Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
File:                     FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft (raw, json)
Hash identifier:          9s4scmK4k/mLod3SqsblmuGKHFmzzuL+K3SV6ijCEac=
Subject key identifier:   1D:72:17:CC:A6:B0:E8:D8:75:01:F3:2A:BC:9C:00:99:78:4D:03:57
Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
Certificate issuer:       /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Certificate serial:       019770081B45A10714489DCA531169B3A372
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
Manifest number:          1598
Signing time:             Sat 14 Jun 2025 20:01:08 +0000
Manifest this update:     Sat 14 Jun 2025 20:01:08 +0000
Manifest next update:     Sun 15 Jun 2025 20:01:08 +0000
Files and hashes:         1: FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl (hash: 4rJrYIIxW9Ax/4aoIRTeJxb6rVgVYmqMrRyp6/H6WYU=)
                          2: JFz1OMtyYE0bdrPpAzWAHxoNfr0.roa (hash: GCMi3F+baVVPvUwQFwt0LCTFyVV4lIfA34WPsvrvO6A=)
                          3: RnPjQu1TRB6OusL4aMQpC4JKqmI.roa (hash: fzeYA/Ogqc2irWhfM/UbWuBPWyUJiutWTEcNUX+4+LU=)
                          4: Ut6Isd3FyfcwFqXffcOSTj20big.roa (hash: 6WWf7LzHGfNpFV/UMH6n5UZ2IDbI9b8RYTztg7MMT9k=)
                          5: YrBEbKYcRihrrXhf5rGMn4NnWP8.roa (hash: 0EjDwiQerEsJrNpiAV/U41dtG8QfC+EEgtF9mTKQLqE=)
                          6: oVdkjWCoO6UKiUnCLGAAHjBO9ms.roa (hash: 60Qb8QX+Ft+JLMQ7m3ymUwisPXVeh0oMfLPMdsaJtK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:08:1b:45:a1:07:14:48:9d:ca:53:11:69:b3:a3:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
        Validity
            Not Before: Jun 14 20:01:08 2025 GMT
            Not After : Jun 15 20:01:08 2025 GMT
        Subject: CN=1d7217cca6b0e8d87501f32abc9c0099784d0357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e4:17:3b:c1:56:03:12:f3:32:09:98:e6:94:
                    47:fc:0b:28:f4:89:27:28:e3:1b:92:9f:6a:6c:7d:
                    f5:8a:31:67:f7:95:01:e7:60:48:00:09:6b:c2:50:
                    8e:82:14:6c:ef:a4:8b:46:81:00:05:1e:f9:90:d1:
                    a4:c6:4e:56:59:87:ac:59:6a:28:b5:bf:77:11:63:
                    a5:99:9c:67:f0:60:93:41:d5:57:2d:eb:90:37:9b:
                    06:e2:ae:28:1c:50:31:0c:ef:a4:22:bf:f0:95:74:
                    1b:16:5a:c2:fb:20:73:f1:cd:c6:14:94:1b:26:88:
                    ce:81:dd:df:8f:44:3c:30:6e:69:6c:f7:30:2c:a8:
                    cd:61:11:a8:d0:12:f0:f9:2f:72:b9:30:b6:90:45:
                    c9:69:26:e2:1a:92:6e:4c:7f:83:02:fc:df:b0:46:
                    a8:00:b5:39:e2:14:6e:fe:e1:dd:85:fa:6d:ef:1b:
                    eb:ac:b7:18:40:5c:93:b1:3b:3c:28:ac:29:67:09:
                    03:79:45:d5:72:eb:8f:46:86:e5:70:a1:7e:4d:2d:
                    8b:22:57:2b:d1:76:09:3d:cf:2e:2d:8a:df:44:f3:
                    ed:94:46:d9:70:f2:56:9e:95:3e:3b:9e:74:9b:50:
                    1a:77:a7:f2:af:dd:6d:df:36:14:e4:9f:93:6b:96:
                    cc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:72:17:CC:A6:B0:E8:D8:75:01:F3:2A:BC:9C:00:99:78:4D:03:57
            X509v3 Authority Key Identifier:
                keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:53:87:09:3c:a7:b7:4c:e8:84:0c:22:2c:a5:d3:2e:7b:21:
         4c:bf:7a:95:c4:26:96:84:c6:ac:bd:73:a8:56:a2:a4:36:73:
         94:e5:9f:03:c5:27:64:24:a5:49:f6:fa:8f:c4:ae:e1:82:df:
         e3:48:71:be:e7:92:62:8b:77:fb:05:7d:61:5f:65:7c:8c:48:
         ae:62:c3:9f:45:e9:bc:ba:01:2c:81:88:ab:44:1b:8b:cb:9c:
         83:1c:9a:c2:d6:01:72:66:75:59:dd:99:cd:bf:d6:09:95:62:
         69:35:72:e2:ae:81:3f:aa:09:d5:ca:02:c4:14:15:d0:e8:db:
         5f:8b:46:0e:c0:2b:ff:72:e7:8d:80:5c:31:5f:3e:86:4f:22:
         45:34:3a:6a:30:a0:21:df:b5:a6:6a:16:50:16:8b:cd:34:06:
         93:a2:81:c9:42:82:28:6d:2e:ab:8c:44:1c:60:71:85:a7:2a:
         40:e3:a2:11:6a:18:71:70:38:54:86:fa:26:96:d0:99:ea:21:
         de:14:db:dd:d8:ae:54:03:d5:c2:7e:ff:4e:bc:5d:20:95:6f:
         a8:ee:52:ab:34:07:df:f1:df:b9:b8:6e:c6:fe:15:ec:9c:97:
         58:63:48:ba:30:7f:a0:cf:92:4a:d5:c8:90:0e:63:ac:eb:98:
         a1:4c:ad:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:39:04 2025 by rpki-client