Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
File:                     FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft (raw, json)
Hash identifier:          ++Ckgn6PILv5LPK68lnf00KW9uZBZpsuHeNxh1W86Y4=
Subject key identifier:   86:60:1E:A3:05:3A:0B:73:A8:9F:44:8E:81:BE:3C:19:64:A2:8F:87
Authority key identifier: 15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
Certificate issuer:       /CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Certificate serial:       0198933608B16EEB2FBD0168FC8598CF11A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
Manifest number:          1624
Signing time:             Sun 10 Aug 2025 09:00:48 +0000
Manifest this update:     Sun 10 Aug 2025 09:00:48 +0000
Manifest next update:     Mon 11 Aug 2025 09:00:48 +0000
Files and hashes:         1: FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl (hash: gGk3UCfZmJV21WNnrwmpVZlYPjc4f16CmQCt2fIREAo=)
                          2: bVPZcxyyuoSw5oO9YToFQkVC9HE.roa (hash: PMh8VdKlUCXwqFCEJ+zfZN1ZK1DFnhbrgEIJ3TSYDdE=)
                          3: ucnP1VSEw1kHHuA3QA5_zId7uwM.roa (hash: YmzOGwmaq6ynMsOM2MUQrdoh74IojEKpTpvJHQjtfdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 09:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:36:08:b1:6e:eb:2f:bd:01:68:fc:85:98:cf:11:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
        Validity
            Not Before: Aug 10 09:00:48 2025 GMT
            Not After : Aug 11 09:00:48 2025 GMT
        Subject: CN=86601ea3053a0b73a89f448e81be3c1964a28f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a0:2c:6c:4d:a4:a0:e2:45:12:fa:b9:6e:33:
                    db:93:67:53:3d:e0:65:59:64:07:ef:b1:7d:f1:6d:
                    20:fd:b3:f7:d1:93:e5:ed:51:98:bc:ba:53:a7:d1:
                    78:7c:d4:1f:d2:45:cd:0d:b5:ca:b8:b2:6d:27:73:
                    08:35:3d:ef:fc:9a:48:3c:43:08:88:c6:fe:a0:4c:
                    69:ff:e8:85:52:b7:c0:c4:60:53:cf:40:af:9a:a5:
                    e7:fd:d7:c3:93:06:cc:fa:3b:b1:42:2b:11:28:bf:
                    fd:4b:0d:12:10:21:f6:86:52:c2:a1:44:da:9e:b3:
                    5b:08:20:0b:48:9a:d2:3e:a8:cb:77:a3:10:c6:28:
                    a7:b1:e3:d4:8b:e3:c0:e6:9e:ed:ea:1a:a0:03:b9:
                    bc:4e:ce:eb:8d:63:da:2b:d8:d5:a6:dd:e0:fa:c1:
                    f0:fc:67:13:34:e9:ca:e5:23:68:5e:03:af:ff:20:
                    3c:f2:50:ed:56:12:db:54:a2:fe:10:e5:0f:7f:29:
                    2f:6d:d5:e9:cc:b3:8b:19:1b:52:27:1f:25:65:57:
                    8a:d0:7a:3c:99:06:a4:c5:8e:48:b2:11:62:49:99:
                    de:7f:9a:21:6e:ce:14:d6:45:e7:79:b8:72:f0:6f:
                    c1:ba:bb:84:62:04:48:98:c2:61:39:3d:07:97:5d:
                    8c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:60:1E:A3:05:3A:0B:73:A8:9F:44:8E:81:BE:3C:19:64:A2:8F:87
            X509v3 Authority Key Identifier:
                keyid:15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1d:15:fb:00:8b:cc:55:4f:1c:d0:b5:31:cd:7f:9c:5b:b1:
         3b:45:2c:29:bd:75:28:3f:69:b3:9d:33:3d:38:7e:5f:6b:94:
         88:cf:24:99:8a:38:fc:8c:c6:9f:6a:0a:86:63:72:55:9c:6c:
         3e:7e:ac:d4:20:27:51:0c:50:df:31:37:d1:b2:37:45:41:fb:
         cd:8f:0c:ba:81:66:02:96:f8:f3:b5:d9:7d:43:4d:50:e3:85:
         d6:07:ec:55:ba:13:ca:5e:1e:13:14:66:62:48:aa:43:73:b2:
         de:21:30:46:a8:b9:c7:fc:c0:d5:d7:2c:75:58:f6:19:97:96:
         18:2f:16:d7:a3:23:0f:30:aa:c1:81:50:49:4c:e4:56:16:da:
         60:06:ba:24:de:49:6f:44:0e:ac:4e:c6:fa:f9:49:ea:09:c4:
         b4:49:61:b7:f4:dd:07:86:30:85:ea:14:37:6a:43:9a:54:a1:
         c1:21:62:46:23:b2:dc:44:61:86:62:3b:04:27:80:fa:33:aa:
         3c:00:6f:5b:ff:c6:37:d4:ab:4d:bb:2e:d9:c3:78:bc:fd:60:
         79:3a:3e:d8:d8:6d:23:aa:b8:6b:18:6d:35:99:2c:61:6e:e5:
         be:b2:16:ec:78:8f:16:c2:53:a1:64:a8:35:3f:52:07:3f:59:
         19:9c:90:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:12:44 2025 by rpki-client