Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
File:                     FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft (raw, json)
Hash identifier:          kOBfjOckbjoI9gkngD2aRav9pqd/kTGmAUrJ3hX7nlc=
Subject key identifier:   68:71:DC:08:B3:12:A3:7C:32:D8:4A:12:A0:BC:61:61:AB:8B:BA:BC
Authority key identifier: 15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
Certificate issuer:       /CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Certificate serial:       019765F27E2E386F78013A8792941FECD772
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
Manifest number:          14A7
Signing time:             Thu 12 Jun 2025 21:01:20 +0000
Manifest this update:     Thu 12 Jun 2025 21:01:20 +0000
Manifest next update:     Fri 13 Jun 2025 21:01:20 +0000
Files and hashes:         1: CJUlJDy-56wu6zeQ3niPJdV4COg.roa (hash: L4zbh11FM5FRXP4RaQH2Hk+P+CwUeKC3KbUfcsAdfU4=)
                          2: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl (hash: KwdM663auQBqrDiLHFTddFFYX3BC/MM4MQcwUomMU1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 21:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:f2:7e:2e:38:6f:78:01:3a:87:92:94:1f:ec:d7:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
        Validity
            Not Before: Jun 12 21:01:20 2025 GMT
            Not After : Jun 13 21:01:20 2025 GMT
        Subject: CN=6871dc08b312a37c32d84a12a0bc6161ab8bbabc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:78:24:99:0a:c4:f2:05:7f:de:ae:2b:4a:68:
                    5b:0a:35:bd:f2:7d:50:aa:42:45:5d:5e:e7:43:c9:
                    0a:ef:2e:d3:92:3f:3e:bd:13:bc:c0:de:7a:c1:e7:
                    61:ec:63:77:c2:5d:d9:0f:8f:be:42:8b:18:e9:12:
                    1a:9b:2d:a3:bd:1d:27:34:eb:76:24:47:90:4f:d9:
                    76:30:2f:2e:fb:a4:07:d2:6e:8d:40:2a:9c:f4:14:
                    5c:34:f7:27:78:83:1d:98:24:58:0c:17:ac:9b:73:
                    f3:1b:05:cf:b6:b0:c6:e8:aa:9d:26:1c:cc:32:45:
                    be:89:c2:1b:92:83:0a:84:de:5b:7c:b5:66:a1:86:
                    3b:14:4e:35:c1:75:d6:03:a0:54:ff:b4:2b:66:43:
                    bb:84:f3:7f:04:ca:17:1d:6f:2e:53:6d:a5:94:c7:
                    56:ea:09:23:35:63:68:d9:a0:73:27:21:eb:a4:b4:
                    47:51:0b:ec:c7:6d:4a:da:e1:67:6d:cb:df:8a:93:
                    b8:91:e6:46:45:cb:2b:60:70:ff:be:2a:d9:bd:1d:
                    39:a7:ca:c7:b1:8d:4d:3f:57:af:65:4b:f9:43:22:
                    67:8f:ea:cc:59:4e:f2:2f:15:ff:bf:dd:e1:2d:cf:
                    d4:9c:24:50:b1:d5:d1:df:db:b2:e7:d8:15:2c:4b:
                    64:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:71:DC:08:B3:12:A3:7C:32:D8:4A:12:A0:BC:61:61:AB:8B:BA:BC
            X509v3 Authority Key Identifier:
                keyid:15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9e:be:bb:cf:2a:f9:d9:a3:2c:54:52:b3:57:63:58:5c:70:
         3a:37:dc:32:c6:39:b5:13:58:21:79:54:ac:fe:d6:58:bd:d6:
         e0:25:f6:72:51:61:53:f9:8b:8e:a4:42:8a:1f:72:45:21:5f:
         a8:a1:b0:21:88:8a:27:71:22:81:5e:2f:1f:69:ac:6b:7f:29:
         50:0b:23:72:8b:70:66:e4:df:b0:de:b6:46:94:fe:0d:a1:b8:
         ee:49:63:56:b1:fe:87:71:72:1c:4f:a0:ce:30:04:b2:24:c1:
         49:f4:ed:9b:8f:4b:2c:bd:7e:25:98:fe:82:c6:27:77:6f:d4:
         61:e2:41:77:00:32:3b:95:f4:a5:47:2d:bc:5b:1c:fd:2f:a4:
         d8:c2:3b:13:7f:d0:56:4b:98:c9:91:00:ac:b2:91:3b:5c:91:
         bb:e8:b4:44:da:2d:98:9d:62:31:17:58:6c:5b:87:68:96:8c:
         9b:3d:4f:af:93:1b:2c:97:eb:d8:d4:51:15:a3:95:df:02:17:
         ce:df:95:5b:f9:2e:0b:fe:b0:81:47:86:bc:50:18:92:96:f9:
         b2:ef:32:50:e6:a1:b5:de:73:cf:d4:66:63:b0:61:a5:f1:4d:
         2d:c0:e6:13:c3:82:11:28:15:37:d4:8f:39:4c:2e:7b:54:59:
         2b:9c:56:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 04:04:24 2025 by rpki-client