Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File:                     FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier:          T8yYX58ezjDQBK0xHHdwbHwjMTp6Lg3jRlcFax67ktA=
Subject key identifier:   9E:12:9D:A2:11:2E:94:6F:7D:0E:92:8D:CB:E2:31:6D:92:98:7A:54
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer:       /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial:       01974FD7A50D1AFCDB4CA0136321E5D76971
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number:          05DC
Signing time:             Sun 08 Jun 2025 14:00:21 +0000
Manifest this update:     Sun 08 Jun 2025 14:00:21 +0000
Manifest next update:     Mon 09 Jun 2025 14:00:21 +0000
Files and hashes:         1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: 6BIQbnSGH+d/M6acOhtVhqs6mm/9BGUjZQhC31B2atY=)
                          2: GCjWN1dfacWVs6-dNAwUIB0pPtc.roa (hash: +OOo5n41q6UluB+BR+drcDaI3qsRIhz7e++vaPZKGtk=)
                          3: Tm3GJ75rZqfRGHxNwb2Su13LAA8.roa (hash: i8+DlzWcfqFIQ4s7ZZw3JGXSazICVrNG8AVatLfRrI0=)
                          4: W-3K5fzCzMBvM9WtH7NvbBMRwIA.roa (hash: RRZIltRS/dq6CUsYykb/8Cw+Mt7NFvaTFyBHpZDyvgA=)
                          5: lG1BuTFjXhh1jhBZGFRoMZ1VGUk.roa (hash: MY1BZJhxcWBrL8EPmHWLLNAliv/8MF/BrwKcRtPCEYA=)
                          6: rH6FFMbXiIxGI6RIrz3PGqzimRA.roa (hash: P3WGzj2DVrd7z07vxbTBkqmzIrwx78SPfvLo4lHc6gc=)
                          7: uMrc6Goc6EcB4BYik3tS4FAFhEU.roa (hash: XOKT7o47MThPABfgFTBszgq+QbxIg28i2iizclcbpXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:d7:a5:0d:1a:fc:db:4c:a0:13:63:21:e5:d7:69:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
        Validity
            Not Before: Jun  8 14:00:21 2025 GMT
            Not After : Jun  9 14:00:21 2025 GMT
        Subject: CN=9e129da2112e946f7d0e928dcbe2316d92987a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a0:fe:e5:f0:c0:d8:18:eb:0a:8f:ce:0e:84:
                    19:d3:d8:31:0f:17:d8:6a:b3:a5:7d:5e:8a:1e:5d:
                    ec:e8:41:50:de:fe:7b:07:fa:11:c3:d6:5f:2b:0a:
                    01:6d:e8:5a:be:5c:0b:d2:3b:e4:45:e6:36:67:89:
                    bd:66:5d:e3:bd:cc:58:c0:01:1c:38:fc:9e:65:ed:
                    c3:90:e5:53:48:71:59:7a:7c:07:ca:66:f2:24:5f:
                    22:b2:90:00:37:7d:71:c6:7a:a6:ba:d5:02:fd:95:
                    fd:a3:fe:39:4e:f6:c0:41:7a:65:13:fc:ca:62:ea:
                    43:e9:c5:0e:b8:fe:3e:3c:eb:24:5d:09:04:92:a2:
                    f6:a3:d1:68:e7:e1:6e:5e:1d:4e:89:10:d3:36:dc:
                    be:35:db:9b:db:a5:7d:72:df:dc:09:e3:69:88:ba:
                    c8:c9:9e:0d:89:64:58:a8:2d:c5:a1:38:da:27:38:
                    5d:d8:83:f1:c4:3f:eb:40:e1:33:c2:eb:5f:b7:ce:
                    01:6a:ea:ad:ad:bd:2d:5f:5a:81:c5:d5:01:77:5b:
                    71:22:46:31:8d:15:53:63:a7:82:07:09:ba:e2:d4:
                    36:93:a1:a7:7d:2d:01:33:e7:bc:a1:96:60:07:10:
                    4c:41:df:28:61:96:d0:48:e5:10:9b:77:61:93:2e:
                    02:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:12:9D:A2:11:2E:94:6F:7D:0E:92:8D:CB:E2:31:6D:92:98:7A:54
            X509v3 Authority Key Identifier:
                keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:59:7c:e4:62:66:48:a8:8f:21:ee:7c:f3:11:b1:b7:21:ff:
         ca:62:3c:25:a0:b5:83:60:05:15:44:14:30:77:ad:d2:ec:92:
         36:42:a3:19:c4:e9:0f:50:35:49:ff:af:d1:1b:3c:a1:f8:8f:
         56:26:eb:b2:d7:7c:71:d4:2d:c6:d9:c2:64:f9:29:1a:03:83:
         47:56:10:ed:ca:10:ab:6f:81:20:b3:5c:13:d8:af:b8:dd:3c:
         b0:7c:d0:e1:3f:b4:03:3a:ec:1a:8e:a7:95:9a:f5:c4:c9:57:
         69:ab:29:a0:49:99:5c:ac:3a:ff:fe:62:e7:76:a4:17:9c:51:
         d2:19:61:2e:20:c2:ce:fd:1c:9c:c4:8d:ec:12:6b:15:92:b0:
         a5:4e:17:40:f8:0b:46:44:8b:e1:81:c8:5a:8e:0d:f4:86:db:
         e8:c3:dc:d2:91:e9:26:c6:4f:79:d1:b3:d8:df:e4:b5:45:50:
         d6:fb:3e:9c:b4:6f:36:48:c0:08:df:2b:e7:16:05:c7:2f:6e:
         17:e3:9d:82:df:c4:83:d1:70:6d:4c:b0:27:c8:53:0e:f0:c4:
         50:9a:74:fa:ca:45:d3:bb:64:83:88:2d:fb:db:8e:09:7d:d6:
         fd:9a:a2:f0:f3:9f:20:23:bb:52:47:2d:cb:8a:e3:51:90:66:
         d4:60:a8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:26:46 2025 by rpki-client