Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
File:                     Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft (raw, json)
Hash identifier:          iTOI/b8KAW8AYCjBv5qXpwyW8Nf7244b0SfxnPR5s1k=
Subject key identifier:   56:A1:42:D9:47:0A:98:68:79:DC:AD:6C:7B:D1:16:95:BF:7E:04:86
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Certificate issuer:       /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial:       0197500F13714D9EA6536E55A64A3CB4EB17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
Manifest number:          1592
Signing time:             Sun 08 Jun 2025 15:00:54 +0000
Manifest this update:     Sun 08 Jun 2025 15:00:54 +0000
Manifest next update:     Mon 09 Jun 2025 15:00:54 +0000
Files and hashes:         1: 1tY0n_P9pCmxuMHMwVN4kuuE9Yw.roa (hash: OMoFTls8LA8ewzB3QD+33fEfQjFe6IrAty5YO50hD+U=)
                          2: 3qpur1zwBPkajyupQYlxerl-sX8.roa (hash: P/ij/bhS3D5UPNfyBQsnXDUHMAdZt5V8V+OvOjXddRE=)
                          3: Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl (hash: Rpey/0Gcefx6kz20YT4aAmv1/FumFF7OI7AUkaZKiPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 15:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:0f:13:71:4d:9e:a6:53:6e:55:a6:4a:3c:b4:eb:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
        Validity
            Not Before: Jun  8 15:00:54 2025 GMT
            Not After : Jun  9 15:00:54 2025 GMT
        Subject: CN=56a142d9470a986879dcad6c7bd11695bf7e0486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:28:05:bf:b6:2b:2a:2e:c4:62:ad:0c:73:7d:
                    81:65:1f:74:a3:3e:6b:bd:a8:43:5b:34:39:60:84:
                    85:84:06:c1:66:af:ad:8a:e5:48:aa:10:f2:d1:5f:
                    39:74:40:e4:29:77:97:6d:bb:54:9f:ba:74:be:86:
                    e3:5a:54:ac:89:f5:ec:2f:27:1f:75:28:7e:5c:fe:
                    ef:68:65:56:ea:0a:89:ac:55:6d:f9:80:4e:10:29:
                    36:10:34:d7:ae:89:15:9a:97:3b:a8:32:55:7c:f2:
                    b9:8f:4a:b6:fb:d9:52:d3:24:1d:45:5f:57:76:fc:
                    82:ee:93:42:21:da:60:f4:00:65:d6:53:17:8d:85:
                    13:0b:c9:e2:aa:75:fc:19:b6:26:a9:e3:47:6e:d8:
                    d7:e5:c0:45:20:94:22:f6:e9:1f:2e:7f:76:06:f1:
                    28:41:88:f5:09:9d:fb:98:b5:70:cb:f2:28:4c:4e:
                    88:c1:89:bd:07:f9:ad:58:a1:1c:f5:9e:8a:8d:fd:
                    35:04:86:06:13:fb:1b:88:dd:53:91:c7:f9:7f:05:
                    6c:c6:d2:f0:10:dc:3a:e0:2b:0b:04:61:b4:c1:e2:
                    11:06:e4:b6:c6:fc:d4:5e:c4:2e:e7:41:98:49:e5:
                    a8:db:57:51:ba:07:f6:98:40:dd:2f:d2:f4:5f:66:
                    de:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A1:42:D9:47:0A:98:68:79:DC:AD:6C:7B:D1:16:95:BF:7E:04:86
            X509v3 Authority Key Identifier:
                keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:75:53:55:e5:6f:f8:f4:f3:77:c7:84:be:d7:4e:57:a3:df:
         b8:75:39:9f:6b:51:23:a0:1e:8b:f8:ca:e0:ed:ae:2d:cd:58:
         cd:0b:d2:3c:59:3f:45:df:05:6e:2a:c5:2e:cc:92:9e:27:cb:
         6d:06:91:73:5e:e8:b3:46:db:a3:90:11:a3:f5:cd:8b:39:a1:
         2c:ba:3f:d1:dd:0e:82:e8:21:58:4c:e2:a5:4d:72:c2:b9:90:
         2f:7a:64:fb:37:e0:b6:fb:b3:ea:92:6d:26:33:31:08:17:19:
         d5:96:be:0c:3e:81:c9:10:52:63:7d:1f:8e:a0:61:66:0e:6b:
         f6:d2:3f:95:9f:a3:cf:58:24:76:b2:c1:e9:53:9e:0e:16:e3:
         fb:ae:bc:86:2f:f0:89:f8:85:4b:80:21:47:5e:d9:42:db:94:
         ad:09:4f:3b:f4:41:93:bd:d8:19:ed:c6:8d:dc:21:39:97:9d:
         88:89:05:21:da:32:e2:7a:65:99:7e:9a:3a:27:09:db:84:4b:
         92:2b:1f:3b:34:bb:86:02:79:e6:03:eb:4c:ce:b6:fb:9b:7a:
         de:68:92:0e:ba:33:8f:10:16:a6:f4:ab:2e:23:f8:bb:d7:2b:
         00:cb:b3:b0:5b:1a:9d:ec:f9:79:37:64:17:d0:5d:7b:a1:44:
         2a:87:33:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:18:36 2025 by rpki-client