Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
File:                     fgRhmrDxIJtw8QWYxplEvzTb8jI.mft (raw, json)
Hash identifier:          +rnKwNc21pmvcNBz5T5xCuUBadvyL17aolRUrluh7MQ=
Subject key identifier:   98:CB:8F:0E:41:73:00:1A:56:6E:67:BD:32:3E:26:FA:DF:05:A4:33
Authority key identifier: 7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
Certificate issuer:       /CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Certificate serial:       01976B85E887CCA1716BEC550051E9235ABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
Manifest number:          12CD
Signing time:             Fri 13 Jun 2025 23:00:27 +0000
Manifest this update:     Fri 13 Jun 2025 23:00:27 +0000
Manifest next update:     Sat 14 Jun 2025 23:00:27 +0000
Files and hashes:         1: 787yu0Xx7LAqYI4eV6FlvWwe4sU.roa (hash: 0rdw2IxnG2UduKLMx9SDd9m8DvhrTv12ADsR6eydjg0=)
                          2: V7t1MzfzXgW3Q66a3IOYRULIxX8.roa (hash: 9ljAarH2vMiPbFaBcASuSrcoh5ApRcxsoYC+Da4pdfQ=)
                          3: fgRhmrDxIJtw8QWYxplEvzTb8jI.crl (hash: 610uLKbwHNADOopFlMcH48TT1x70EBSYEX4ev+AbDzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:85:e8:87:cc:a1:71:6b:ec:55:00:51:e9:23:5a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e04619ab0f1209b70f10598c69944bf34dbf232
        Validity
            Not Before: Jun 13 23:00:27 2025 GMT
            Not After : Jun 14 23:00:27 2025 GMT
        Subject: CN=98cb8f0e4173001a566e67bd323e26fadf05a433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:80:62:97:6d:db:bb:07:fb:51:6a:d3:ce:d7:
                    19:c1:9f:c8:9f:4a:d4:ad:5f:82:cd:69:63:14:84:
                    f9:3a:38:da:37:9f:89:94:61:06:af:9c:ef:74:84:
                    4b:a7:0a:e2:23:f9:6d:da:e1:5c:20:70:c2:71:c3:
                    64:6f:52:9a:53:66:3e:fc:00:b5:f0:bf:e9:d4:57:
                    ca:08:35:cc:4e:a9:74:7b:5b:b0:f2:0a:63:3e:2b:
                    41:a7:ba:00:cc:8d:ee:e2:93:d7:e7:3d:94:3b:ab:
                    2e:f5:d3:a1:86:02:2e:99:1b:05:9d:c1:3d:c1:78:
                    3c:05:e9:f0:90:43:31:7c:b4:39:fc:84:cf:56:fb:
                    2a:90:11:d3:23:a7:09:57:50:bf:2d:b4:53:c7:4e:
                    40:d1:cc:b2:d7:1e:e3:09:a7:1b:20:f9:33:78:15:
                    26:f2:bd:e4:7a:fd:95:f7:c3:45:2f:86:16:fd:3a:
                    74:df:e1:f9:46:1a:de:ba:af:a5:f0:0b:66:f8:9b:
                    7f:ce:61:41:5a:45:b4:6a:a4:e7:9c:0f:12:91:df:
                    06:0d:ae:10:ae:11:5c:e3:65:f2:ad:2c:fe:a4:9d:
                    cf:ff:32:48:99:26:23:62:f3:84:52:aa:59:58:61:
                    58:b9:25:b5:23:3a:f7:b9:e2:23:7b:8c:e4:14:82:
                    81:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CB:8F:0E:41:73:00:1A:56:6E:67:BD:32:3E:26:FA:DF:05:A4:33
            X509v3 Authority Key Identifier:
                keyid:7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:fb:cb:58:38:a6:22:45:9a:07:a2:81:84:69:96:86:10:ec:
         b2:1b:aa:6e:58:af:ba:c8:c5:8b:fb:ca:f3:a0:c1:b7:96:9d:
         29:61:79:df:56:c3:29:23:7c:87:83:ee:51:34:ab:7f:e6:b4:
         bf:06:44:6f:21:58:08:6f:ea:68:c9:47:f0:75:8f:1d:1e:85:
         a2:a3:b1:30:51:20:e3:7b:10:e1:f7:05:a6:8d:c0:7a:a0:9f:
         99:09:fe:70:83:a1:d0:7b:7a:a4:5d:95:65:99:b9:76:a7:f6:
         27:6b:4c:48:ad:fc:76:6d:85:b6:0a:76:ff:7c:94:79:19:96:
         87:9b:48:cb:84:9d:db:3e:e9:e5:61:97:ed:20:dd:ac:f5:66:
         00:41:61:2b:d7:fd:50:7b:64:c3:8a:84:89:28:78:eb:44:10:
         57:7e:99:12:59:4d:dd:ea:ba:28:e8:4e:fc:49:65:37:63:b1:
         c4:bd:14:71:80:98:8b:5f:d4:53:e8:ed:4e:78:78:f6:44:35:
         f9:f3:c9:b0:72:92:92:75:68:3a:32:a8:2d:f6:27:94:1a:f6:
         41:47:5b:96:ef:95:76:2c:ea:d3:94:fd:3c:63:01:df:ee:a7:
         58:09:bb:4e:62:5f:d3:14:fb:d7:08:b3:10:ba:56:6e:79:a1:
         f5:13:ae:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:00:23 2025 by rpki-client