Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
File:                     FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft (raw, json)
Hash identifier:          FIWhrtLAAJFx9fWWnj2k9G6qzLcyVpsEwbfLZIGUr1g=
Subject key identifier:   B7:49:F2:7B:6E:22:65:11:12:51:3F:B9:90:57:30:DE:66:91:EB:FC
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Certificate issuer:       /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial:       01984A0A5C97749C7F645844EEF705391077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
Manifest number:          1562
Signing time:             Sun 27 Jul 2025 04:00:49 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:49 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:49 +0000
Files and hashes:         1: DCNKSj1_5YHNKhsqvaqolZH_B60.roa (hash: TXy+j47cDCmczgpA/MrIE9kmjblkjLGkgY8O20y42aY=)
                          2: FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl (hash: ScCzI51ooPzT4TSm97SJX5w7ViaRTtH6JYJLXnKlS+o=)
                          3: JvuO5YaPjLFf0HZP4H-1yUabiMY.roa (hash: +Bx+7z+E11mxbukF+AWlKTGcSTRDPcpqMiJ/UPsOhzE=)
                          4: O-lMv2utgSL0sF15RsiGk9rGqhU.roa (hash: 4uJaHT6rWS3qzpOxWgNId7Ke0ps1U1qLVv6t8Kfw/Vs=)
                          5: O0m6rpxbshw5KyfbV3Df-u5gpAw.roa (hash: K3VIPCSpjhR1Ioq4yukkhoTaNVjKptpkSTwyxyPzC1Y=)
                          6: gJdvURE1CiuF2RTlrllA5EaJUA0.roa (hash: QQc8DdjtzLaI++nEpaA6R37pPd4UQFAmh/VqOKkxVE0=)
                          7: sPgmpLyF_PKafpXcgtR7FvsC9bY.roa (hash: sMp8sjJ9YjMshoV/D5bSKKVpPxzHt4F0frkmzXOCA3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:5c:97:74:9c:7f:64:58:44:ee:f7:05:39:10:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
        Validity
            Not Before: Jul 27 04:00:49 2025 GMT
            Not After : Jul 28 04:00:49 2025 GMT
        Subject: CN=b749f27b6e22651112513fb9905730de6691ebfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fd:35:7f:a3:1e:8c:0f:1d:a0:35:6b:53:9a:
                    4d:c6:12:ef:65:4e:cf:67:f9:0e:f6:06:b2:4b:07:
                    c7:c0:85:e2:82:42:b8:6c:34:8a:e4:8f:9f:ea:8d:
                    d5:ed:66:84:a2:cd:40:9b:0c:be:64:74:4f:36:64:
                    ab:bd:62:d0:cf:a2:9f:55:57:ff:5b:39:11:c3:eb:
                    58:d1:af:b1:1a:e1:c9:27:7d:5f:d7:d6:21:72:a3:
                    e0:43:b7:c5:29:e5:1b:6d:8b:7c:5d:69:2e:66:26:
                    24:20:0f:93:3f:21:91:80:53:20:6f:6f:b2:cf:7a:
                    68:de:ad:96:c6:06:83:57:26:7a:3b:90:54:22:a0:
                    bb:5c:04:3e:3c:4f:ce:13:72:6c:46:67:45:90:ef:
                    94:80:37:32:a1:c4:1e:99:fe:dc:d1:00:7f:de:56:
                    4b:88:6a:14:c5:41:cc:38:f2:56:4f:bb:90:ae:56:
                    3f:53:5d:66:89:4a:44:b6:18:dd:c6:9a:ed:fe:0d:
                    87:3b:ee:77:2f:53:70:03:08:8a:72:ee:c2:a8:16:
                    53:80:8e:46:84:db:35:97:1f:05:d5:62:69:a7:bd:
                    ce:39:6e:3c:c0:88:15:72:ee:4e:7c:55:73:8e:8b:
                    69:1f:f1:6c:b8:02:80:79:15:52:ac:23:0d:96:77:
                    d7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:49:F2:7B:6E:22:65:11:12:51:3F:B9:90:57:30:DE:66:91:EB:FC
            X509v3 Authority Key Identifier:
                keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:8b:6c:af:12:80:a2:e8:fe:9f:a7:67:1b:10:1e:62:af:ed:
         55:32:4b:ee:fa:40:db:f9:6f:98:6d:59:5d:cd:d4:ed:9b:a0:
         c0:dc:a0:46:62:03:e5:5c:c5:65:a8:9b:97:70:aa:3b:0e:c4:
         28:48:f8:14:2f:e0:7c:53:a3:cc:8f:8b:5d:a9:af:13:64:ad:
         a9:9b:15:98:3f:62:e3:15:aa:75:ad:d7:1e:0e:be:cf:f4:25:
         8b:8b:67:b4:7c:27:32:03:b1:0d:30:9c:99:ad:21:8b:19:6e:
         b4:d9:58:fd:b3:11:d5:2a:5d:df:2c:fc:c2:3e:6e:08:44:52:
         a6:dc:b9:6a:aa:b3:75:00:3c:e0:54:c3:3c:a4:be:d7:56:75:
         8d:7f:f6:48:cc:44:a2:39:43:7e:49:28:63:43:e4:d1:13:4b:
         28:f5:e1:3d:8e:87:a7:d4:1a:16:fc:9f:74:18:cc:c3:9e:a4:
         8a:8e:95:2b:1c:27:19:8b:1c:ac:3a:4f:1c:2d:f7:5a:31:2a:
         6f:ac:93:de:8f:cc:9b:92:ab:4e:2b:40:09:a6:03:80:cf:5e:
         88:1d:43:e8:34:18:d6:91:47:ed:91:3c:3d:07:91:03:47:b9:
         11:89:0d:fc:c6:71:c7:07:e1:00:97:b7:26:b2:5a:05:82:22:
         05:aa:c0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:55:53 2025 by rpki-client