Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
File:                     Fi14JJtyG00s6M9t_PvEQiITrJ0.mft (raw, json)
Hash identifier:          mdVyYOj1fpo0dov0O79/2ikUlTmySBWBFt4QSonk1w4=
Subject key identifier:   6B:7B:8E:B7:28:02:20:3B:C2:7D:DF:C4:C6:6B:5B:AA:D7:F7:F5:0A
Authority key identifier: 16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D
Certificate issuer:       /CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
Certificate serial:       01977A8B811902B4D7690B2A2BBC57A7441B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
Manifest number:          1594
Signing time:             Mon 16 Jun 2025 21:00:52 +0000
Manifest this update:     Mon 16 Jun 2025 21:00:52 +0000
Manifest next update:     Tue 17 Jun 2025 21:00:52 +0000
Files and hashes:         1: 1-OxGWMnguhulz6f31kCb1mmRHrM.roa (hash: SvBOg3Xrt3LXP7jg7xDbyxKXVwwahdO0dORGRkeHvnw=)
                          2: Fi14JJtyG00s6M9t_PvEQiITrJ0.crl (hash: OF8xgUOTtRKiYR3qOvwH6xua0sC1WRfsU++N+aKlXu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:8b:81:19:02:b4:d7:69:0b:2a:2b:bc:57:a7:44:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
        Validity
            Not Before: Jun 16 21:00:52 2025 GMT
            Not After : Jun 17 21:00:52 2025 GMT
        Subject: CN=6b7b8eb72802203bc27ddfc4c66b5baad7f7f50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:86:a6:5d:c1:25:bd:e7:23:7f:34:3b:04:55:
                    69:3a:3d:ba:94:5d:82:cf:c6:12:2c:98:86:b8:71:
                    dc:32:dd:d4:64:17:6e:ee:1e:a0:99:17:1f:16:47:
                    a8:56:bb:bd:a8:b0:0f:bc:75:d2:22:78:c0:57:19:
                    8f:5e:18:54:b1:d1:0c:8f:d5:5e:1d:c0:1d:7e:3a:
                    0e:9e:5a:18:f2:b1:fc:63:63:f0:a9:15:5b:6e:9f:
                    40:2c:20:91:6b:73:35:38:82:b3:ce:e0:f1:6c:d7:
                    cd:9e:3c:1d:f1:aa:93:7a:6d:ec:b1:09:98:a7:06:
                    7f:83:76:57:c0:aa:dc:a7:d4:39:3b:30:4a:84:06:
                    b4:0d:b7:9f:cf:2f:f4:00:9e:f6:2e:70:5e:f7:55:
                    73:51:b3:7b:66:e6:3b:aa:4c:d9:bd:03:58:53:78:
                    1e:b6:e3:98:c2:f5:cf:ee:83:b4:02:6e:55:e3:de:
                    40:7d:0f:33:19:ae:17:df:36:8e:5d:bd:6c:4c:86:
                    1d:e5:cd:59:25:ed:7a:3a:fd:86:f3:f0:15:64:03:
                    d7:a0:af:fd:3a:53:2b:16:9b:81:b1:aa:f7:b9:e7:
                    45:47:ea:46:13:5a:50:05:ad:81:0c:bb:16:8e:3f:
                    e6:74:d6:c1:0a:b0:7e:a3:2a:33:9f:1c:41:10:81:
                    65:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7B:8E:B7:28:02:20:3B:C2:7D:DF:C4:C6:6B:5B:AA:D7:F7:F5:0A
            X509v3 Authority Key Identifier:
                keyid:16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:4b:6a:b2:f0:56:16:2f:5c:f5:74:17:e2:6d:b9:38:39:38:
         42:62:b7:f2:f1:12:68:f9:6f:ee:13:6a:34:ed:82:95:04:8e:
         05:73:57:ab:99:3e:2b:93:4c:cb:a9:32:bf:45:94:f9:7f:7f:
         41:c4:aa:e0:6c:14:d0:40:a6:02:03:2e:ee:2a:7d:54:f1:86:
         ab:c6:96:7b:09:b3:3b:29:85:6c:c0:2e:d8:13:a3:9c:8a:1a:
         a3:a0:ab:73:eb:87:b0:f0:9f:e8:1e:54:1d:01:47:23:46:b6:
         b1:23:f4:e1:e6:4c:e0:7c:7c:ea:35:c7:10:e9:4e:a1:2c:f2:
         8b:c4:a5:ea:83:5f:47:77:c4:86:65:ef:aa:62:1f:2e:47:c3:
         7d:cc:ae:78:16:e7:65:19:f5:7c:12:35:0f:71:2b:8d:31:0a:
         7e:5d:65:5b:e8:ee:51:1d:65:4a:33:b9:39:c5:b3:2e:1f:ba:
         03:9f:e4:b5:d6:f3:08:f7:58:30:e1:ee:4c:82:53:37:ea:ab:
         9e:af:82:6f:23:8e:cb:30:43:86:9e:d9:54:ce:5a:3f:58:6a:
         d1:c7:63:82:67:3c:fd:da:68:82:a2:fb:1c:d7:9b:b9:47:e6:
         04:10:87:ff:34:0f:58:2c:ae:83:15:17:fb:6c:9c:48:79:81:
         07:be:56:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:48:55 2025 by rpki-client