Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
File:                     FjPymeqaLbgrAENdSz0WDsQ8QtY.mft (raw, json)
Hash identifier:          14gu1lPP3IAFsL26qlgrOKKh22iTtaRRTQ1cFjDEeLA=
Subject key identifier:   8C:85:CB:53:99:2E:5F:7F:B4:4B:1A:C1:D9:EF:39:91:8E:59:4C:38
Authority key identifier: 16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
Certificate issuer:       /CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Certificate serial:       01976FD114F33D6DCC36FDB2CA01030A1B95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
Manifest number:          0834
Signing time:             Sat 14 Jun 2025 19:01:02 +0000
Manifest this update:     Sat 14 Jun 2025 19:01:02 +0000
Manifest next update:     Sun 15 Jun 2025 19:01:02 +0000
Files and hashes:         1: CRew1yNG5xJSLzpzwmoLp-zhTwY.roa (hash: 93BHoq8vptXxPswONjpJ7IKNz5731MnLBO2O3H4KKvY=)
                          2: FjPymeqaLbgrAENdSz0WDsQ8QtY.crl (hash: D9SAct8KodNOgeCN87Bi6xeI8TZOxO5l8+eCAtfAtEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d1:14:f3:3d:6d:cc:36:fd:b2:ca:01:03:0a:1b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
        Validity
            Not Before: Jun 14 19:01:02 2025 GMT
            Not After : Jun 15 19:01:02 2025 GMT
        Subject: CN=8c85cb53992e5f7fb44b1ac1d9ef39918e594c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5d:0a:79:78:78:91:aa:10:34:0f:24:3f:92:
                    99:93:31:e1:3d:99:07:d6:f8:9d:39:8d:3f:92:2e:
                    06:95:0e:c2:b4:9a:db:19:e3:9f:1e:04:d3:95:b5:
                    40:ed:0d:7e:37:ea:62:09:9f:c1:58:c7:e5:7e:0f:
                    9d:95:f2:5b:1e:fb:0f:61:b0:8a:68:d1:64:43:f9:
                    c9:fc:aa:07:00:10:1a:38:f6:47:79:8f:ec:f8:1f:
                    29:49:21:30:2b:48:c4:a8:96:23:14:00:58:3a:6b:
                    9a:97:81:92:be:2e:e1:cd:0b:1c:ba:1b:3c:f5:4e:
                    49:74:80:4e:fe:82:ca:a4:1a:47:7f:a6:e0:c5:a2:
                    81:7f:d0:df:9f:cb:d1:96:61:cd:63:c1:c8:63:64:
                    b8:6d:b7:30:a7:73:7e:7f:c0:52:46:3d:19:4f:74:
                    ef:e1:12:fa:cb:61:e9:04:ae:c7:63:eb:12:9d:69:
                    d3:bb:e3:a2:4a:38:02:c1:93:dc:fc:2c:13:cd:04:
                    f8:e3:d5:01:a1:8f:0c:d7:9d:95:2c:5a:75:bc:0a:
                    dc:6d:89:a0:61:6b:b6:b5:62:43:a3:3c:f3:83:cd:
                    2b:9f:8e:90:b6:1e:c3:da:2d:33:9f:08:68:a6:2c:
                    84:72:a0:d4:c6:f4:02:6b:a7:e0:3d:12:9d:b8:ae:
                    bb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:85:CB:53:99:2E:5F:7F:B4:4B:1A:C1:D9:EF:39:91:8E:59:4C:38
            X509v3 Authority Key Identifier:
                keyid:16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e6:2d:09:49:e2:3f:e5:28:5a:e7:33:ff:f3:81:aa:13:c0:
         b7:5e:bc:95:a5:1a:84:95:75:60:bc:7b:23:c9:eb:a3:04:f7:
         cc:0a:f7:14:fc:39:98:6f:e7:37:0e:9e:ba:81:01:9a:46:b2:
         df:48:9c:2c:f8:ff:e7:f3:84:7b:4a:32:a4:70:5b:29:ca:b4:
         ec:71:eb:bc:b0:0c:1e:6c:42:c4:32:8d:b9:89:8d:f0:08:2b:
         44:b5:c4:a6:d4:62:18:60:e5:68:0c:75:bc:35:7f:02:66:a5:
         3c:af:9a:f9:1c:e2:2d:0e:2e:8b:0f:fe:2c:bf:de:b6:43:dd:
         e0:57:53:17:5b:19:8e:73:0a:74:24:dc:7c:df:0b:f5:19:73:
         a3:32:91:18:a6:51:30:92:0a:f2:bf:71:62:dd:91:bc:0e:03:
         57:32:96:92:ed:2d:8c:ee:53:aa:46:ea:f1:4c:9f:5d:4d:1a:
         2e:63:20:0f:11:0b:fc:90:42:01:90:28:8d:83:76:b6:f4:47:
         80:c0:bb:82:63:e4:4e:a2:ed:f8:78:77:63:35:38:9a:b6:2a:
         51:de:17:1d:54:1a:8d:02:e9:dc:c5:95:09:f3:9e:f8:b9:0b:
         e4:27:65:29:4e:04:0c:05:b4:85:5f:f8:81:63:00:19:1b:b7:
         d3:49:55:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:13:00 2025 by rpki-client