Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
File:                     FSdFXqf84Xz9BDGYUljRPga_pzU.mft (raw, json)
Hash identifier:          mtcKibni23JVMrVp5nb/1I5Z8fTCy+/vfiKY6fqbMzM=
Subject key identifier:   A9:65:98:1E:9B:B0:97:AE:3F:FA:AD:B0:8B:8F:9F:D9:5B:BF:3F:8F
Authority key identifier: 15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
Certificate issuer:       /CN=1527455ea7fce17cfd0431985258d13e06bfa735
Certificate serial:       019746D516AAB0D27CEC2876C493F5B2BAF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
Manifest number:          0E40
Signing time:             Fri 06 Jun 2025 20:00:59 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:59 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:59 +0000
Files and hashes:         1: FSdFXqf84Xz9BDGYUljRPga_pzU.crl (hash: K86hlnVvyeoDMyJTAUO8uwY+tfY08Sq918C/ixq8iz0=)
                          2: Iga5jVF2XbjPh1O_q93OfaOrlUw.roa (hash: fBv3VaWtz/fH5Sfra8JN+CYR+FXB74KZZK6MnISjtgU=)
                          3: RkTNkNwXGcwxNDKoWngjGCoOsDo.roa (hash: viD+EdaDQpdhn8ySGbMtrRw2kQFtzdWhY2WYnHuwvTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d5:16:aa:b0:d2:7c:ec:28:76:c4:93:f5:b2:ba:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1527455ea7fce17cfd0431985258d13e06bfa735
        Validity
            Not Before: Jun  6 20:00:59 2025 GMT
            Not After : Jun  7 20:00:59 2025 GMT
        Subject: CN=a965981e9bb097ae3ffaadb08b8f9fd95bbf3f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:03:d4:a9:59:e6:19:f9:2d:b1:69:48:db:7a:
                    62:b3:ed:66:54:87:d5:5b:25:59:71:b0:46:3e:2c:
                    5a:37:07:41:06:e2:4c:20:f5:bc:66:f0:eb:d7:49:
                    c8:0b:62:6f:44:be:e2:d1:a4:09:c1:b6:b7:85:46:
                    66:74:23:7c:6c:5d:1b:d4:21:63:e1:db:2b:f3:26:
                    db:66:70:fd:e6:1c:4d:54:84:44:fa:27:cf:63:ed:
                    37:0d:17:6e:12:d2:47:30:19:75:c8:02:fe:5e:eb:
                    4b:48:5e:b8:68:ef:f5:1b:3a:3a:a7:b8:c1:da:61:
                    47:95:72:97:1e:06:d8:09:b9:7e:d6:1c:05:0f:6b:
                    29:f1:7f:4d:4d:50:21:41:0d:94:43:6e:fe:c6:cf:
                    86:21:66:a9:ae:40:55:26:ff:02:50:d9:00:0f:cf:
                    0f:07:92:32:26:c7:c4:c9:3b:64:e1:1a:a5:75:9d:
                    02:27:dd:1f:7a:3b:1f:44:62:d7:0e:5c:19:fc:95:
                    a5:17:6d:07:13:0b:09:2a:e7:74:92:3b:06:b2:ff:
                    d0:b7:c4:8e:a5:e1:74:31:be:c7:09:1d:72:8b:35:
                    28:35:7b:72:92:4e:b5:17:19:ec:5c:ab:4f:7f:bc:
                    f6:ce:f6:af:ea:0a:7a:95:6b:f1:81:f8:d5:46:f2:
                    d4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:65:98:1E:9B:B0:97:AE:3F:FA:AD:B0:8B:8F:9F:D9:5B:BF:3F:8F
            X509v3 Authority Key Identifier:
                keyid:15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:31:7c:ce:6b:54:2b:04:20:84:47:d3:06:95:76:39:ba:49:
         0f:5b:56:23:80:f4:72:70:71:2d:12:41:81:6c:74:8f:e0:e4:
         8d:0d:2e:89:91:07:30:7d:80:a8:0f:6f:2f:f2:c1:5f:f0:64:
         d6:b2:8c:c9:25:4d:a7:78:f5:03:be:a5:2a:01:83:47:e2:30:
         48:03:b6:67:42:24:1e:68:65:d4:a0:bf:69:4b:e6:93:51:b0:
         39:f1:22:74:e2:b4:30:f6:57:ab:c8:b4:82:ec:07:b1:26:d0:
         93:8c:0b:33:c7:18:1c:89:40:7b:58:3f:da:2c:6e:85:e1:57:
         66:d8:eb:e9:c2:e6:48:e1:c8:03:c5:f9:c1:18:34:b6:2c:9c:
         73:a6:7f:86:cd:35:da:e8:c6:3f:3a:b5:ab:04:f2:31:78:ca:
         79:1d:c2:88:93:41:99:e0:25:be:46:75:cb:20:f9:a1:47:9c:
         50:3c:64:c6:66:80:53:c9:17:5d:ab:0a:08:15:43:9d:20:aa:
         c6:71:25:c4:d5:4a:63:4a:d5:88:32:67:b2:9e:b9:19:08:fc:
         de:dd:37:3e:3a:45:32:5e:7e:37:77:9a:de:0b:0a:66:1c:32:
         75:f9:c2:52:43:79:ba:0e:2d:a3:ee:f8:f3:a2:cb:bc:6e:63:
         8d:eb:75:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:07:42 2025 by rpki-client