Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
File:                     fcVVNSMj28woe4fg1qSBSmOrvUY.mft (raw, json)
Hash identifier:          M0LVW9jlUdpATuP9eI24pSn5Demwgw/rnCMDJNWcssA=
Subject key identifier:   4B:14:A1:CE:05:8F:F5:06:A2:B2:8A:D5:08:0F:61:28:DB:80:C0:A6
Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
Certificate issuer:       /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Certificate serial:       01976C2AB83BC3EAF82D246D600A330E1CBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
Manifest number:          026C
Signing time:             Sat 14 Jun 2025 02:00:28 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:28 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:28 +0000
Files and hashes:         1: RdOdP3DlBfXpnxBBT7lO73v8oG8.roa (hash: 9+BQ0Xt7iU/x6pUN6YyjEsb6BHBaV2Ejuirq22nlRh8=)
                          2: fcVVNSMj28woe4fg1qSBSmOrvUY.crl (hash: +Z+9tTNyqfh7AvsglhcbchR5GmJ2pHs07wjqwjJdY6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:b8:3b:c3:ea:f8:2d:24:6d:60:0a:33:0e:1c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
        Validity
            Not Before: Jun 14 02:00:28 2025 GMT
            Not After : Jun 15 02:00:28 2025 GMT
        Subject: CN=4b14a1ce058ff506a2b28ad5080f6128db80c0a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d6:e9:94:bd:5e:f6:6d:16:06:fd:a8:9a:2c:
                    c2:2b:99:62:4c:b7:f2:b8:95:7f:80:8c:c2:9e:f5:
                    93:92:3d:b7:83:1e:ab:45:c3:7d:ab:d7:74:30:4b:
                    1f:91:ae:67:c1:ff:66:b1:c5:e9:6e:2a:88:ec:90:
                    dc:16:db:d2:a9:31:a1:c7:4c:ef:ee:d4:e7:20:4f:
                    d8:db:db:e2:92:2d:82:e5:53:60:2c:87:22:f0:c5:
                    a8:b6:b2:31:da:44:ed:82:f0:0d:45:bb:3f:9b:40:
                    29:44:38:55:2e:06:cb:27:6e:4e:99:51:29:6e:04:
                    05:da:7f:c1:74:3d:26:32:a1:2c:bf:6a:8d:ed:be:
                    9e:d8:29:f3:d8:37:29:99:c7:a2:e0:56:07:d2:89:
                    cc:ba:e9:f2:34:50:be:2c:22:5d:2d:86:b8:b1:29:
                    61:24:ca:38:98:92:33:7d:7f:2e:a8:8d:db:ed:85:
                    a3:68:75:0f:4a:17:4b:0a:5d:21:16:a6:e7:3f:97:
                    1d:1b:b7:89:cd:b9:9f:33:ec:31:f0:70:28:44:f4:
                    6e:8a:3d:85:4d:c3:22:03:cb:91:93:00:d2:8d:25:
                    eb:7b:57:30:e3:24:8c:12:1d:f0:71:d1:d8:9b:fe:
                    13:57:3f:83:f4:fc:08:90:5e:9d:2e:a8:10:4b:87:
                    e2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:14:A1:CE:05:8F:F5:06:A2:B2:8A:D5:08:0F:61:28:DB:80:C0:A6
            X509v3 Authority Key Identifier:
                keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b9:cc:40:13:fa:3b:93:04:1b:f1:99:ac:91:2f:ca:6d:cc:
         86:c3:7b:1f:c2:16:60:ec:e6:8f:39:ac:5f:4e:77:0d:9e:4b:
         08:fc:57:10:c1:08:4d:c3:4a:d5:67:5e:18:aa:bf:dd:e9:0d:
         a4:93:40:46:a1:a2:9f:1d:00:1a:27:58:66:68:3e:a4:d4:37:
         f3:72:56:f9:67:63:c3:10:c5:58:c9:61:7a:ce:9d:1c:79:19:
         2b:a6:89:85:fe:88:49:67:37:46:06:4e:b8:73:b6:0f:f4:db:
         b3:f0:37:70:58:fe:ec:3f:3f:ee:73:95:32:48:28:ab:f5:cc:
         6e:fe:e4:07:a4:49:60:29:a7:74:a2:cd:4b:71:de:a4:8b:2e:
         c6:09:79:d1:1d:f7:a8:8d:74:c1:72:0c:2c:86:ef:c1:ff:b9:
         77:a0:3d:0e:3d:ea:e1:c3:55:27:36:36:c0:05:e2:0c:8a:65:
         6a:07:f0:ce:05:8c:7a:f5:34:fa:ed:03:e6:f1:43:e1:d4:94:
         6d:e1:eb:22:80:93:ed:7b:dd:b3:dc:3f:4d:22:85:33:e3:2b:
         ff:d9:bf:42:c8:b3:11:27:40:9c:7b:af:6d:d8:c2:9c:11:59:
         a1:47:8d:36:c8:73:dd:48:0e:bb:66:ed:ec:88:2e:6f:b6:e8:
         53:81:90:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:07:20 2025 by rpki-client