Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
File:                     fcSs7cuGzd_tf23oyt_KAEabvI4.mft (raw, json)
Hash identifier:          SxZo1TFdRCK2KEyKPf01bEtjTSfIGkhu4KDklJlqCs8=
Subject key identifier:   6C:0C:5D:7C:52:26:A6:FB:0B:6B:B0:60:1A:0C:99:72:CD:07:3C:9A
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Certificate issuer:       /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial:       0197597FDE126940FCE2C81BD2EE3C3B31DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
Manifest number:          1595
Signing time:             Tue 10 Jun 2025 11:00:41 +0000
Manifest this update:     Tue 10 Jun 2025 11:00:41 +0000
Manifest next update:     Wed 11 Jun 2025 11:00:41 +0000
Files and hashes:         1: L3jfVXtRL6_lD6BNoqXy7sEXYVs.roa (hash: bCWcb1OjgRUbcmEWxo5WVJLuY5Wam3mN/c101nJS4g4=)
                          2: aNZOgbC2ct7oBfvfODiPTTzSje4.roa (hash: REnD2uLHHDzM+UgqTv+vmaX5vz4XYKoCVVSGMH/Czts=)
                          3: fcSs7cuGzd_tf23oyt_KAEabvI4.crl (hash: DZwcgvaQV3E2OVs+NZaN/aWxT+EZ4IeG6/wZa4+ratE=)
                          4: iIZa86cRoXzfTgl30QJoI1SOvPY.roa (hash: 8zjLfzmaOcWmBNRerK1/Wq9anwq2ilShQCg9MYrO3HM=)
                          5: xw83wudCk127kiXHqSwTaIW46z8.roa (hash: NELCxFUdkV28jyteAlY6BEFqr7FQW+26sZ4az/+ppAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 11:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:7f:de:12:69:40:fc:e2:c8:1b:d2:ee:3c:3b:31:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
        Validity
            Not Before: Jun 10 11:00:41 2025 GMT
            Not After : Jun 11 11:00:41 2025 GMT
        Subject: CN=6c0c5d7c5226a6fb0b6bb0601a0c9972cd073c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:24:c6:e7:fe:45:c7:ef:14:99:90:81:9c:77:
                    83:7e:ed:bd:5f:c9:c3:8e:4d:b4:ad:b8:92:ae:f7:
                    fa:d8:80:f6:49:38:3e:a3:ab:4c:d6:ab:b0:7f:d1:
                    4b:88:96:af:3f:ea:2b:55:7c:3e:9e:d3:c6:0c:89:
                    f6:70:d1:0e:2e:70:f1:01:3c:42:e1:89:f9:20:b4:
                    e7:bf:72:e9:03:cd:89:70:dc:6a:a2:4b:13:aa:f3:
                    d3:b1:5f:76:07:0c:b0:93:24:f4:54:c4:2f:6f:c9:
                    87:23:bd:b8:a8:1d:64:e3:ef:ce:dd:68:af:72:df:
                    77:11:7c:e5:60:23:c9:6a:71:b2:8d:b2:22:df:33:
                    7b:32:77:6c:65:6a:7a:16:88:1a:11:69:c8:a6:e1:
                    0a:a7:79:09:59:45:55:0b:3f:44:64:e1:27:fb:58:
                    a4:bc:82:6b:c3:31:91:2d:fd:24:e2:09:05:ae:a4:
                    4d:c1:cc:85:95:08:c0:48:e8:ba:90:89:73:5a:59:
                    71:f2:05:34:ac:1c:0f:fa:a0:5f:e4:05:b6:6e:96:
                    42:d1:dd:1d:7e:98:c3:65:d2:0f:69:21:2a:04:b9:
                    44:5b:de:e6:83:e2:37:6a:a9:9f:18:76:fe:7b:de:
                    a3:f1:31:18:eb:96:50:4f:f8:94:85:ee:36:a8:b0:
                    85:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0C:5D:7C:52:26:A6:FB:0B:6B:B0:60:1A:0C:99:72:CD:07:3C:9A
            X509v3 Authority Key Identifier:
                keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:9b:1e:02:52:40:d8:47:cb:e5:37:a4:b8:34:b6:b1:9b:3b:
         f0:43:a4:ca:02:ef:8c:d6:fa:15:b6:b1:5c:1b:8a:a5:40:ce:
         f7:5b:68:44:3b:62:94:ae:d1:db:b7:26:a8:7f:2c:7a:b0:0b:
         72:2c:2e:12:e3:09:a1:1b:75:66:88:ba:21:de:72:b6:a1:a5:
         d0:0f:ca:57:a1:0b:0e:fb:e6:55:85:09:9e:be:51:08:94:47:
         33:f4:63:6b:77:cb:52:8d:c9:26:93:30:4c:a7:a5:ff:d9:56:
         7a:a4:e0:18:60:ed:d9:31:5a:fd:c7:0b:fc:76:9a:17:b8:53:
         57:cb:dd:2d:73:32:95:15:f3:9f:04:99:69:c9:13:96:42:45:
         2b:ce:d0:43:2c:29:40:c4:e0:af:20:a2:f4:22:07:f4:bb:e0:
         96:20:74:a2:19:eb:cb:94:4f:3e:94:8e:05:5f:96:0c:63:b3:
         79:f7:3e:3c:45:35:4f:ee:82:f6:81:2e:ac:8f:14:f2:02:88:
         c1:55:6d:de:60:63:01:ad:fc:3d:95:fc:6b:f9:51:5d:17:d4:
         f2:3b:47:cb:f3:84:4a:b2:eb:bf:41:09:55:69:7d:b1:b9:f8:
         aa:6d:b8:a7:8e:25:22:b7:d8:4d:2d:db:88:96:99:03:00:8e:
         2f:68:72:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:47:24 2025 by rpki-client