Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
File:                     1-_YvdgYnP0GmzMjilWB288Ch61Q.mft (raw, json)
Hash identifier:          7l82dW0Hz3QQxHNpiT2NQIYYWorCZE963PesF5jNnwM=
Subject key identifier:   49:DE:F0:EE:34:C1:34:49:0B:A5:B9:E7:5C:56:3D:5C:95:8A:6C:C5
Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
Certificate issuer:       /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Certificate serial:       01976583D9963820DBFFE66785C616595C41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
Manifest number:          15AD
Signing time:             Thu 12 Jun 2025 19:00:29 +0000
Manifest this update:     Thu 12 Jun 2025 19:00:29 +0000
Manifest next update:     Fri 13 Jun 2025 19:00:29 +0000
Files and hashes:         1: 1-_YvdgYnP0GmzMjilWB288Ch61Q.crl (hash: DPqnwUN8U5K5H7SysswbJ8aFBMZjh8glIMiRuQ547wI=)
                          2: gVx18rt52MyPf0oqDqUou5AuUBM.roa (hash: vA3SGzj0FAH1RwjbpG6kC2zF7wZB8RzhXo7xrGq4Z4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 15:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:83:d9:96:38:20:db:ff:e6:67:85:c6:16:59:5c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
        Validity
            Not Before: Jun 12 19:00:29 2025 GMT
            Not After : Jun 13 19:00:29 2025 GMT
        Subject: CN=49def0ee34c134490ba5b9e75c563d5c958a6cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4f:36:0b:ca:f7:bb:0e:0d:6b:a3:db:d5:41:
                    49:5d:ce:ea:ea:8d:b8:f1:73:ff:6a:2d:e8:0e:28:
                    10:05:0f:39:50:44:c7:0b:cd:64:ec:17:c6:ce:81:
                    7f:e8:30:c6:8d:f3:11:2b:48:cb:2e:0b:b6:99:94:
                    8f:0c:92:e8:3b:1a:a5:36:31:c0:da:2a:8b:48:69:
                    69:89:37:05:5b:18:d6:65:ac:e9:bc:26:7a:e7:ff:
                    9c:1c:bc:77:6b:38:1b:e6:e4:be:b9:e4:12:16:5c:
                    e5:b7:a6:cc:f8:ec:eb:02:19:6d:87:d0:3d:45:4c:
                    f4:ff:f5:b4:81:36:b4:d4:71:9b:a1:88:00:71:c1:
                    d1:08:04:68:96:33:9f:97:55:21:d0:83:c8:7a:db:
                    8f:7b:c5:ed:56:e3:b0:04:42:f8:c4:ac:26:7f:78:
                    6e:dc:0f:a5:49:ce:86:8d:de:c1:65:b3:61:3a:9b:
                    76:5d:16:09:50:51:7e:09:62:c9:9a:8a:24:82:e5:
                    8f:bd:a9:07:a6:67:63:b4:28:a0:d5:95:61:b4:f7:
                    d1:38:a4:60:34:75:f0:8f:6a:be:c4:1e:a9:3a:a0:
                    49:70:7d:cd:9e:06:b4:db:28:2d:7f:64:ce:4d:c0:
                    f3:67:3f:01:ac:60:21:bb:8e:a9:54:c9:06:79:ec:
                    01:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DE:F0:EE:34:C1:34:49:0B:A5:B9:E7:5C:56:3D:5C:95:8A:6C:C5
            X509v3 Authority Key Identifier:
                keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f6:5f:ee:9e:65:9e:34:cf:5f:57:ff:64:61:bc:04:88:3a:
         2e:46:2d:30:ea:6c:40:ab:c2:17:28:8b:23:de:99:03:e9:0b:
         37:a9:89:30:30:9b:04:7d:c9:56:4a:14:b4:54:8f:f0:99:58:
         31:d7:2e:f0:f6:e4:9a:f0:4a:0f:99:c2:84:87:80:fd:44:d2:
         dc:86:81:83:9e:47:bd:b3:64:f5:ce:f6:8a:a6:ce:d5:7e:81:
         81:48:92:e1:fe:51:31:53:ba:e9:9b:b8:eb:63:f2:78:67:d6:
         98:58:c0:bd:8d:9b:02:7f:ac:21:fb:07:f7:0a:56:44:47:e9:
         03:bd:9c:72:13:22:75:f4:bb:5d:46:eb:40:a6:e8:be:c4:5e:
         27:7a:9d:ab:f1:de:05:85:8d:e0:e8:d6:63:71:51:34:05:5a:
         4d:b0:93:8c:39:cb:cf:66:cd:2d:5c:ad:3a:39:28:8e:33:de:
         59:68:eb:5b:af:9c:ee:32:0f:f4:81:7f:9a:67:a8:dd:28:69:
         6e:81:74:23:9e:79:5d:ec:ea:50:a6:aa:1d:16:be:8f:ee:ad:
         f8:ff:39:33:ce:a5:96:99:6e:70:3e:d3:a0:1f:e8:94:ae:cd:
         9c:08:98:ac:1f:b1:c3:12:7a:e0:1c:54:62:01:44:94:ef:b2:
         48:db:df:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 00:53:30 2025 by rpki-client