Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
File:                     _PmtqbKLaZf9ocRoqNhpY4QHoLs.mft (raw, json)
Hash identifier:          tvuzQpkqPz/DO408wEMijySo13i9+uyVxB1TKsgTC/8=
Subject key identifier:   FC:B6:C0:56:FA:95:07:BE:61:09:16:02:B4:93:63:43:31:32:44:61
Authority key identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
Certificate issuer:       /CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Certificate serial:       019770E382397E9E9A068F11D763E80B6C48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
Manifest number:          1591
Signing time:             Sun 15 Jun 2025 00:00:47 +0000
Manifest this update:     Sun 15 Jun 2025 00:00:47 +0000
Manifest next update:     Mon 16 Jun 2025 00:00:47 +0000
Files and hashes:         1: Le3v2H0wAOnsDtbYpl9GWGKprW8.roa (hash: 3pH+MsH30Kao3JM7UhwFK9NiYfes8F3zq57Gt61L8AQ=)
                          2: _PmtqbKLaZf9ocRoqNhpY4QHoLs.crl (hash: l4sk0h65yTGX6GqFqW4KlJttyL5CeWGWOlariSiCRMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:e3:82:39:7e:9e:9a:06:8f:11:d7:63:e8:0b:6c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
        Validity
            Not Before: Jun 15 00:00:47 2025 GMT
            Not After : Jun 16 00:00:47 2025 GMT
        Subject: CN=fcb6c056fa9507be61091602b493634331324461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:48:28:c8:ed:a5:32:f0:44:23:ef:64:3c:19:
                    81:af:66:6a:cf:e9:fc:46:78:b0:f3:dd:09:61:a9:
                    c3:77:9b:ec:79:a3:fc:d5:9c:cb:c7:3b:78:a9:4a:
                    e0:cc:50:a1:af:da:79:58:26:a2:c8:21:d0:08:4c:
                    19:c2:e0:92:d2:3d:a9:a9:37:a4:22:40:30:3e:8a:
                    ff:ac:c4:f4:fa:01:01:9c:3b:f1:1a:68:b4:69:4e:
                    c2:62:b6:2e:93:37:29:1d:5d:66:62:90:ca:7c:9a:
                    60:23:32:58:31:7f:41:a5:6b:dd:87:e2:9e:03:6b:
                    c2:4c:65:30:24:0f:e3:3c:e3:fa:c9:f7:38:79:06:
                    02:45:eb:c7:c4:97:d0:f0:2b:5a:fa:ee:41:30:83:
                    4d:46:d0:9f:7d:28:65:43:b8:2f:40:e8:1f:ef:01:
                    f0:12:db:d6:a4:13:fd:0d:e9:33:2e:f5:39:0b:0f:
                    d9:95:d0:24:58:73:50:f6:c0:a6:0d:eb:60:30:21:
                    09:e5:ee:78:31:c6:56:16:29:e6:1c:8e:9d:13:dd:
                    13:4d:b9:99:6e:01:e3:fe:19:9e:22:8b:6e:87:4a:
                    29:ca:29:91:b3:ec:b0:02:20:55:97:c0:80:e0:fc:
                    cd:f9:3c:37:02:92:58:42:ed:97:86:39:50:47:51:
                    88:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B6:C0:56:FA:95:07:BE:61:09:16:02:B4:93:63:43:31:32:44:61
            X509v3 Authority Key Identifier:
                keyid:FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ed:16:e6:73:23:cd:04:c9:1c:d8:b9:ec:1e:ef:6b:6b:32:
         ec:a0:3b:3f:6e:6c:06:fb:ce:e8:b6:3d:bf:cb:1b:72:97:6e:
         37:32:66:ca:65:75:38:f4:96:fe:23:2f:4f:96:57:c0:ba:47:
         71:34:dd:b1:16:f6:bd:04:ef:9c:b9:75:19:66:07:6d:26:a1:
         f9:ca:72:46:be:88:f3:32:bc:ba:a6:f2:61:b8:69:c6:49:13:
         08:72:18:19:1f:e5:f4:57:6c:67:6f:c9:c4:9d:70:5f:f7:c3:
         8b:45:07:0b:9c:56:c3:80:08:c1:65:e8:61:67:1a:25:1d:f5:
         f6:82:a8:b4:b6:60:0b:15:8a:38:5e:e4:50:53:4c:31:bc:fc:
         08:d0:14:94:e9:92:1d:b7:e1:a6:59:c0:1b:19:00:fb:63:1b:
         03:1b:ea:38:40:2e:01:3d:0c:61:6e:61:a3:19:57:8f:06:8d:
         c8:6c:f6:aa:14:3e:47:b5:77:f6:de:fe:02:61:73:45:a7:1d:
         91:89:ba:2d:d2:de:44:2f:cd:ee:6c:e2:ed:9b:18:11:84:11:
         8d:f3:9e:6f:ee:7f:35:6f:fa:44:25:72:4d:02:76:5d:cd:9a:
         e9:99:f6:5e:b8:f3:db:88:3a:98:ee:b4:99:f8:e9:c6:1c:3d:
         ab:54:1f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:41:43 2025 by rpki-client