Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
File:                     fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json)
Hash identifier:          4ZhL7fWuMNOqLBUzfIqd+L8P18EUzcmsc7lQEO9XXzk=
Subject key identifier:   08:50:9F:BC:A5:3D:CD:C2:B6:7C:3E:77:60:20:D4:74:9D:95:F2:73
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Certificate issuer:       /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial:       01976CCFB5F55954C6AA18F7C7033B7A1D12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
Manifest number:          0544
Signing time:             Sat 14 Jun 2025 05:00:41 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:41 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:41 +0000
Files and hashes:         1: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: aBAaxsWmqlU+5rGb2CkrIxCoJX+niKJ4cnYMw6z5oy8=)
                          2: lnM8FCGF8fRbpieUbEQd8sXstK8.roa (hash: fZ4mA2DPYBcr3ruplZ8MmHZ+BtKN9pxbg2b5pcYF7Tg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:b5:f5:59:54:c6:aa:18:f7:c7:03:3b:7a:1d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
        Validity
            Not Before: Jun 14 05:00:41 2025 GMT
            Not After : Jun 15 05:00:41 2025 GMT
        Subject: CN=08509fbca53dcdc2b67c3e776020d4749d95f273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5c:12:35:0b:1e:c2:5d:0a:8a:eb:08:27:36:
                    3b:e5:b9:e1:ed:b8:79:cb:7e:2c:84:15:d5:e1:71:
                    64:5f:e2:3a:27:26:c6:c8:f7:12:d3:d9:9f:bd:41:
                    8c:95:11:7b:09:3c:97:07:8e:c0:09:37:79:58:a3:
                    ee:28:f0:69:55:1d:e2:a2:34:9e:d4:4e:f7:b0:da:
                    fc:03:a2:8e:4b:d4:95:ab:c9:01:a5:4b:95:f5:2c:
                    2b:f5:fb:aa:7e:a7:49:8f:ec:51:2f:cd:44:23:e7:
                    b6:db:f5:0c:3c:c9:3d:80:77:65:36:61:f7:4a:d7:
                    40:49:ca:e4:dd:b8:d3:c4:ce:b7:7c:be:aa:86:5e:
                    8a:ec:23:4a:8f:cc:2b:30:26:1f:a0:a1:1a:e4:c7:
                    e2:d4:97:8f:3d:0e:26:d6:a5:7b:0d:ae:68:d0:3a:
                    0d:fb:0f:5e:73:22:a8:a5:3d:01:9d:37:79:12:03:
                    58:6c:18:93:d9:04:40:c4:67:a2:08:e8:40:eb:45:
                    9c:2c:ce:15:59:70:cb:c7:f1:76:02:8f:e0:a5:3a:
                    84:f8:0e:0f:fb:a9:c7:88:29:eb:7b:59:8b:7e:5d:
                    de:95:98:94:b4:01:50:63:16:b9:f2:29:f0:a8:aa:
                    8f:5f:be:91:b7:06:e1:aa:0e:78:e8:4c:c0:9d:d6:
                    d7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:50:9F:BC:A5:3D:CD:C2:B6:7C:3E:77:60:20:D4:74:9D:95:F2:73
            X509v3 Authority Key Identifier:
                keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:8e:60:00:44:6d:8b:8c:72:4a:2d:34:0c:9b:0d:37:0f:8f:
         1c:bb:13:51:ee:03:f5:ca:b7:7d:ba:85:e6:3b:b0:e8:a5:d9:
         24:a9:21:01:2e:7b:b7:db:43:76:8a:83:4d:dc:0b:74:c2:a0:
         28:14:f8:54:ba:16:19:a4:22:3c:d3:00:68:05:af:30:d1:67:
         76:b8:2e:a0:a4:a5:79:5e:48:e4:cd:41:8e:89:e1:f4:fa:8b:
         cb:22:87:d1:4c:75:13:59:ff:60:eb:04:c3:5f:d5:67:00:33:
         c5:18:2e:34:9c:99:96:4f:15:ee:67:81:9a:02:7e:63:f5:81:
         f7:01:d3:22:b9:bb:57:7f:ab:cd:b1:d2:e6:6a:24:e7:e2:45:
         f1:c3:f5:ff:61:5f:bf:27:95:b8:d3:32:5c:11:09:42:ae:2f:
         aa:6e:0a:a2:94:c6:77:eb:d8:24:f5:fe:b8:93:a1:7c:9d:02:
         15:d8:9c:11:7f:35:39:3c:ab:11:d6:1a:fc:d3:2d:0d:b5:a2:
         ec:fa:e2:ae:6c:33:0b:10:81:e1:3c:91:b7:52:03:dd:3c:79:
         ba:4a:66:90:1b:57:da:93:20:33:ed:c8:ce:ae:2a:93:7b:da:
         48:2c:a9:ee:a7:f1:b0:ef:bd:c3:51:6b:9b:a9:5e:6c:52:4c:
         42:b0:c2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:08:30 2025 by rpki-client