Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
File:                     fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft (raw, json)
Hash identifier:          ZhKxDJObLvwmxCbNZzWPQ/sXQa5F5j93Z1S2JBIsF5I=
Subject key identifier:   31:2C:CB:F2:4F:3E:1A:19:39:7C:D9:87:64:B0:68:2D:F4:C7:B3:A6
Authority key identifier: 7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
Certificate issuer:       /CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Certificate serial:       0197684E7A32851A09D242567B55DE7872BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
Manifest number:          1595
Signing time:             Fri 13 Jun 2025 08:01:02 +0000
Manifest this update:     Fri 13 Jun 2025 08:01:02 +0000
Manifest next update:     Sat 14 Jun 2025 08:01:02 +0000
Files and hashes:         1: 3KUq_UtAlAJJlZN5IvjwrjZ47dM.roa (hash: bj9EPm/Zl9VNqii4xedVhy7HdLZBWsFZ4Eeye1T5m3A=)
                          2: W2BuG8RslZuNWC6TDHZNFeUTCEY.roa (hash: +B77DKlelA4p5jWRpiPjtjH8suz5E4rMKyxyDqtqToM=)
                          3: btWfzHoqqvCj7SwksK3sEa_GGss.roa (hash: 35nmBZjfYPLc1DjqtenJ/YTwHQyVVKy8N+n70T+IfxM=)
                          4: fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl (hash: FN5/7nX3RENjjY3NvhDLwWlDJT8AQx0EsT+Qf3imEu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:7a:32:85:1a:09:d2:42:56:7b:55:de:78:72:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
        Validity
            Not Before: Jun 13 08:01:02 2025 GMT
            Not After : Jun 14 08:01:02 2025 GMT
        Subject: CN=312ccbf24f3e1a19397cd98764b0682df4c7b3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:69:19:99:80:fe:6e:75:fa:66:55:b3:4e:d5:
                    62:55:b7:f4:af:b2:b3:40:00:4e:a9:bd:95:af:a6:
                    2a:54:49:e5:17:5b:58:92:55:d9:a5:c1:9f:68:aa:
                    ec:de:f2:a3:90:3e:ad:fd:f1:2a:4f:99:ad:36:94:
                    41:fc:7b:f1:42:8f:8c:f6:6a:cb:a2:0b:1f:59:34:
                    3d:63:2a:59:95:29:d7:01:17:40:a0:d9:25:bf:a4:
                    06:3a:42:34:50:4c:c2:ef:bf:bb:05:1f:37:b4:1f:
                    04:28:70:8c:cd:72:58:60:36:26:ad:0d:4f:69:7f:
                    b8:51:d6:75:15:80:05:2f:72:b3:43:72:ac:5e:05:
                    08:20:51:b4:b3:6e:ab:e0:9b:6f:6f:28:9b:db:4b:
                    10:49:ad:22:b3:24:a1:fa:7c:37:dc:2b:7e:68:c8:
                    16:16:40:41:94:05:6d:8d:2c:fd:b3:f8:92:2b:94:
                    73:b3:7a:a4:ac:c2:fb:09:f3:3f:06:25:49:85:4f:
                    71:ac:ba:de:23:9d:e8:30:71:13:6a:06:f3:66:71:
                    d1:f8:61:8d:68:b9:d6:ec:3d:0c:d5:09:e4:b5:97:
                    c6:09:8c:ba:c4:2a:89:ab:e5:a2:4b:4f:55:6b:d3:
                    5f:b4:05:55:73:a2:35:93:41:00:df:6d:10:f4:9a:
                    32:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2C:CB:F2:4F:3E:1A:19:39:7C:D9:87:64:B0:68:2D:F4:C7:B3:A6
            X509v3 Authority Key Identifier:
                keyid:7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:1e:96:07:0c:6e:b0:83:61:93:21:89:5d:b0:02:3b:e5:f2:
         37:c4:47:d9:cf:74:a4:ff:6b:62:e5:38:7c:99:56:36:60:c6:
         15:a1:5f:81:71:54:c1:7f:19:d8:db:e1:15:55:19:9f:26:7d:
         d9:cb:c2:76:e5:e1:a2:e8:25:97:64:20:a8:72:b6:9e:94:0c:
         21:fe:ca:c2:eb:5b:a9:45:86:fa:d1:fb:75:a2:d1:5a:1e:b5:
         eb:ab:3a:ec:63:fa:23:9f:01:52:90:53:ec:94:01:dd:8b:40:
         4c:c4:69:e9:79:2c:2c:f6:b1:18:79:cf:e9:17:c1:aa:10:0a:
         f0:1c:cc:17:47:06:0b:9d:50:33:d9:d1:c3:2b:88:d9:86:75:
         62:7d:fd:88:ec:ce:e1:4e:e5:53:a4:a4:8d:62:80:ce:e4:b0:
         e5:b8:79:7b:0b:32:1c:83:0b:37:04:48:72:b8:e7:b3:43:eb:
         16:ba:8d:08:6e:b9:99:7f:70:24:7b:d4:35:4f:8c:de:6e:bd:
         b9:8e:d3:f3:69:7f:67:85:54:73:68:aa:16:04:aa:eb:29:f7:
         7a:e2:2d:55:65:98:c1:f3:36:9b:2d:2f:ac:21:fc:a1:13:48:
         03:28:dc:bc:0f:b4:d4:01:46:f3:cd:c6:f6:82:1d:18:ee:e2:
         cc:17:b4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:36 2025 by rpki-client