Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
File:                     FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json)
Hash identifier:          bCwkI5JHiAVTRmWlgeyHfvgwjoiBj6aRWHWcHRWIL+o=
Subject key identifier:   5E:40:E9:16:0D:DD:AB:13:2D:CA:E2:E2:8D:CD:D8:EB:FF:C3:EB:F6
Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Certificate issuer:       /CN=1492a20754c9a7650b8279b9390689c469d73595
Certificate serial:       0197899054B29F88097EB76F7D654DD45317
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
Manifest number:          159F
Signing time:             Thu 19 Jun 2025 19:00:26 +0000
Manifest this update:     Thu 19 Jun 2025 19:00:26 +0000
Manifest next update:     Fri 20 Jun 2025 19:00:26 +0000
Files and hashes:         1: 2A_3tfsfLBfsIjkj25Wq_P7GURU.roa (hash: 4w2SNRAXRMcEZVSqmqD0dMjfx/4HpwrZYp/R521drvc=)
                          2: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: 8INNF50YEZ2lv/EAdVfE1OA7EicQpxmK41T5QYtCdDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:89:90:54:b2:9f:88:09:7e:b7:6f:7d:65:4d:d4:53:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595
        Validity
            Not Before: Jun 19 19:00:26 2025 GMT
            Not After : Jun 20 19:00:26 2025 GMT
        Subject: CN=5e40e9160dddab132dcae2e28dcdd8ebffc3ebf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:7b:80:ab:4c:a2:61:63:5b:d0:c5:e1:ad:
                    0f:5d:dd:28:d4:e9:be:36:ff:35:d4:c6:3a:59:c0:
                    78:cc:6e:28:b4:0c:af:af:2a:a6:ea:12:4a:1c:45:
                    89:f7:0e:0f:b8:d0:e8:de:98:39:ea:0a:7a:80:5c:
                    be:ec:41:d7:0c:2e:66:04:f4:7a:01:f8:3d:9d:e4:
                    4f:fc:86:9b:4e:7a:9e:d6:57:27:57:bd:fe:d5:07:
                    b7:18:5e:6f:a5:c2:2e:86:ca:65:49:8b:a7:1d:da:
                    c8:37:4c:54:b2:02:87:34:5e:de:41:d4:44:66:eb:
                    ca:b8:11:2e:84:53:43:9a:78:d6:ba:1e:0d:6e:8c:
                    88:0f:e7:17:12:b6:b6:de:83:ba:f8:71:d4:23:74:
                    37:37:ed:0c:1d:0c:c7:06:3e:97:e2:18:9c:8d:09:
                    e5:91:78:cf:72:c6:6d:0b:0b:f2:36:79:30:5a:9f:
                    12:d0:f8:f5:22:36:25:e2:e1:54:d5:7c:e9:d1:08:
                    5a:a2:94:c1:24:ab:b0:b7:b1:63:2c:d7:de:0e:d5:
                    40:ac:cb:1c:3b:74:0b:26:e4:71:bf:ae:ba:9e:bb:
                    89:0e:bc:c5:d4:17:8c:25:d5:c4:7c:5d:b7:2d:39:
                    06:04:ab:42:19:55:8e:c5:02:7f:cd:66:f3:3c:a3:
                    24:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:40:E9:16:0D:DD:AB:13:2D:CA:E2:E2:8D:CD:D8:EB:FF:C3:EB:F6
            X509v3 Authority Key Identifier:
                keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a5:4b:85:66:a7:e2:e7:14:b7:70:e1:4c:86:1a:15:20:ec:
         01:34:9b:d6:70:02:bf:af:f1:1d:9f:ea:b3:a0:17:e0:e5:3d:
         b4:55:1c:26:05:da:45:41:c8:bc:ce:bf:1f:1b:8e:48:d7:fb:
         33:2e:85:3c:0c:d4:22:2b:c6:50:b5:e5:f7:8b:ae:18:a5:63:
         2d:89:19:fd:22:f6:ba:61:5a:43:02:f8:72:0d:95:75:08:b8:
         8c:df:0e:91:0a:06:f8:b0:08:d6:02:23:57:13:cd:db:44:9a:
         1b:50:b1:7e:99:ba:25:41:b3:4d:03:a3:aa:ab:b3:02:a6:c0:
         53:29:c8:2e:e8:f1:8a:cb:88:87:f8:fb:d6:3d:90:cd:a7:f3:
         54:53:ce:0c:40:81:72:ee:47:a5:be:f3:e6:f6:ff:06:25:76:
         38:33:12:d7:ee:f7:be:52:7b:48:f7:e2:31:d8:7c:67:6c:21:
         03:0c:ae:48:b6:bc:30:5a:65:d7:40:af:f2:8e:8b:8c:52:33:
         1b:b8:a9:e3:6a:26:92:bd:b2:c6:bc:9a:4b:4c:fd:e0:e9:e5:
         3e:e1:93:a4:40:ab:a2:4c:03:2b:05:9e:00:ff:88:3c:4c:e7:
         a2:77:f9:e5:ad:89:a5:1a:04:05:3e:23:16:94:fd:17:5a:08:
         8a:b1:54:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 05:29:18 2025 by rpki-client