Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
File:                     FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft (raw, json)
Hash identifier:          jMHeA35QCsXdJ1aeA8xTqW8hNJQI7qtHvpp0cpY/Kps=
Subject key identifier:   5D:85:98:B0:D1:3E:9D:D0:34:92:A3:0C:CB:69:75:74:A6:68:97:BE
Authority key identifier: 14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
Certificate issuer:       /CN=1495c6f815c70ef1910d37493963445af918ab59
Certificate serial:       01975D938519ADD624D0A539BADDF29A13F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
Manifest number:          1587
Signing time:             Wed 11 Jun 2025 06:00:38 +0000
Manifest this update:     Wed 11 Jun 2025 06:00:38 +0000
Manifest next update:     Thu 12 Jun 2025 06:00:38 +0000
Files and hashes:         1: FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl (hash: QuW4eCLK2V5blFz1grPWyHugLAWjxr4SnQX0NFg8p7I=)
                          2: pS03aj6wmU86Zu9PqgpTPjvPCgM.roa (hash: aUGGuBTytMASII0PgxjFCUwQN+XTGnbhLsjxVU+JfJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:93:85:19:ad:d6:24:d0:a5:39:ba:dd:f2:9a:13:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1495c6f815c70ef1910d37493963445af918ab59
        Validity
            Not Before: Jun 11 06:00:38 2025 GMT
            Not After : Jun 12 06:00:38 2025 GMT
        Subject: CN=5d8598b0d13e9dd03492a30ccb697574a66897be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:24:63:0d:f2:9c:71:6b:f3:b9:7b:15:0e:8f:
                    15:83:96:ee:dd:a8:38:59:d9:62:91:a3:24:b7:28:
                    08:f2:d7:64:fa:e0:67:a0:6c:11:bd:28:0f:c8:f3:
                    a1:52:33:8d:03:21:69:9f:4d:c3:31:a9:e8:7b:6b:
                    35:b5:53:08:bb:9f:05:b3:44:7a:5d:55:97:db:c2:
                    fa:44:08:5e:bb:0f:0a:19:d0:5f:e0:b5:ff:9b:cf:
                    c1:d9:c3:5b:80:30:4d:51:f4:8a:be:22:93:53:49:
                    2c:04:7d:21:ad:f4:e8:35:31:1b:4a:6f:64:24:39:
                    82:2e:ec:8d:58:d7:c0:bb:b9:79:2b:73:5b:75:3b:
                    50:72:34:09:1a:79:61:dd:70:f2:fb:ce:a0:66:68:
                    33:e7:67:58:65:a7:2e:ec:4b:ca:41:e6:06:ba:9c:
                    39:b9:c3:0b:f1:7f:cf:7a:cb:db:64:60:4f:c4:a5:
                    02:bd:cf:15:ba:c0:c4:89:25:fe:3d:08:6b:83:28:
                    26:28:67:a7:a3:d0:b1:bf:bb:ab:ce:f8:39:1f:00:
                    59:bf:8a:31:8c:6e:1b:89:e2:37:55:2d:1e:38:e7:
                    de:9b:74:a0:0a:b5:67:e5:18:52:e8:40:78:e5:61:
                    da:ed:c1:d7:3c:82:ab:25:23:65:5c:b1:c8:68:85:
                    c3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:85:98:B0:D1:3E:9D:D0:34:92:A3:0C:CB:69:75:74:A6:68:97:BE
            X509v3 Authority Key Identifier:
                keyid:14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:31:d0:72:f2:1d:ac:e1:63:62:5b:d4:aa:bc:10:52:48:fb:
         2d:2c:66:a6:0d:58:db:7e:77:5f:2b:ea:85:4b:6b:d8:01:21:
         eb:b8:0a:7b:b8:ed:52:8c:a8:2a:e6:2e:67:f4:72:f2:3b:79:
         a5:ce:23:39:6a:68:90:bf:ee:38:af:3d:b6:d7:1e:8e:db:8c:
         7a:12:38:27:01:73:9f:92:9b:df:01:41:2f:03:9f:03:42:91:
         95:41:0a:1e:98:a1:8b:11:e5:b8:36:7e:d9:55:f9:5e:6b:ea:
         52:c7:aa:5d:e1:16:32:36:1f:f2:5e:3b:21:54:6c:e3:48:b0:
         b2:ad:d3:f5:7e:19:ee:da:f0:bd:bd:12:9e:14:ab:f6:60:2f:
         46:6f:4c:86:08:14:38:cd:b8:67:e2:cc:70:e9:db:a8:e9:fc:
         92:10:3e:af:d2:8a:d1:37:bf:f4:96:57:04:2d:c7:20:5d:23:
         a8:98:5f:4e:f3:5e:66:93:79:47:c2:67:e9:03:f3:76:c0:39:
         02:99:15:0d:a7:1f:8e:f2:7b:ec:c5:60:04:d6:52:59:05:ce:
         49:35:ed:60:c2:c8:84:7b:2b:a2:09:78:94:f4:d3:79:09:44:
         db:3c:49:fa:b6:48:49:90:40:d7:89:5b:b4:4a:70:e9:54:d8:
         94:ba:fc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:28:43 2025 by rpki-client