Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
File:                     FdaRyV0UuLzeZpKgMgzA4odWsFk.mft (raw, json)
Hash identifier:          qpofNPDHtrVDDl13rycAJ6YkakYfAO69/TqBeXO9mcE=
Subject key identifier:   9A:3E:BC:72:18:D3:72:23:76:64:24:0A:56:E8:D9:5E:40:5C:D3:DC
Authority key identifier: 15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59
Certificate issuer:       /CN=15d691c95d14b8bcde6692a0320cc0e28756b059
Certificate serial:       0197703EF6A6AE8BE3725C68C452B60B861F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
Manifest number:          03BE
Signing time:             Sat 14 Jun 2025 21:01:03 +0000
Manifest this update:     Sat 14 Jun 2025 21:01:03 +0000
Manifest next update:     Sun 15 Jun 2025 21:01:03 +0000
Files and hashes:         1: FdaRyV0UuLzeZpKgMgzA4odWsFk.crl (hash: ITHAKKlSOfLzW9sgTyXNZhrMk49oNZB0keTxmwxu3io=)
                          2: l3kIS-H41zLKlD417TNejtnJFY4.roa (hash: FXoM//hoNobYIufdMl7hBHWJsSDmxoPmDOYAZonvSC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:3e:f6:a6:ae:8b:e3:72:5c:68:c4:52:b6:0b:86:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15d691c95d14b8bcde6692a0320cc0e28756b059
        Validity
            Not Before: Jun 14 21:01:03 2025 GMT
            Not After : Jun 15 21:01:03 2025 GMT
        Subject: CN=9a3ebc7218d372237664240a56e8d95e405cd3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ad:5c:fb:84:98:b3:32:31:90:b1:3f:90:d6:
                    ed:e8:3d:e8:f0:94:1d:de:2f:e3:38:df:22:7b:c2:
                    c4:5d:97:38:0d:6b:49:36:41:c6:5d:78:45:ed:7c:
                    df:10:fc:46:ee:ec:ed:b9:11:5e:7f:dc:e9:95:c6:
                    6d:df:d6:2c:35:c2:43:f9:ab:6e:ea:b0:cf:81:44:
                    29:31:49:fb:fa:1b:9b:4a:55:a7:78:c6:4a:59:6e:
                    0b:74:b6:6a:6d:f2:30:10:76:bc:9e:7e:a4:10:fa:
                    5b:16:cd:f8:fe:7d:9e:56:15:7f:4a:c4:c0:c4:cc:
                    1d:61:ba:e0:93:41:05:e8:ca:17:6f:94:25:43:59:
                    1c:ae:0c:00:a7:0c:57:94:d9:b9:84:c5:de:ed:96:
                    f6:82:4d:62:30:5e:21:a2:c1:49:0e:86:f0:95:1b:
                    9b:12:db:59:77:a5:c2:79:cd:80:e8:7c:1f:dc:42:
                    db:6a:6b:b6:f8:0b:2e:d3:f6:61:47:ba:1c:b8:7c:
                    a0:98:34:a3:bd:2a:d2:ce:e3:c6:d5:b7:62:b9:fe:
                    30:fb:15:e6:a3:45:be:ed:0b:e3:ed:cc:db:e2:2f:
                    d2:1c:2e:02:ed:ad:0d:e2:64:6a:08:a1:53:19:fe:
                    4d:44:6d:29:a5:cf:bd:7c:95:f7:d0:28:39:5c:87:
                    a9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3E:BC:72:18:D3:72:23:76:64:24:0A:56:E8:D9:5E:40:5C:D3:DC
            X509v3 Authority Key Identifier:
                keyid:15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:49:93:3b:77:14:18:18:eb:69:2a:4e:14:e7:97:f1:0b:47:
         bc:97:28:ee:96:56:fd:9c:b4:5d:9f:73:19:23:64:ff:6f:74:
         a4:9e:8e:ac:1f:bd:f8:ad:e9:f3:15:44:6f:66:ba:ed:ef:95:
         64:17:ef:62:07:9d:b9:be:3d:b3:8a:c1:05:c2:a5:8f:54:17:
         ee:8a:31:95:bb:80:69:c7:c2:4e:2a:2d:a1:a1:4c:e7:31:8b:
         97:f2:66:3d:17:98:b7:c6:f1:36:03:94:de:08:65:e0:46:f2:
         3a:57:71:b8:7a:e4:14:d8:c1:d0:da:ce:fa:8f:b4:97:8f:b1:
         b1:9d:85:40:c8:7e:b9:3a:32:36:e1:1f:b9:dd:22:0e:90:e2:
         e6:14:20:64:1a:d5:76:65:87:6b:50:df:5e:cd:17:11:de:e7:
         8b:35:fa:ee:3a:75:43:ab:35:5e:fd:0f:b9:65:13:e0:55:86:
         3e:43:61:29:1f:5b:b1:a5:ff:a7:f0:ee:1a:4d:74:5b:7f:87:
         3c:92:5a:a7:b4:b4:cd:14:6a:e2:38:61:c9:62:df:08:89:9a:
         f0:a6:83:df:d0:97:9f:b2:3b:c1:a4:94:83:15:d1:29:9a:7f:
         38:94:3d:a0:a2:09:cd:95:86:11:65:54:9e:1c:f7:ec:06:aa:
         0a:bc:ac:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:46:44 2025 by rpki-client