Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
File:                     FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft (raw, json)
Hash identifier:          1A5i6oVP+YBs6aBmF2L1XQuZ2zXln41YMC512iKiyaM=
Subject key identifier:   73:35:A8:77:D1:7B:39:61:A0:E7:72:49:53:93:FA:A1:FC:0C:D9:FF
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Certificate issuer:       /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial:       019752D9485534F4289287763CC479039ED8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
Manifest number:          14E2
Signing time:             Mon 09 Jun 2025 04:01:00 +0000
Manifest this update:     Mon 09 Jun 2025 04:01:00 +0000
Manifest next update:     Tue 10 Jun 2025 04:01:00 +0000
Files and hashes:         1: DCNKSj1_5YHNKhsqvaqolZH_B60.roa (hash: TXy+j47cDCmczgpA/MrIE9kmjblkjLGkgY8O20y42aY=)
                          2: FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl (hash: 2jvP6vwow/LI4r2+S9HsCJ2krkiIZ2q0VC0J+kD1UkI=)
                          3: JvuO5YaPjLFf0HZP4H-1yUabiMY.roa (hash: +Bx+7z+E11mxbukF+AWlKTGcSTRDPcpqMiJ/UPsOhzE=)
                          4: O-lMv2utgSL0sF15RsiGk9rGqhU.roa (hash: 4uJaHT6rWS3qzpOxWgNId7Ke0ps1U1qLVv6t8Kfw/Vs=)
                          5: O0m6rpxbshw5KyfbV3Df-u5gpAw.roa (hash: K3VIPCSpjhR1Ioq4yukkhoTaNVjKptpkSTwyxyPzC1Y=)
                          6: gJdvURE1CiuF2RTlrllA5EaJUA0.roa (hash: QQc8DdjtzLaI++nEpaA6R37pPd4UQFAmh/VqOKkxVE0=)
                          7: sPgmpLyF_PKafpXcgtR7FvsC9bY.roa (hash: sMp8sjJ9YjMshoV/D5bSKKVpPxzHt4F0frkmzXOCA3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:d9:48:55:34:f4:28:92:87:76:3c:c4:79:03:9e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
        Validity
            Not Before: Jun  9 04:01:00 2025 GMT
            Not After : Jun 10 04:01:00 2025 GMT
        Subject: CN=7335a877d17b3961a0e772495393faa1fc0cd9ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:59:5e:a6:54:9e:ec:15:19:67:35:60:cb:d5:
                    78:a1:05:07:8f:c5:27:82:89:21:1f:d8:08:af:54:
                    1d:16:1a:6e:6c:c5:1b:af:08:f3:b9:ae:6c:0f:32:
                    49:d1:ba:f8:0d:96:e5:35:23:b4:cd:b4:61:61:99:
                    7a:67:41:3f:99:0a:11:4c:80:38:29:87:48:6d:92:
                    cc:39:9e:d8:8b:a4:59:01:46:b6:6c:8b:49:09:63:
                    c5:66:99:b7:d4:95:c3:d3:96:ec:08:be:0f:04:62:
                    fe:1c:d9:65:e5:52:c9:dd:04:a0:60:72:31:84:94:
                    6d:63:19:f9:a2:b4:db:be:c4:f8:17:c9:2a:a3:54:
                    37:19:50:6f:49:af:cd:04:f2:5d:fb:40:6c:9c:b6:
                    09:c8:49:78:d2:68:17:bb:06:c4:b6:f9:eb:f3:74:
                    f8:c4:7c:1a:de:b8:47:4b:27:2f:8b:8d:df:b3:e9:
                    99:dd:df:85:15:ae:e2:28:96:c1:76:ef:22:de:6a:
                    06:79:6a:12:66:b2:12:f6:1e:08:52:02:b9:bc:1c:
                    bf:5f:cd:95:c8:ae:11:2a:8d:45:72:ca:5b:8d:52:
                    11:a2:66:19:82:21:67:8c:fa:18:b1:90:7c:62:bc:
                    0e:7c:70:f8:da:0e:e4:0b:3a:ed:f0:17:30:3b:82:
                    4d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:35:A8:77:D1:7B:39:61:A0:E7:72:49:53:93:FA:A1:FC:0C:D9:FF
            X509v3 Authority Key Identifier:
                keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:19:5a:f5:1c:40:ee:af:fb:10:65:59:8f:fc:3f:06:26:77:
         5e:2f:50:6e:a6:49:93:a1:1a:e5:d7:c4:e3:69:d0:e3:77:82:
         2e:1b:24:fc:13:94:0f:23:55:4f:4a:8f:71:1b:24:5d:99:9c:
         f2:1d:fb:c4:be:16:b5:0e:c1:2a:05:a5:a3:b9:17:db:27:45:
         38:2d:3b:f8:3f:35:c1:01:79:c7:e5:03:8b:7c:85:23:26:81:
         71:30:ed:e8:19:25:d7:4d:8c:dc:46:dc:38:7a:41:9e:e4:4b:
         31:06:d2:c6:73:ce:fa:90:5b:ed:0f:20:f8:de:fb:cb:32:74:
         21:23:11:31:23:71:05:6f:c6:6d:99:ac:6d:e8:cb:e9:f2:ed:
         3d:ca:46:64:d2:4f:2a:10:5d:87:0c:d1:be:67:7d:e8:53:30:
         52:92:65:87:8c:35:1f:78:aa:90:b8:29:56:60:9f:85:5b:a8:
         78:10:d4:7b:cd:85:57:62:dd:f6:cd:e7:d9:a3:25:49:17:76:
         60:94:fd:a8:3d:d3:3f:32:ab:87:cc:27:07:97:cb:3d:e8:fe:
         42:3f:de:39:b9:59:8f:b8:51:df:4c:fe:cd:70:35:ef:e2:d2:
         f5:ed:52:4c:1f:fe:8f:7d:47:63:ac:a1:4c:ec:93:c9:01:f4:
         5b:d3:58:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:33:29 2025 by rpki-client