Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
File:                     FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft (raw, json)
Hash identifier:          l1pE4rGvDRKJes/6JQdX4AC6xKMgmfw89Gfh6aVtozk=
Subject key identifier:   5A:22:91:B1:E8:AE:98:4C:5F:B5:FA:65:ED:2B:72:FB:70:19:EE:A7
Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
Certificate issuer:       /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Certificate serial:       01984852C19746765B48EBFD01ADCDC76522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
Manifest number:          1608
Signing time:             Sat 26 Jul 2025 20:00:39 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:39 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:39 +0000
Files and hashes:         1: FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl (hash: N6QEwxDNCQTrhTR7lft2OKYKVZXKSxn4bZzFo+f8UiY=)
                          2: JFz1OMtyYE0bdrPpAzWAHxoNfr0.roa (hash: GCMi3F+baVVPvUwQFwt0LCTFyVV4lIfA34WPsvrvO6A=)
                          3: RnPjQu1TRB6OusL4aMQpC4JKqmI.roa (hash: fzeYA/Ogqc2irWhfM/UbWuBPWyUJiutWTEcNUX+4+LU=)
                          4: Ut6Isd3FyfcwFqXffcOSTj20big.roa (hash: 6WWf7LzHGfNpFV/UMH6n5UZ2IDbI9b8RYTztg7MMT9k=)
                          5: YrBEbKYcRihrrXhf5rGMn4NnWP8.roa (hash: 0EjDwiQerEsJrNpiAV/U41dtG8QfC+EEgtF9mTKQLqE=)
                          6: oVdkjWCoO6UKiUnCLGAAHjBO9ms.roa (hash: 60Qb8QX+Ft+JLMQ7m3ymUwisPXVeh0oMfLPMdsaJtK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:52:c1:97:46:76:5b:48:eb:fd:01:ad:cd:c7:65:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
        Validity
            Not Before: Jul 26 20:00:39 2025 GMT
            Not After : Jul 27 20:00:39 2025 GMT
        Subject: CN=5a2291b1e8ae984c5fb5fa65ed2b72fb7019eea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c7:51:1e:49:58:55:57:b1:dc:1f:50:db:64:
                    0d:46:ce:78:36:39:da:13:88:27:37:61:55:c7:8f:
                    7b:59:f8:d0:9f:5e:ec:b1:f1:47:52:c5:35:1a:6a:
                    3b:6c:e4:27:4c:32:29:c2:ab:8c:38:ca:eb:39:d0:
                    5e:4c:51:1d:c6:79:3d:91:e1:5d:a0:a0:0b:39:e4:
                    52:d9:db:bb:8c:28:f6:29:f0:53:f6:e1:85:51:23:
                    91:67:7b:97:ab:06:06:b1:b7:7a:4e:22:da:b8:b5:
                    4a:6e:a5:33:48:bb:6b:fc:39:3c:2d:85:99:0c:b1:
                    5b:7c:57:44:a9:91:23:0e:32:0a:9c:77:e8:a6:2f:
                    4c:f4:79:1f:e0:c6:10:9e:46:f9:82:ae:06:fd:c3:
                    05:b8:a9:83:89:57:67:aa:e8:e7:71:22:bd:38:59:
                    e7:3d:8a:f0:2f:f7:c9:c0:dc:d8:5f:09:87:a0:8b:
                    53:5a:36:a4:7d:7b:17:a3:94:fe:15:5f:41:00:15:
                    26:a4:3c:b8:de:c6:74:5b:48:af:ff:fa:a9:e3:60:
                    3d:40:2a:1d:ec:1b:35:df:3d:c1:d6:48:98:8f:ec:
                    e6:96:d3:cf:99:15:40:e7:33:eb:78:27:39:b0:fe:
                    10:b0:3a:63:7e:49:eb:af:09:6e:98:5c:2f:79:2a:
                    d6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:22:91:B1:E8:AE:98:4C:5F:B5:FA:65:ED:2B:72:FB:70:19:EE:A7
            X509v3 Authority Key Identifier:
                keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:75:27:c3:27:e4:23:76:6e:67:1a:94:64:9c:f3:ca:3c:47:
         c3:c9:a4:a3:c3:4d:44:f4:36:f8:95:db:88:9b:b8:9b:d5:58:
         d6:a6:bc:ff:56:80:a2:79:ed:8b:eb:0b:6a:9a:fa:7f:27:5c:
         10:85:30:59:e2:15:ba:a3:18:1b:cb:b5:88:fc:78:c7:a0:cf:
         43:72:87:24:f0:e1:2c:4f:c2:cb:3b:22:50:5d:12:25:c6:86:
         61:62:2f:67:f3:0b:6a:83:0f:47:37:50:d8:66:9c:44:c4:92:
         02:44:06:7d:1c:01:1d:a3:a1:f3:a8:0c:a6:6e:7d:a6:b9:9b:
         d8:4f:b1:3b:6d:e5:c9:9d:d9:81:89:40:7e:fb:7b:2d:1a:e9:
         9e:5b:2c:b5:8a:9b:2b:04:32:0a:e7:9c:55:54:50:be:3c:ce:
         fc:c7:81:b4:f1:6d:8d:2f:07:59:8d:62:82:99:e1:db:3e:c9:
         f5:ea:c7:ef:25:a5:93:ed:95:fa:1b:6f:c7:d7:7d:e3:81:db:
         c5:d4:f0:b7:02:cf:17:85:3a:8e:85:78:dc:5e:7b:a3:b1:50:
         c9:16:17:f5:8b:8d:08:95:53:e2:66:42:ca:5c:bd:41:65:a1:
         96:41:a0:f8:cd:46:2a:d5:25:e8:66:fe:5a:e0:c1:2e:ab:f6:
         a5:70:e8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:54:02 2025 by rpki-client