Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
File:                     FTSDi7MXuBhmmfCkSF222doZCNI.mft (raw, json)
Hash identifier:          ZKOgwpC0BRAUYl0Wpy6Qbgq0PEMdB/uKgenrzTiebW8=
Subject key identifier:   08:11:03:25:2D:75:15:3B:6E:C3:18:31:5F:3E:65:27:DE:CC:F1:FD
Authority key identifier: 15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
Certificate issuer:       /CN=1534838bb317b8186699f0a4485db6d9da1908d2
Certificate serial:       01984AAEC63686C3FFF7C08CA17D4E06F0BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
Manifest number:          1606
Signing time:             Sun 27 Jul 2025 07:00:24 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:24 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:24 +0000
Files and hashes:         1: CbWOEpiwCrppRA8DVC4XzZMGIMo.roa (hash: PCw7t89Xuux83a7nB0OMpGHDzsoTVJA+nWtRPUVTD0g=)
                          2: FTSDi7MXuBhmmfCkSF222doZCNI.crl (hash: J6ChdiK+gE7/+vl1wRKPqYBUZ2J2/4v/SKr25tckBDw=)
                          3: G7aptrRzlRJ8DBRVo4J_IAindWA.roa (hash: /KruVTSwaUIasJgr9QHP+KNfyw0nqXuPE6AH63Tq7a4=)
                          4: b6hTkKbNOfIbaG8yD7-BS_Yj6KI.roa (hash: vo3HwfgLG2dbcNhI9BKjmqquo/hk8biJHEghUjke/Vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:c6:36:86:c3:ff:f7:c0:8c:a1:7d:4e:06:f0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1534838bb317b8186699f0a4485db6d9da1908d2
        Validity
            Not Before: Jul 27 07:00:24 2025 GMT
            Not After : Jul 28 07:00:24 2025 GMT
        Subject: CN=081103252d75153b6ec318315f3e6527deccf1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:57:c4:10:f2:c1:64:b8:a6:fe:e3:2c:11:fe:
                    d5:80:23:94:95:be:65:4f:be:7a:b9:b9:f2:ca:d6:
                    a9:0f:8d:f7:74:a3:08:31:04:87:a3:e4:23:da:c2:
                    0f:26:e7:df:ed:cf:d4:cc:81:76:01:8b:62:8a:49:
                    de:f4:01:4d:76:61:ab:b7:ac:e8:b1:06:6b:b9:bd:
                    de:a5:0c:e7:4d:b6:c4:ec:b0:4f:79:9c:b3:41:b7:
                    29:39:3c:47:5d:01:ef:3f:88:46:87:e0:4e:1c:60:
                    24:fa:43:23:b1:bb:2b:d4:1e:11:4f:02:01:85:26:
                    99:ed:e8:dc:22:3d:92:31:52:2c:79:cb:b4:2d:c0:
                    f5:8b:e9:10:67:73:e1:d6:88:5a:b1:62:18:ef:c3:
                    44:bf:ca:56:88:41:61:86:c5:10:62:83:ab:6e:90:
                    9e:a3:5f:87:71:a5:21:fc:99:96:93:b1:60:e5:94:
                    22:65:72:eb:fa:d0:0c:a5:ea:bd:7c:20:a1:8d:ce:
                    f0:05:7f:ed:0e:35:d7:1d:20:05:c4:b5:f4:73:17:
                    51:e3:0e:0e:b6:0b:72:bc:f5:40:fc:7c:4e:7c:cd:
                    59:9e:35:0b:29:3b:99:b7:0f:18:fb:cc:d6:3c:d5:
                    0c:8f:81:07:4d:7a:9c:36:66:57:10:52:8a:06:0f:
                    fe:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:11:03:25:2D:75:15:3B:6E:C3:18:31:5F:3E:65:27:DE:CC:F1:FD
            X509v3 Authority Key Identifier:
                keyid:15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:bf:1b:49:8c:87:9b:7e:0c:eb:7d:b3:67:4d:e8:af:26:0e:
         54:fe:42:3d:80:51:17:2a:4c:aa:7f:18:54:9d:66:c6:7f:4f:
         c5:4d:0a:cd:cb:2a:f7:95:d9:aa:b9:d8:61:ba:bd:04:ad:6b:
         8c:de:07:6f:bb:db:08:d6:9d:38:a8:bb:08:8d:eb:76:c1:5d:
         1f:76:44:7d:c7:05:a0:0f:fb:d2:e4:fa:d5:c2:85:e0:60:8e:
         6d:95:31:61:5b:51:cd:01:2d:b0:33:22:94:79:5d:76:ec:62:
         69:24:52:f9:b3:9b:d7:a9:f5:26:79:17:7a:4a:09:45:13:a8:
         5a:53:9e:a4:5a:c8:c0:fe:5d:e3:08:20:68:5b:ec:e1:89:37:
         b2:0a:45:95:36:95:42:ea:41:02:c7:2f:a2:70:96:90:1c:63:
         d8:9e:07:cb:1c:ff:14:3c:4a:01:03:3c:7e:af:fd:89:df:1e:
         e9:92:06:23:90:b9:4f:bd:b9:71:bd:7b:5a:69:3f:76:a3:06:
         00:d0:31:52:25:a7:85:d3:c7:bb:5d:a7:7b:2b:d9:83:a5:b2:
         19:74:30:f9:90:47:e0:c9:e1:3a:95:23:f2:fa:d2:c6:c6:16:
         96:93:06:02:81:27:20:88:87:e6:00:1a:e2:49:eb:49:15:d0:
         62:d1:13:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:08:01 2025 by rpki-client