:76:2b:80:84:fa:50:d6:97:a2:7f:61:73:
         23:e3:42:e4:15:29:a9:ec:04:9b:73:af:d8:ef:94:55:7c:0f:
         a0:14:b0:eb:9f:cf:2b:1e:bd:aa:99:f9:5d:d0:a2:cc:2e:0a:
         42:6f:cf:7d:50:4c:03:f1:81:54:0c:ac:10:69:ae:bc:7d:95:
         18:cb:2d:02:ea:97:f7:52:17:c1:dc:9c:4d:ac:4a:9d:4e:9e:
         af:6e:77:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:03:07 2025 by rpki-client