Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
File:                     fbrLH8LCBjBCeBYxtRfOR1Izor0.mft (raw, json)
Hash identifier:          8tNrIlYj88yHZTT3pb3YZwQI+sZaC9HklX1FbXyyBqU=
Subject key identifier:   85:3B:88:D0:14:70:A7:AE:0C:50:76:B6:39:FD:2E:AC:A6:B7:72:F6
Authority key identifier: 7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
Certificate issuer:       /CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Certificate serial:       0197692994EEA9A9F2D4F489F10E6068FAA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
Manifest number:          1593
Signing time:             Fri 13 Jun 2025 12:00:22 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:22 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:22 +0000
Files and hashes:         1: 1-wklC6TSt7N7HRWBFGDFnaI9WKk.roa (hash: UoScuu7gPfPB588Zd0Ba8V3hu4Sz3u9pZMaY+haZKHU=)
                          2: fbrLH8LCBjBCeBYxtRfOR1Izor0.crl (hash: n4ZoLKLq2xh8Ck1/EjisfN8wa3UJL7vaTp9bU6/MTUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:94:ee:a9:a9:f2:d4:f4:89:f1:0e:60:68:fa:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dbacb1fc2c2063042781631b517ce475233a2bd
        Validity
            Not Before: Jun 13 12:00:22 2025 GMT
            Not After : Jun 14 12:00:22 2025 GMT
        Subject: CN=853b88d01470a7ae0c5076b639fd2eaca6b772f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fb:fc:d5:a3:31:5f:16:d8:3a:bf:98:4a:04:
                    31:fd:5d:6f:28:50:a8:4c:7d:44:0c:56:f6:8d:ae:
                    5b:d2:53:52:8f:63:b4:9a:6c:30:0a:9c:32:69:ab:
                    54:36:5c:b8:9c:e7:26:e5:84:86:2d:91:d0:d5:ae:
                    c2:9a:e4:8d:ea:12:46:39:63:32:e8:9f:bc:db:c4:
                    1b:87:9d:3b:0c:d8:61:d8:d6:c2:3a:b8:4e:b4:8d:
                    94:1c:9f:86:da:f9:eb:df:3c:7b:af:3d:39:e6:97:
                    ab:db:97:00:9d:a1:ca:97:4a:7b:31:ed:c5:ff:77:
                    2d:dc:fe:5c:1b:02:46:16:de:f9:13:e4:4e:5c:16:
                    a4:9c:30:e7:7e:2b:6b:34:60:bc:3f:b6:69:eb:e6:
                    a3:a9:93:bc:56:5c:6f:a2:0e:1c:95:2b:39:8e:5f:
                    d3:8e:5d:a4:69:5c:61:d9:85:66:d9:a5:c5:99:0c:
                    89:a7:aa:89:f7:c4:be:2e:f8:c0:8d:43:d4:7a:d4:
                    12:0a:e8:62:8a:76:71:fc:f9:97:ff:c0:fc:32:ce:
                    81:82:1d:e2:7c:90:ee:9e:db:99:23:98:48:4e:53:
                    5b:38:f5:1f:3c:31:2e:0e:b5:0c:69:df:47:23:7d:
                    ae:ba:61:0a:a3:cb:38:23:37:db:01:62:81:ad:12:
                    e7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3B:88:D0:14:70:A7:AE:0C:50:76:B6:39:FD:2E:AC:A6:B7:72:F6
            X509v3 Authority Key Identifier:
                keyid:7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:96:33:51:4c:03:d9:f4:e1:65:34:e1:47:59:0c:e3:9b:e1:
         bf:f0:d9:a7:31:ed:d0:75:4b:39:6e:17:16:10:c4:ab:55:ed:
         0e:b6:9c:d2:5f:8a:08:c0:be:b0:ed:f9:3f:52:04:01:8c:3d:
         f9:76:5d:94:5e:aa:0e:78:f3:20:57:65:6c:6b:e1:f9:7e:4f:
         a2:e6:54:58:58:6b:e5:b3:f3:83:93:73:18:a1:9a:61:8b:76:
         7f:ea:c2:30:d6:19:29:d6:de:ce:d6:06:8b:46:ea:5b:1f:0a:
         92:49:11:f6:39:38:b0:ae:55:bb:41:29:57:06:d6:6d:5b:56:
         2e:41:c9:10:42:bd:c2:32:f9:e2:ae:79:7b:09:79:fd:68:0d:
         0c:30:2e:34:20:49:bc:23:7f:5e:e4:f5:74:aa:94:ec:27:84:
         07:51:25:07:ae:e8:ea:00:10:44:15:df:81:c8:c4:cd:d5:c7:
         ba:9e:dd:18:9f:af:93:1d:fa:ce:2a:74:c3:e2:c3:88:c1:a8:
         53:64:2d:5e:06:22:13:56:f4:a4:f0:a8:8a:97:a3:98:06:4d:
         1f:20:17:43:ee:be:9a:a4:d9:61:93:13:1a:75:f1:37:1a:29:
         da:79:17:d5:54:06:fd:30:2b:c8:72:c8:28:82:7c:31:d2:6e:
         97:e9:dc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:17 2025 by rpki-client