Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
File:                     1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft (raw, json)
Hash identifier:          meA5jbDLFErBSg8TELcBwslcw3xDaC3eTeuOfBJNMTQ=
Subject key identifier:   25:9B:3C:06:A7:92:3B:20:15:B1:4E:43:33:04:9C:8B:5B:2F:C6:16
Authority key identifier: FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C
Certificate issuer:       /CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
Certificate serial:       019749D62C5663135A9CFD9A36298F795E47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
Manifest number:          142F
Signing time:             Sat 07 Jun 2025 10:01:02 +0000
Manifest this update:     Sat 07 Jun 2025 10:01:02 +0000
Manifest next update:     Sun 08 Jun 2025 10:01:02 +0000
Files and hashes:         1: 1-a7NHj5wuktVBuAJ3ADk_WqHSH4.roa (hash: mo8wd9SPepK89v0F2kQzkzZ3y4Ds3XU7kLVQ6u6lBCM=)
                          2: 1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl (hash: LoD5aM6gpV+SSvjliG5It3HZxFgkUvPtBVUnsxkk9qs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d6:2c:56:63:13:5a:9c:fd:9a:36:29:8f:79:5e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
        Validity
            Not Before: Jun  7 10:01:02 2025 GMT
            Not After : Jun  8 10:01:02 2025 GMT
        Subject: CN=259b3c06a7923b2015b14e4333049c8b5b2fc616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:45:2b:a2:c8:17:e3:5e:2f:ad:48:59:8a:56:
                    23:1a:35:f5:56:6e:8d:12:ad:6e:36:7b:7f:5a:18:
                    85:3d:ee:c4:87:5d:b1:3e:ec:de:2b:6b:07:57:00:
                    65:c5:29:5e:a4:e3:08:29:23:15:29:43:91:cd:74:
                    fb:17:e3:66:af:c9:c7:6b:60:7c:a7:65:62:67:45:
                    49:da:e4:24:a5:9c:f9:20:68:1c:d6:69:19:e4:f8:
                    c2:e1:16:7f:53:1f:7c:72:e2:37:6f:2e:c2:72:95:
                    c0:d1:5d:6c:c5:3b:a1:c4:7d:a8:ac:60:1e:d1:cc:
                    71:80:12:eb:6d:cb:df:b1:cc:29:af:bb:62:89:12:
                    f8:ea:a3:a3:85:d3:50:46:42:8e:95:ad:59:ec:17:
                    45:bc:bd:71:23:8e:6d:f4:b4:a1:b4:25:3e:ca:1b:
                    70:20:a1:81:9e:1f:f6:ee:db:14:a7:71:e3:d6:87:
                    38:68:2a:86:51:68:8d:8d:b2:35:d7:87:42:0c:83:
                    df:b0:ac:e9:c5:57:a8:8a:b2:be:c5:5f:5a:4d:40:
                    a0:fd:02:5c:60:4d:2d:4a:58:58:00:22:44:34:1a:
                    9b:44:23:a8:11:26:7e:b5:c9:16:a5:8c:52:66:fb:
                    f1:48:08:24:35:e0:5b:f6:45:c4:3a:a7:8a:82:69:
                    f8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9B:3C:06:A7:92:3B:20:15:B1:4E:43:33:04:9C:8B:5B:2F:C6:16
            X509v3 Authority Key Identifier:
                keyid:FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0f:a0:ca:f1:3e:55:05:48:5f:a4:71:0b:de:e3:ec:20:3c:
         a7:a1:22:81:d3:ae:52:e7:57:89:62:5b:42:d1:a3:15:6a:be:
         e9:2c:c5:0e:06:36:59:96:65:54:b1:c3:e4:c3:40:a5:93:8b:
         d1:46:ab:7d:45:a5:91:15:d4:ec:33:06:71:5e:7e:ff:6d:47:
         80:a2:6e:eb:71:68:96:cb:87:b4:12:2f:36:56:d6:26:c6:e5:
         8d:91:73:81:49:da:f5:47:48:74:0e:d0:2d:eb:72:d3:7a:26:
         3a:82:97:48:c2:e6:90:ab:56:32:a5:8d:77:ef:3a:01:7f:73:
         88:b1:5d:a5:bb:a8:05:88:76:ee:a8:f3:31:73:cf:86:f6:be:
         ff:83:b4:79:d6:a3:ba:68:9d:19:35:a3:40:72:e5:1e:77:d3:
         8e:a0:47:dc:0c:f9:03:b1:f5:55:86:38:05:8b:14:d4:89:fc:
         ee:d6:8b:9d:d9:dc:46:28:14:8e:7e:9d:c7:b5:85:34:d1:b3:
         cd:79:06:58:25:00:de:5f:6b:e6:58:18:0a:fb:03:0c:29:34:
         82:be:32:de:95:c0:24:fd:7f:94:62:5e:b2:10:e3:fe:66:65:
         42:c5:85:1c:7e:47:b2:45:84:7d:fe:95:3f:e0:ce:a9:b4:2a:
         6e:35:15:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:24 2025 by rpki-client