Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
File:                     fNFi3seCCbwDrdCBUn1Usn6E0m4.mft (raw, json)
Hash identifier:          vyEGvUBXaC52xy0pX/l+GmuNSanE3rJI9/p4Tx0WcQk=
Subject key identifier:   CB:37:05:7F:65:47:1F:9B:73:28:BA:3F:C4:B2:3A:DA:97:40:96:97
Authority key identifier: 7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E
Certificate issuer:       /CN=7cd162dec78209bc03add081527d54b27e84d26e
Certificate serial:       01978B10A3EC0336553104E32EA2DE13630D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
Manifest number:          15A2
Signing time:             Fri 20 Jun 2025 02:00:12 +0000
Manifest this update:     Fri 20 Jun 2025 02:00:12 +0000
Manifest next update:     Sat 21 Jun 2025 02:00:12 +0000
Files and hashes:         1: fNFi3seCCbwDrdCBUn1Usn6E0m4.crl (hash: veSE+PZtp1Qkt4QPoc0zdkCN7tugRsVbnvShcgy6VcU=)
                          2: p62St_0MRIeBUvHxqOmIuKO2S0g.roa (hash: V3Cr5hnF6tOsq5Vm2VEjfSqOP5RKmdhFpUZAhs7o/b4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:8b:10:a3:ec:03:36:55:31:04:e3:2e:a2:de:13:63:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cd162dec78209bc03add081527d54b27e84d26e
        Validity
            Not Before: Jun 20 02:00:12 2025 GMT
            Not After : Jun 21 02:00:12 2025 GMT
        Subject: CN=cb37057f65471f9b7328ba3fc4b23ada97409697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:cb:b5:75:3e:67:62:d8:1d:22:8d:0e:83:
                    97:ae:8f:43:31:7b:9b:45:22:6c:78:86:6b:48:5c:
                    79:5e:f9:11:a0:94:69:fa:ad:83:15:6c:27:e2:8a:
                    d7:d0:80:a8:47:9a:cc:be:ad:66:dd:70:58:54:b1:
                    04:be:b8:6b:7b:c5:82:44:b1:46:c3:7e:06:28:53:
                    aa:7d:2c:4f:bf:e2:61:85:57:4f:b2:e1:23:d9:96:
                    89:df:8b:ae:5c:bb:ef:36:a8:7c:ea:ae:b6:f9:74:
                    33:c5:d4:35:55:81:5a:90:4d:e1:28:27:83:cd:96:
                    72:88:77:2b:d1:06:17:38:69:28:8c:5d:bf:25:4a:
                    54:fb:89:85:31:bd:48:5d:30:25:db:8b:f7:12:9c:
                    a6:db:73:32:33:e1:9e:10:37:ea:1f:a9:56:5e:aa:
                    01:4a:12:ad:17:ec:e7:f1:7f:2c:f3:cf:3b:91:ca:
                    ce:6f:c2:9f:20:62:29:68:b7:8b:be:d8:e4:46:5e:
                    6a:41:4b:19:b0:0f:d8:34:4e:ea:46:65:1c:9b:76:
                    9e:64:12:51:89:9e:59:28:23:4a:6e:7e:55:23:cd:
                    ab:50:41:8f:5a:7c:c3:51:fa:8e:4d:88:78:4b:7d:
                    10:06:3c:9e:f7:2b:1b:12:fe:8c:01:5b:a5:fb:d1:
                    32:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:37:05:7F:65:47:1F:9B:73:28:BA:3F:C4:B2:3A:DA:97:40:96:97
            X509v3 Authority Key Identifier:
                keyid:7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:7f:05:2e:e6:91:72:05:57:a2:cf:18:45:39:fa:1c:cb:80:
         4e:d6:27:87:85:bf:fd:d1:c4:b9:24:12:2b:52:9f:65:63:6f:
         07:53:ed:da:79:48:6b:7f:db:f2:4d:d9:cf:99:0a:09:03:c8:
         2a:a6:b6:34:17:29:4b:71:15:1c:44:1b:af:d0:e3:6f:62:58:
         6d:b8:cf:4e:2d:14:38:be:5d:27:a0:f2:9b:91:29:10:c1:0e:
         02:fa:77:c5:1b:35:75:0d:70:89:80:a7:81:d7:4e:e2:05:c4:
         16:46:0f:65:d5:be:b7:87:02:b8:f5:71:ad:fa:3a:3a:8d:92:
         3f:dd:30:91:6a:64:93:f2:39:72:de:88:b6:f0:1c:7a:80:6f:
         54:e2:9c:70:0c:ab:8c:35:1d:3b:7f:d3:07:4f:08:05:ce:78:
         3e:d7:49:58:52:85:5c:a0:03:c1:d4:74:0d:05:aa:da:ff:6d:
         26:e4:a1:83:3b:b4:36:16:2c:80:de:0a:18:ab:ac:22:84:9a:
         f8:09:d6:f5:23:5c:e6:55:1b:c2:8a:18:90:f6:c9:fe:1e:67:
         3b:bd:86:90:1f:f2:13:64:d8:88:b8:d2:6b:9c:78:53:2a:1e:
         4f:b6:88:d9:f1:7d:dd:b3:fb:92:ca:d6:fe:92:b3:79:1f:87:
         22:43:c6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 06:07:49 2025 by rpki-client