Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
File:                     FgnCTa4-7_y--jemiGZKyTMA71g.mft (raw, json)
Hash identifier:          1jmoLZDM0WXkAQ2QMKwEmSObreeFiGviAjDVVHNZl+o=
Subject key identifier:   43:C8:9F:26:2B:37:7E:F7:BD:C9:46:AF:CA:B4:00:9E:F3:31:A2:F2
Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
Certificate issuer:       /CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Certificate serial:       019872CF2794F162E34DADE7A6E0BEEF8AF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
Manifest number:          14ED
Signing time:             Mon 04 Aug 2025 02:00:35 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:35 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:35 +0000
Files and hashes:         1: 7b72R8YLb2SHH9MjZo55yK3DpuU.roa (hash: EOM+9zK0YudveaEnl18alhJ+F+Rk/QyUoYSZ9iQgFf4=)
                          2: FgnCTa4-7_y--jemiGZKyTMA71g.crl (hash: lzxUhhaGD/+y3FcFpHmZS4NczqhAtN6HDm2m342GF/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:27:94:f1:62:e3:4d:ad:e7:a6:e0:be:ef:8a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58
        Validity
            Not Before: Aug  4 02:00:35 2025 GMT
            Not After : Aug  5 02:00:35 2025 GMT
        Subject: CN=43c89f262b377ef7bdc946afcab4009ef331a2f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:45:54:d0:3b:22:98:c5:fe:ed:62:d9:e8:
                    1a:4e:0b:6a:79:a7:34:80:56:c7:ec:8f:da:a2:cb:
                    52:cd:75:26:c8:b7:db:5c:19:fc:d5:1f:e7:ed:8e:
                    0d:9d:ee:4a:0c:d4:fe:89:31:a9:25:06:ae:30:29:
                    66:a7:6f:85:f9:3f:40:6d:a5:80:80:d3:df:aa:c0:
                    b9:fe:72:bb:14:65:db:f3:45:76:16:89:3f:25:f5:
                    e1:92:73:cd:f8:c3:f2:2e:fd:1f:e9:21:48:5b:60:
                    e0:b0:4b:dc:bc:fc:bc:bc:c5:a4:be:a5:3c:70:1b:
                    b2:fc:86:9c:31:95:f0:b7:48:05:6a:32:a7:0b:0b:
                    66:93:a2:25:72:0e:28:41:51:dd:e7:c8:f1:35:76:
                    fe:81:77:e4:cb:cb:fd:ae:83:35:91:88:71:dc:85:
                    5d:73:ff:5b:9f:57:ff:54:bd:8a:47:9f:f9:bb:a6:
                    d2:cf:b1:05:5c:60:e8:b4:61:9d:c2:23:c7:26:44:
                    54:03:11:0f:3c:d2:55:7c:8c:28:5c:ea:fe:ba:70:
                    30:61:6b:3d:d3:cb:28:bd:ff:d6:f4:d6:77:a5:9a:
                    fa:d0:b6:54:84:af:a4:5f:a0:cc:9d:65:3b:fb:8d:
                    09:3c:cc:7c:73:a9:8e:19:0e:ae:e3:7b:6a:51:6a:
                    cd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C8:9F:26:2B:37:7E:F7:BD:C9:46:AF:CA:B4:00:9E:F3:31:A2:F2
            X509v3 Authority Key Identifier:
                keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:4d:8c:48:f1:18:a5:78:dd:5f:95:26:1b:46:3a:7f:9a:c8:
         34:00:0e:a9:2c:1e:a3:af:58:46:83:39:98:ad:cc:a4:b2:f6:
         49:b9:65:4d:fe:53:dd:53:52:90:4a:41:ea:31:c2:30:0b:69:
         c9:e7:a9:de:cb:4c:c2:12:9e:9b:84:a6:4f:11:c4:a9:58:bd:
         c7:13:a4:74:75:78:ee:74:48:8a:36:5e:af:47:29:db:de:ef:
         ae:aa:2e:01:4c:a4:50:3b:22:6b:8e:b2:55:77:8a:6f:ec:5b:
         df:86:ee:28:6d:e9:2d:ca:8f:4b:e1:ad:5a:23:5a:da:09:91:
         7b:b2:f3:a9:47:af:77:0e:77:a1:e8:ce:49:c1:96:68:26:f9:
         85:9d:4a:bb:da:b3:d4:ad:76:7f:71:b8:2c:cd:82:08:1b:65:
         56:de:71:e1:89:b2:cd:4a:af:30:07:c7:6e:47:32:8b:ed:33:
         40:3a:7d:75:05:29:cd:c9:73:21:ba:25:b6:87:d6:62:a2:b4:
         81:67:87:2c:0b:b5:db:ac:1f:e4:54:88:14:3f:59:6b:0b:83:
         14:d3:48:e5:6e:3d:06:79:cb:28:34:f7:73:e0:8f:e1:36:00:
         34:95:43:6b:f8:9b:ba:85:4d:5f:7d:df:a8:93:17:1a:3a:5c:
         c5:e8:a7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:20 2025 by rpki-client