Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
File:                     fciRFoK8XKcc7OHv46wTW_21ndY.mft (raw, json)
Hash identifier:          6yDXH3lHuSs804bi9xwMXDpB0JrRu9qJjk2MHslFWq0=
Subject key identifier:   CF:CF:14:94:04:F9:FC:8E:35:0C:87:CD:CA:F3:80:EE:08:D9:61:9E
Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
Certificate issuer:       /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Certificate serial:       01974EC54A96ACF5FCB74549A5D54C30AA70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
Manifest number:          1083
Signing time:             Sun 08 Jun 2025 09:00:41 +0000
Manifest this update:     Sun 08 Jun 2025 09:00:41 +0000
Manifest next update:     Mon 09 Jun 2025 09:00:41 +0000
Files and hashes:         1: 1C7VKc2u55exTPgbJjVVBkVOjI0.roa (hash: KRmVo74m9sWKSF23ay7PgVm1woGp8Zi9hAMJIltDmzQ=)
                          2: 89VDXzZ_2U543z47EHsX9vI7wvM.roa (hash: n04qxgmbLydbIkFMhKcNu86o1ZcGuCf69Uot3/FJo18=)
                          3: NFCSs01oWicTZXFure0N-PnCCWU.roa (hash: IkEQYNHCh8tUXj0EFqiGDLC3qEKoo3Zp0TKOGNH6Vmc=)
                          4: StBmHSx-w-_okioInyoONk2sjLg.roa (hash: knizJ5Gckrod+kfPvKDkALhiu4VWJTPtSPrk3JWpWfY=)
                          5: fciRFoK8XKcc7OHv46wTW_21ndY.crl (hash: 6VkUco7jxf6RZTmq3eeTcpNwzJMB97h9ku96ByKupAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:c5:4a:96:ac:f5:fc:b7:45:49:a5:d5:4c:30:aa:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
        Validity
            Not Before: Jun  8 09:00:41 2025 GMT
            Not After : Jun  9 09:00:41 2025 GMT
        Subject: CN=cfcf149404f9fc8e350c87cdcaf380ee08d9619e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:96:31:6b:ad:09:44:83:13:fd:a4:03:fc:d7:
                    0c:f3:ce:e0:1b:2e:92:90:13:fc:20:b4:94:87:1b:
                    c4:89:a1:3d:de:e3:40:54:f3:fe:f6:a9:7e:52:de:
                    e3:8b:3a:d3:cf:4c:e2:57:6b:a3:a2:89:42:cc:15:
                    92:c3:4e:d9:fc:25:21:85:d2:88:3f:06:44:d9:92:
                    2a:80:5f:3a:5b:81:7d:ef:e7:9d:05:ec:23:56:3f:
                    72:e9:f6:24:d2:6c:ff:53:52:60:cc:46:17:4c:90:
                    30:06:88:ee:83:f8:88:80:7f:3a:2d:ae:a5:4d:e3:
                    de:43:cb:b2:a3:f5:2e:46:64:2d:d0:96:6d:a6:eb:
                    b1:ae:f9:c3:81:e8:59:3e:51:e4:1f:dc:c5:39:99:
                    f4:f3:77:91:e2:b7:76:f7:ae:15:c1:20:d3:03:a7:
                    94:48:8e:cb:56:2a:e8:96:f1:17:a5:0c:47:16:f7:
                    ff:1f:8f:cb:09:e7:b8:3f:4f:f8:88:cd:37:fe:54:
                    55:ce:56:91:6e:68:8a:27:bd:ca:d0:36:40:61:26:
                    8c:0f:aa:7f:f7:c5:38:65:3c:f0:50:e8:f6:01:f7:
                    f7:6b:9b:c0:1e:ae:1f:43:b9:0b:37:be:df:dd:a2:
                    d5:7f:35:fe:3f:5e:b6:86:75:d0:66:a2:ce:41:7a:
                    80:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CF:14:94:04:F9:FC:8E:35:0C:87:CD:CA:F3:80:EE:08:D9:61:9E
            X509v3 Authority Key Identifier:
                keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:13:e2:bd:69:50:e8:33:e4:6d:c1:87:be:50:ba:82:7c:4c:
         7b:6c:ec:f8:6b:8c:28:b8:4b:49:2a:d5:bb:13:4b:49:e3:35:
         75:77:1c:b2:12:c0:2e:df:0e:70:78:c0:47:28:20:05:41:b8:
         6e:e7:db:c3:66:96:a0:75:f2:e7:3c:3c:48:03:13:71:48:a5:
         eb:4a:d7:70:66:02:1d:b6:bc:11:e9:36:1e:f7:ee:12:b2:29:
         b2:27:66:72:81:c8:0f:42:a2:91:9a:b0:4b:1f:3f:6d:3e:b7:
         52:87:17:1f:20:21:ea:d1:f8:8a:e9:49:f6:b2:1a:61:61:ad:
         8c:d7:b9:8e:53:51:7e:72:9d:cd:67:3c:da:12:09:68:78:c8:
         b7:d5:ed:a5:be:0e:e6:13:83:a6:85:d3:37:8c:9c:7d:fd:5e:
         25:d7:49:40:ae:22:91:1a:a0:1b:a0:4a:6c:95:0f:82:e4:19:
         42:09:dd:42:fc:16:8e:73:b9:e4:ef:af:6e:1f:3e:a1:a5:2c:
         60:e4:e6:51:d7:3a:f0:12:72:af:b1:32:5f:78:b3:02:81:3f:
         fa:a2:43:b9:6e:d5:16:ae:58:f9:ec:5b:53:66:df:b1:66:a7:
         65:6c:56:f8:bc:09:43:e1:2b:e0:f9:23:39:79:2a:34:c9:6a:
         c9:67:dd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:48:45 2025 by rpki-client