Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
File:                     FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft (raw, json)
Hash identifier:          8nLe4WwhL5ymahyHdFr5uSRDQydipRnUUptrqzEUH50=
Subject key identifier:   A9:24:DA:7C:99:34:0A:E0:AD:D7:2E:5B:15:2B:26:E7:13:2E:78:D1
Authority key identifier: 14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
Certificate issuer:       /CN=1495c6f815c70ef1910d37493963445af918ab59
Certificate serial:       01975F81C1BCD3ABE1AD00EE144EB97DFED0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
Manifest number:          1588
Signing time:             Wed 11 Jun 2025 15:00:28 +0000
Manifest this update:     Wed 11 Jun 2025 15:00:28 +0000
Manifest next update:     Thu 12 Jun 2025 15:00:28 +0000
Files and hashes:         1: FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl (hash: KFNT4rznE/5VYfOSJbyBjix7DZkRQnP5WVdSCxK2HMA=)
                          2: pS03aj6wmU86Zu9PqgpTPjvPCgM.roa (hash: aUGGuBTytMASII0PgxjFCUwQN+XTGnbhLsjxVU+JfJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:81:c1:bc:d3:ab:e1:ad:00:ee:14:4e:b9:7d:fe:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1495c6f815c70ef1910d37493963445af918ab59
        Validity
            Not Before: Jun 11 15:00:28 2025 GMT
            Not After : Jun 12 15:00:28 2025 GMT
        Subject: CN=a924da7c99340ae0add72e5b152b26e7132e78d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:3b:a5:6e:16:d2:2e:e5:d3:2d:dd:d3:42:b8:
                    05:4c:45:b2:cd:d9:11:66:af:c6:c4:6d:09:23:fa:
                    0e:cb:b0:a0:df:e3:5c:b6:ca:a3:28:37:a2:2d:69:
                    87:54:9d:10:0c:ec:3f:a4:3d:e8:b1:29:08:fb:94:
                    2e:8c:73:8f:42:46:59:51:1e:e8:60:6a:a7:33:01:
                    a5:a3:3e:1f:87:b0:ba:ec:d9:11:15:53:f6:6f:ba:
                    99:f6:df:2c:24:97:ea:82:75:db:e5:09:b9:34:60:
                    3f:2f:6b:00:b7:dc:09:87:62:2a:1a:bb:06:e3:11:
                    81:bb:66:bb:dd:7a:a1:90:9a:42:ce:6e:49:2c:2c:
                    e6:d0:22:37:02:57:7d:61:f6:ba:1e:01:06:51:b2:
                    3c:88:cf:61:2d:2c:24:38:a8:9a:23:53:1b:d5:c8:
                    93:9e:3c:f4:e5:f3:92:68:6b:51:1d:d9:0c:52:ca:
                    7c:82:0e:66:bb:3d:12:eb:e5:bc:4c:43:85:7d:1a:
                    4d:55:67:ce:8b:10:ba:3b:37:5e:dd:2f:aa:52:09:
                    03:01:3d:af:85:5e:c2:76:ca:6f:3c:10:7d:3f:aa:
                    22:48:97:10:b8:d1:c9:42:84:a1:46:c3:5b:c1:ae:
                    14:7b:4c:f1:e9:e1:9a:2f:50:ba:1c:57:49:fc:ee:
                    d1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:24:DA:7C:99:34:0A:E0:AD:D7:2E:5B:15:2B:26:E7:13:2E:78:D1
            X509v3 Authority Key Identifier:
                keyid:14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d2:d2:85:fc:24:9e:e9:c8:db:1c:4f:f4:31:35:8f:49:55:
         2f:e9:a1:c8:0a:39:74:08:e3:b0:40:77:2e:16:c8:7c:21:80:
         34:a0:fe:2e:97:df:25:72:e6:f7:1d:65:01:61:c8:a4:82:72:
         6e:a6:a1:7d:18:95:e3:12:9a:c7:a3:7b:13:4d:db:d4:e9:54:
         c6:45:13:79:62:c4:0f:07:72:57:cd:a1:11:64:88:12:ef:d5:
         bb:c3:26:eb:04:bd:74:26:84:2b:c2:54:d4:45:a9:c3:ef:dc:
         c0:1f:11:69:ea:4c:b1:6d:0b:46:5e:a5:1a:0e:bc:2b:6a:8b:
         3e:50:09:d7:ee:48:e7:bd:c1:a8:bf:b2:9b:fd:54:18:3a:e1:
         78:c4:55:d8:ad:93:1c:5e:4a:5e:3c:b0:9d:f2:48:34:e5:55:
         be:b5:0f:c8:ed:46:2b:24:dc:b6:3e:ea:1f:f2:c3:fe:23:36:
         42:ce:a5:e5:a2:67:e9:b1:a0:09:54:20:7f:17:03:12:af:33:
         a3:bb:28:a2:c8:7b:c6:77:9c:da:48:da:85:ce:e7:f1:7d:e5:
         7b:67:a8:db:1f:bb:21:68:a5:5b:69:00:65:0a:49:52:c8:45:
         2c:42:0d:33:88:52:9a:32:bd:e7:32:10:6f:ee:2f:38:f6:44:
         91:12:e6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:57:37 2025 by rpki-client