Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
File:                     FTtGcCg5p5W6uo2NFezcymN-M2w.mft (raw, json)
Hash identifier:          rR1rqAu1BwezM4a3QOnrdxpJjr9QfW1SsD0OjBgcCvA=
Subject key identifier:   3D:8F:46:9C:32:89:59:F0:21:54:1F:C8:93:D5:D2:02:6E:F5:DD:16
Authority key identifier: 15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C
Certificate issuer:       /CN=153b46702839a795baba8d8d15ecdcca637e336c
Certificate serial:       01988AA09AEE801CD39BB2C900F36030D0E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
Manifest number:          1623
Signing time:             Fri 08 Aug 2025 17:00:37 +0000
Manifest this update:     Fri 08 Aug 2025 17:00:37 +0000
Manifest next update:     Sat 09 Aug 2025 17:00:37 +0000
Files and hashes:         1: 7LfdpybXjkO1zp9O6nzu1fNfc88.roa (hash: QAPjHN/iZlfmzhgOwFaV5zDBEKY0r/wVKeB2R6gKrqA=)
                          2: FTtGcCg5p5W6uo2NFezcymN-M2w.crl (hash: USKmslAjOdD1A9XlgHDWyxNrwEJra1iJa1rGZNMq3uc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 17:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:a0:9a:ee:80:1c:d3:9b:b2:c9:00:f3:60:30:d0:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153b46702839a795baba8d8d15ecdcca637e336c
        Validity
            Not Before: Aug  8 17:00:37 2025 GMT
            Not After : Aug  9 17:00:37 2025 GMT
        Subject: CN=3d8f469c328959f021541fc893d5d2026ef5dd16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:3a:e7:9a:e9:69:57:79:c8:1c:7c:fd:53:
                    a8:8f:d5:ee:fc:92:be:c5:51:4a:20:73:b9:4c:80:
                    64:b2:ad:9d:a3:04:e1:28:cf:a2:06:b1:07:5e:50:
                    18:af:0a:b4:c1:1e:6b:5f:d5:6d:e0:28:2a:54:3b:
                    3e:59:1c:f5:fa:bd:93:7d:58:05:d7:0b:cf:1f:94:
                    e5:f0:18:60:fb:a2:9f:42:f5:ba:9d:9b:ec:29:01:
                    55:8b:4a:c1:13:c0:94:ad:c1:a9:55:c1:d9:fe:24:
                    67:77:33:b2:4e:56:58:d0:51:6a:4f:8f:d1:dd:b2:
                    f4:44:96:65:b3:cd:eb:e1:40:b0:22:f6:a7:84:da:
                    cb:07:8b:7a:88:d0:a4:47:71:d0:7e:5d:4d:cb:61:
                    f4:10:89:5c:2e:cd:a9:11:54:c5:05:b4:b1:f7:45:
                    d9:f9:bd:a1:03:5c:ab:83:78:5b:e4:97:7f:53:93:
                    61:fe:c5:92:6c:95:fe:0a:a3:75:77:5e:00:47:ee:
                    ff:5a:64:af:59:c8:26:05:79:8f:69:bb:f9:bc:f6:
                    ea:27:5c:ba:6d:fd:d4:5c:c7:dd:b9:7f:07:c6:cd:
                    31:62:47:6c:44:99:63:64:c8:23:7e:22:ff:32:1a:
                    a0:e2:42:09:62:ec:63:94:1a:f7:d7:4f:fe:36:ac:
                    a2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8F:46:9C:32:89:59:F0:21:54:1F:C8:93:D5:D2:02:6E:F5:DD:16
            X509v3 Authority Key Identifier:
                keyid:15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:94:d4:12:95:ef:d4:9a:1d:15:c3:71:e1:b8:ca:1a:9d:cb:
         21:4b:cf:ab:9d:e2:bc:d8:de:9d:f5:b1:99:20:a2:fb:1f:75:
         f3:93:01:17:26:79:01:73:8e:3d:ce:bd:08:f1:94:e5:7f:83:
         f2:ed:22:d7:ee:cd:c1:5e:c8:aa:6d:38:ea:27:3e:75:5d:c3:
         c2:06:61:7e:b5:06:9a:84:9d:da:0d:cf:21:81:91:0a:6f:81:
         4c:c0:f5:99:96:47:b0:79:22:a8:89:15:9d:11:1a:22:eb:cc:
         20:a0:04:8c:60:6b:cc:6e:58:d1:e1:7e:92:34:05:75:75:0c:
         72:a8:d8:d8:74:91:18:9f:7d:f7:68:bb:1b:d8:55:14:4d:4a:
         82:da:b8:35:ab:6a:a6:db:c5:b4:41:f5:8a:77:9c:00:e7:c4:
         b3:13:28:ac:c8:30:7a:7c:30:c2:d5:44:87:32:2c:a4:3f:b3:
         43:fb:0e:d2:0e:d7:66:56:83:57:69:28:b4:d3:0d:2c:10:fb:
         3f:32:22:7f:d2:a2:73:4f:a7:8e:80:fc:ed:43:17:54:ab:e0:
         75:7d:6e:d7:0d:08:03:b3:85:1c:cc:f1:33:ba:d7:02:96:30:
         c7:7d:fd:66:82:13:60:5c:57:3b:e8:22:38:9c:08:d0:9b:cb:
         0c:79:45:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:14:53 2025 by rpki-client