Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
File:                     f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft (raw, json)
Hash identifier:          C4cENaCRETDgnACb9p3cX/q2fU5q4cSO9WTxqID1reM=
Subject key identifier:   73:FB:C3:F5:E6:11:4F:F6:7A:E0:9C:BC:A8:3B:39:F1:4B:EC:EA:52
Authority key identifier: 7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
Certificate issuer:       /CN=7fe0e759354e83cc19320381109de22da0f1a700
Certificate serial:       01974FA14C08CEFF5575FEF6B350FC5769D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
Manifest number:          1585
Signing time:             Sun 08 Jun 2025 13:00:59 +0000
Manifest this update:     Sun 08 Jun 2025 13:00:59 +0000
Manifest next update:     Mon 09 Jun 2025 13:00:59 +0000
Files and hashes:         1: J0_szuc94cDOPgNJ0yLN783Wnvs.roa (hash: 9y3mjauYNrbe3lUEgqyehF1KTbocvn7jwNFB7RZHERI=)
                          2: J1Y1sr_zchu3Z4XMLqO-OvK8UPY.roa (hash: wEQuNZ06+AXloUeRMR6QwQxwPhXa3MGT1uIFt5gyxuw=)
                          3: f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl (hash: 0j2Fq33qgC1QU5guO3zBHwPqobAEMzlNMhX4jukaekE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:a1:4c:08:ce:ff:55:75:fe:f6:b3:50:fc:57:69:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fe0e759354e83cc19320381109de22da0f1a700
        Validity
            Not Before: Jun  8 13:00:59 2025 GMT
            Not After : Jun  9 13:00:59 2025 GMT
        Subject: CN=73fbc3f5e6114ff67ae09cbca83b39f14becea52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3a:82:f6:61:8d:bf:cd:0c:33:2b:b8:ec:f3:
                    a7:5c:fe:f8:49:74:63:5f:3a:eb:9f:63:12:6e:7b:
                    74:f2:0e:36:89:63:0b:86:79:54:5d:15:fc:05:2d:
                    7a:4b:66:69:00:37:b5:54:d4:6f:3d:d8:e0:e8:fe:
                    4d:8a:c4:dd:22:8b:ef:19:c4:ce:c9:72:c1:18:24:
                    b0:9d:26:84:fe:e8:10:12:a7:d8:eb:d1:23:e0:10:
                    e6:4b:f4:c6:7a:d5:eb:ed:b7:4a:44:3d:15:b4:ee:
                    a8:bd:81:f2:33:30:5f:62:10:5e:f7:e0:57:62:7f:
                    37:77:c3:97:a5:54:92:68:f3:03:88:98:7e:ad:1f:
                    86:f3:3c:7c:ae:69:8c:e8:ef:b5:8a:d0:cc:37:a7:
                    d2:7a:09:17:47:05:2f:20:9a:e1:38:15:17:20:57:
                    e4:f4:18:63:08:18:f9:d2:b1:86:ff:c5:6a:6c:2d:
                    fc:71:a0:22:31:06:f5:c6:4e:7d:2b:2d:8f:e8:10:
                    21:83:c9:5b:7c:f1:32:fa:3c:a4:a4:dc:74:b7:95:
                    e7:af:77:cd:af:58:69:43:eb:5d:e3:22:b5:11:78:
                    b2:db:b7:87:89:93:77:23:7b:98:e6:fc:43:e7:dd:
                    66:04:d7:5b:c5:9c:93:02:e7:c6:a0:a6:0e:a6:35:
                    7d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FB:C3:F5:E6:11:4F:F6:7A:E0:9C:BC:A8:3B:39:F1:4B:EC:EA:52
            X509v3 Authority Key Identifier:
                keyid:7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6f:08:e8:b8:87:41:eb:ad:67:7c:23:cb:9e:02:b4:28:f8:
         3b:fe:e7:96:61:51:e7:c5:46:f8:c0:07:38:da:f2:8e:16:80:
         07:fd:ce:3e:f5:74:83:64:3a:f5:59:02:df:75:75:25:67:8c:
         3b:c9:61:9b:a8:11:ff:20:65:f4:b5:9a:62:0a:67:cf:f7:24:
         1d:d1:d6:8f:7b:3d:b8:70:e6:31:7b:e4:1d:b5:41:0c:b7:08:
         12:30:4c:ae:e5:ff:59:4f:74:5a:59:63:86:76:1a:fb:d0:95:
         4c:c0:b8:ea:b7:71:6d:8d:a9:e3:9d:d5:da:fb:99:a9:2c:a3:
         28:a5:93:e8:d4:1d:9b:f7:d5:17:40:31:a4:2d:50:08:b8:8d:
         9f:12:74:0e:49:9b:92:a9:7f:1b:06:8a:8b:87:07:37:f6:fd:
         e9:f5:f0:93:69:9f:21:b4:20:f9:8c:41:08:fd:b9:fe:a5:74:
         04:73:9f:7e:bb:4d:5c:3a:a6:84:dc:0a:b6:22:fd:59:1e:07:
         62:c7:d4:ec:f3:0c:34:43:89:8c:97:cc:50:6a:9e:1c:32:e2:
         b1:ac:10:d6:7d:17:95:83:ed:0d:26:4a:22:7d:c0:68:b7:bb:
         97:d6:3e:9b:18:b7:c5:db:d6:84:76:39:cb:c0:3b:50:30:75:
         4a:d5:1e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:21:12 2025 by rpki-client