Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
File:                     fcSs7cuGzd_tf23oyt_KAEabvI4.mft (raw, json)
Hash identifier:          Tmdjd/mc+vCLPEQVnPT68TuvsNtorlgic4N866btiuE=
Subject key identifier:   BF:B6:F1:D9:AB:35:FD:FC:82:53:2B:7A:1B:BA:CA:EC:18:91:98:54
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Certificate issuer:       /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial:       019848F741C3D1C783CD14989B892A115380
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
Manifest number:          1611
Signing time:             Sat 26 Jul 2025 23:00:20 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:20 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:20 +0000
Files and hashes:         1: L3jfVXtRL6_lD6BNoqXy7sEXYVs.roa (hash: bCWcb1OjgRUbcmEWxo5WVJLuY5Wam3mN/c101nJS4g4=)
                          2: aNZOgbC2ct7oBfvfODiPTTzSje4.roa (hash: REnD2uLHHDzM+UgqTv+vmaX5vz4XYKoCVVSGMH/Czts=)
                          3: fcSs7cuGzd_tf23oyt_KAEabvI4.crl (hash: 1NByYNCikwJrvOYM1wnm6D0LUm9qaXFdgDWd3ZqxSfc=)
                          4: iIZa86cRoXzfTgl30QJoI1SOvPY.roa (hash: 8zjLfzmaOcWmBNRerK1/Wq9anwq2ilShQCg9MYrO3HM=)
                          5: xw83wudCk127kiXHqSwTaIW46z8.roa (hash: NELCxFUdkV28jyteAlY6BEFqr7FQW+26sZ4az/+ppAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:41:c3:d1:c7:83:cd:14:98:9b:89:2a:11:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
        Validity
            Not Before: Jul 26 23:00:20 2025 GMT
            Not After : Jul 27 23:00:20 2025 GMT
        Subject: CN=bfb6f1d9ab35fdfc82532b7a1bbacaec18919854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f6:84:27:1f:f7:5b:8c:3f:bb:14:07:0a:b8:
                    f1:4b:a4:c2:9e:bd:4c:a6:14:8b:55:2b:ed:87:b9:
                    50:b5:11:97:ee:7f:6f:e0:32:e7:32:fd:11:5b:44:
                    d5:2a:40:f4:05:26:f1:16:99:af:54:23:b4:c9:9a:
                    7c:9a:d5:f6:17:37:c6:60:af:a4:98:b1:9e:31:9f:
                    24:e3:3b:de:ce:97:3f:07:5a:de:2c:53:d1:f2:d9:
                    84:f2:4f:fb:54:d7:b0:bb:09:61:56:1d:02:dc:bd:
                    d5:71:0a:6b:43:5a:0f:fd:ac:6d:f1:23:65:11:ec:
                    f6:78:a0:fa:e0:7c:86:5b:13:9b:41:c1:4a:79:5d:
                    33:75:95:6a:c2:61:cb:46:25:ed:0c:27:77:db:9d:
                    e1:6b:ec:1e:80:89:fd:b8:ae:e7:57:af:30:a1:cf:
                    8e:c1:70:5b:f7:b7:7e:14:45:21:ce:06:f8:4b:0c:
                    0c:7c:44:3e:36:87:d8:b2:84:21:af:e7:cc:e9:6f:
                    51:95:10:5c:97:35:b3:8d:86:36:67:98:d9:61:63:
                    58:95:d0:49:f4:76:b3:8e:db:af:02:69:12:55:72:
                    60:08:63:1e:0e:8e:b5:74:dc:93:82:f6:aa:ef:e2:
                    c5:21:ec:05:58:6c:6a:6a:8c:94:29:e0:fa:6b:ae:
                    62:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B6:F1:D9:AB:35:FD:FC:82:53:2B:7A:1B:BA:CA:EC:18:91:98:54
            X509v3 Authority Key Identifier:
                keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:a1:08:ab:c0:f8:55:4c:5e:12:18:64:54:7b:3e:18:a2:a3:
         64:a8:86:91:96:a0:29:7e:35:2b:50:df:f5:e9:ba:d2:30:e5:
         d0:7d:b5:75:9b:07:8f:8c:01:5b:5b:46:28:22:2d:b4:b3:7d:
         80:5e:9a:0e:48:94:99:4b:03:44:4a:1d:32:72:25:7a:5c:9f:
         40:7e:6a:1a:5a:84:98:00:5a:4d:0d:e0:64:cd:80:df:1e:a1:
         cd:37:98:5c:55:e5:ed:e5:70:2f:aa:f3:39:12:52:fb:86:b4:
         90:89:a6:44:1f:a9:b4:1f:91:b7:a7:f0:21:37:ac:91:3a:c8:
         f0:19:9d:8d:4d:cf:46:6e:ef:dd:64:9d:40:00:93:69:e9:ab:
         aa:ba:5b:29:9c:d7:fa:e5:1b:12:9a:79:53:57:b9:65:81:e9:
         f1:88:ea:77:52:f2:68:10:36:26:31:51:55:f3:c6:b3:e7:d6:
         36:43:a4:34:12:40:cf:79:80:5c:1b:d7:59:39:f8:a4:d5:ba:
         88:68:80:13:d6:2c:f3:68:be:c6:9a:d2:32:56:16:1a:dd:1a:
         2e:af:c8:83:17:6d:f6:86:5a:2b:05:06:e7:3c:88:af:4f:04:
         80:ce:2b:d9:0f:01:40:a0:c3:ef:9c:0c:d4:12:c2:de:9c:c2:
         af:f9:c8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:05:04 2025 by rpki-client