Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
File:                     _J8k6-8Ri5Fl5S9hypk77kMGTsI.mft (raw, json)
Hash identifier:          Ys2nvnYFHBxxS1oizEgLD3uNe1gU37uQL6tDx2csyns=
Subject key identifier:   AD:34:5D:D5:16:3A:74:33:06:C5:53:07:C3:BB:62:B8:29:C2:14:67
Authority key identifier: FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2
Certificate issuer:       /CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
Certificate serial:       019849D338CBEECC2D1E54BDB0F6776401BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
Manifest number:          1594
Signing time:             Sun 27 Jul 2025 03:00:36 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:36 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:36 +0000
Files and hashes:         1: 0Z7zdgD4hEOFjj_4hKMVcy7j-3w.roa (hash: derKa6RxFEVM7g9Xe9HEgRdoNKySPR/cieLuP8cX31E=)
                          2: _J8k6-8Ri5Fl5S9hypk77kMGTsI.crl (hash: DmtzkLrWzdhW95Cgf1qg2kSADuYyb9SXx6xsccuuttc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:38:cb:ee:cc:2d:1e:54:bd:b0:f6:77:64:01:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
        Validity
            Not Before: Jul 27 03:00:36 2025 GMT
            Not After : Jul 28 03:00:36 2025 GMT
        Subject: CN=ad345dd5163a743306c55307c3bb62b829c21467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:55:72:ed:1b:53:24:d0:d2:59:9b:1d:c0:f2:
                    4a:92:2b:99:89:10:2b:91:36:5d:fa:da:6f:a0:b5:
                    fe:82:64:25:97:29:48:7c:d4:7e:06:01:ad:ff:6e:
                    6c:2e:35:fc:d7:84:4c:7c:85:3d:69:e9:7f:9f:85:
                    43:dc:3a:8b:a6:b8:e9:77:85:30:d3:52:0d:72:fd:
                    9c:f0:b7:78:a5:94:62:2d:71:67:02:76:3d:86:90:
                    45:99:2d:e8:e1:28:da:27:4d:3c:d3:c4:2b:a0:fe:
                    17:f6:55:91:38:52:a6:84:4a:75:3a:18:c5:e8:50:
                    56:c8:99:dd:83:d1:2e:5b:5f:1d:f4:0d:b8:5d:af:
                    7b:64:70:f0:4c:15:f7:f7:c3:30:35:f3:cf:d0:94:
                    5b:e9:6a:31:b4:9b:eb:54:71:99:c6:93:1a:0f:c0:
                    a6:52:2d:40:03:fd:dc:c8:a9:00:ee:ab:ff:66:a4:
                    a4:f3:9b:cd:27:af:01:60:7a:4b:32:d1:f1:31:5f:
                    5a:2a:e7:dd:5a:7c:f0:54:07:59:0c:66:8b:76:af:
                    49:5a:64:c8:47:6b:dc:99:48:5c:70:f5:59:ee:1e:
                    3e:ef:4b:3a:60:be:9d:c8:bf:0c:fc:9d:64:e0:7b:
                    fa:0e:37:78:a6:1b:f7:ad:07:ca:7a:0d:84:94:e4:
                    0e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:34:5D:D5:16:3A:74:33:06:C5:53:07:C3:BB:62:B8:29:C2:14:67
            X509v3 Authority Key Identifier:
                keyid:FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:7a:fe:d7:89:55:fc:e7:89:32:6a:6f:76:25:65:5d:ec:2e:
         3b:f1:64:ec:78:e2:22:56:b2:ba:3a:98:9b:2e:21:22:6d:88:
         95:fa:64:e8:2d:91:e6:ec:c1:2c:c0:7e:3a:d8:80:52:68:80:
         d2:9c:98:66:3e:0b:01:c0:27:62:9f:88:52:d3:1a:11:d5:71:
         61:3e:b5:5d:80:ad:8c:7c:ae:65:a7:58:cc:bf:36:4d:a2:cb:
         95:ba:10:cc:e4:8b:96:b4:00:2f:bd:b8:ec:c0:f7:5b:c7:93:
         45:2d:b8:01:8f:98:71:e9:cc:1b:96:62:62:97:2c:6b:d1:52:
         bf:96:c3:f3:fd:4a:23:7e:ac:75:11:93:33:8e:38:ff:7b:27:
         ec:3a:87:6d:60:f9:df:e0:25:01:19:bb:51:cc:74:62:4f:b4:
         6b:98:ef:b5:f4:7c:b6:0e:c1:7e:73:7f:e6:f4:90:9e:5d:d8:
         45:df:d8:9d:31:3d:ef:ab:24:a7:da:e4:c8:38:bd:83:ff:a2:
         f8:24:10:9a:9a:b6:db:44:51:3c:f4:3c:1e:38:10:75:03:08:
         34:23:5b:51:cb:37:ea:6f:93:c5:ef:9f:ee:1b:c0:de:d5:96:
         5a:02:3a:a6:7d:fc:8a:48:8b:87:25:07:c2:0b:a6:a9:bb:57:
         5d:0b:28:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:28:45 2025 by rpki-client