Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
File:                     fcSs7cuGzd_tf23oyt_KAEabvI4.mft (raw, json)
Hash identifier:          n+jphoLcShwPLF4gTkwn5NhESlCrg9kedVRxQJmMS4I=
Subject key identifier:   7C:2F:E3:D7:33:15:BF:9B:8D:18:39:FA:BB:19:DD:3E:4C:5D:79:81
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Certificate issuer:       /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial:       01975F4B24A48436EF0BEFAF14C171B4F427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
Manifest number:          1598
Signing time:             Wed 11 Jun 2025 14:00:49 +0000
Manifest this update:     Wed 11 Jun 2025 14:00:49 +0000
Manifest next update:     Thu 12 Jun 2025 14:00:49 +0000
Files and hashes:         1: L3jfVXtRL6_lD6BNoqXy7sEXYVs.roa (hash: bCWcb1OjgRUbcmEWxo5WVJLuY5Wam3mN/c101nJS4g4=)
                          2: aNZOgbC2ct7oBfvfODiPTTzSje4.roa (hash: REnD2uLHHDzM+UgqTv+vmaX5vz4XYKoCVVSGMH/Czts=)
                          3: fcSs7cuGzd_tf23oyt_KAEabvI4.crl (hash: m34IGETVPCYSmQLkFYIEWfkgPC4NXGAoP9sMXkRGrUE=)
                          4: iIZa86cRoXzfTgl30QJoI1SOvPY.roa (hash: 8zjLfzmaOcWmBNRerK1/Wq9anwq2ilShQCg9MYrO3HM=)
                          5: xw83wudCk127kiXHqSwTaIW46z8.roa (hash: NELCxFUdkV28jyteAlY6BEFqr7FQW+26sZ4az/+ppAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:4b:24:a4:84:36:ef:0b:ef:af:14:c1:71:b4:f4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
        Validity
            Not Before: Jun 11 14:00:49 2025 GMT
            Not After : Jun 12 14:00:49 2025 GMT
        Subject: CN=7c2fe3d73315bf9b8d1839fabb19dd3e4c5d7981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:4f:10:b4:6d:4e:eb:56:35:06:57:5e:0a:
                    47:3b:65:54:26:e1:a8:f6:77:71:59:80:41:c7:51:
                    e4:67:0d:b5:81:c7:3c:49:e4:fa:2c:d7:ee:31:bc:
                    a1:d4:46:23:1b:f7:e9:06:d3:8b:7a:b0:8c:96:42:
                    00:80:1f:df:81:31:b6:a6:a2:11:e4:46:08:e0:36:
                    e4:b5:ba:55:45:8f:ba:1b:6e:48:9d:ab:a7:e1:d1:
                    cb:7d:8f:77:1d:be:00:2b:ea:75:54:1a:98:3c:d3:
                    97:b1:68:a7:6b:b4:59:c3:e3:0c:9b:a7:8c:f0:e7:
                    8d:48:9d:60:e9:71:08:0b:f6:f8:c8:40:89:49:a3:
                    2a:4e:80:f6:f3:9e:1e:83:46:92:c6:3a:3b:51:f1:
                    08:9b:49:bd:79:25:34:3e:16:ae:fe:e0:01:b8:b8:
                    44:06:da:96:41:78:ac:5c:f0:f3:42:39:87:bd:7e:
                    3a:f8:34:97:3d:a6:6a:9f:96:5e:36:b3:39:67:79:
                    96:b2:18:7e:99:ba:e0:71:83:31:24:88:4f:cd:d5:
                    0e:5d:20:10:46:b5:f5:85:9c:b3:4a:43:2a:25:68:
                    69:93:b1:90:47:84:67:e2:94:62:aa:da:01:ae:5b:
                    54:d6:fc:e5:92:8e:91:a4:da:09:53:1e:77:2e:9b:
                    dd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2F:E3:D7:33:15:BF:9B:8D:18:39:FA:BB:19:DD:3E:4C:5D:79:81
            X509v3 Authority Key Identifier:
                keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e9:5c:ad:9c:c2:08:9c:00:4e:ba:4e:e8:59:df:83:17:a2:
         27:77:68:40:0f:37:63:62:c6:fb:17:31:09:df:5c:77:88:6e:
         9e:a9:a5:b7:22:78:f1:7c:2c:31:de:64:c9:85:d2:41:3e:64:
         d0:f3:0f:33:62:55:08:14:8a:76:94:2b:a3:35:26:9b:f8:f8:
         4b:d9:05:c0:18:19:41:03:2c:69:02:55:20:d6:4d:a9:9d:26:
         46:a6:24:ad:fe:73:d3:f3:03:68:26:d8:28:22:62:d7:98:cc:
         c1:e9:da:52:73:52:da:fe:e7:99:e9:52:83:36:15:b0:c7:7f:
         e4:c5:f5:6e:52:3c:64:77:ce:a2:56:71:1b:eb:30:42:98:d0:
         5e:d6:87:1d:31:67:80:7e:4b:e1:72:40:0c:12:d0:e1:52:95:
         18:88:98:32:a8:45:39:58:65:38:78:71:34:e5:b1:31:c5:14:
         79:d4:5b:bd:20:1f:a9:7b:47:4e:41:78:7c:cf:6b:83:e7:bc:
         59:38:cd:b1:0c:c5:a6:e1:bf:04:70:94:c5:5c:c0:85:1d:9a:
         2a:b6:17:ad:67:9b:44:fa:36:e9:f5:77:60:a1:be:c7:c7:3f:
         c9:a1:51:ac:97:c7:29:02:dc:05:39:ee:71:b7:4c:4c:4d:9f:
         29:6e:d6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 00:24:32 2025 by rpki-client