Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
File:                     FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json)
Hash identifier:          Oip9fItvkEn5TyZpBG93gPo8tolq3RdDUzt9mG9dFDY=
Subject key identifier:   C0:48:C3:7F:E4:EC:7B:79:BC:5D:EB:18:C7:1D:09:21:F2:5E:18:C4
Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Certificate issuer:       /CN=1492a20754c9a7650b8279b9390689c469d73595
Certificate serial:       01975B37042DDE81DD8187744721C1A59BBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
Manifest number:          1587
Signing time:             Tue 10 Jun 2025 19:00:21 +0000
Manifest this update:     Tue 10 Jun 2025 19:00:21 +0000
Manifest next update:     Wed 11 Jun 2025 19:00:21 +0000
Files and hashes:         1: 2A_3tfsfLBfsIjkj25Wq_P7GURU.roa (hash: 4w2SNRAXRMcEZVSqmqD0dMjfx/4HpwrZYp/R521drvc=)
                          2: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: Cy8fQntPTfz141WmZsmMUIQx7loJHePkTOAw6jihMqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:37:04:2d:de:81:dd:81:87:74:47:21:c1:a5:9b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595
        Validity
            Not Before: Jun 10 19:00:21 2025 GMT
            Not After : Jun 11 19:00:21 2025 GMT
        Subject: CN=c048c37fe4ec7b79bc5deb18c71d0921f25e18c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:a1:98:36:fb:e3:10:42:bd:39:95:dd:a9:85:
                    36:3c:78:2f:84:1a:1e:b8:4c:b4:90:5c:56:36:00:
                    11:73:51:6d:2a:89:05:81:c7:ce:1b:97:8f:05:5b:
                    f0:a6:80:a1:e8:a4:7e:ed:1a:2c:bd:03:ed:80:7d:
                    ea:77:7e:49:02:39:bd:b2:45:90:4a:90:68:7b:be:
                    70:de:ba:f9:e3:2f:3e:e2:17:c2:54:1c:34:2b:c1:
                    ad:92:26:4f:df:55:4d:02:87:5f:bf:5e:c1:ed:86:
                    0e:77:8c:1b:f5:23:c5:bf:19:70:7b:3e:02:59:87:
                    72:69:e9:0a:d8:6e:f0:2a:71:31:d2:c6:61:79:4d:
                    60:eb:8e:d7:eb:25:c6:bc:41:1c:6b:c2:11:cc:93:
                    22:e8:52:6b:d7:25:d7:ab:28:c9:31:b8:4e:3e:5b:
                    a7:cd:b2:47:a3:44:40:a0:9f:e7:4d:ea:8e:74:8a:
                    95:77:01:94:db:e9:b0:53:f5:9e:d1:de:48:f4:26:
                    b1:21:12:4a:fa:ef:e5:56:38:32:9b:2c:6b:c3:22:
                    12:86:76:fc:c2:f0:6a:05:3e:93:d7:d2:71:91:47:
                    91:89:36:fa:6f:65:3a:aa:5c:d5:7e:c7:41:65:6c:
                    30:5d:0f:c3:19:14:c6:76:d2:8c:2d:e9:56:1c:72:
                    89:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:48:C3:7F:E4:EC:7B:79:BC:5D:EB:18:C7:1D:09:21:F2:5E:18:C4
            X509v3 Authority Key Identifier:
                keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:17:75:7e:27:15:54:a3:0c:90:db:ce:f0:20:52:4c:cf:07:
         de:fe:5f:1d:a5:b6:45:43:52:67:1e:0e:43:c0:7d:36:d0:a8:
         60:08:a9:35:ba:f8:41:f5:56:17:d0:21:7a:8c:23:f5:85:93:
         c7:84:61:9a:b7:7d:b3:24:82:a8:61:c9:4a:e9:78:1e:d9:6e:
         e8:f3:34:64:2e:5c:86:a6:c1:7e:47:69:b6:c3:34:e0:24:0b:
         ed:99:06:73:fe:ff:b7:7b:00:4d:a8:08:75:2e:09:2e:fd:34:
         49:8f:72:8f:40:3c:50:44:88:66:1f:8d:2b:08:ae:e0:bd:64:
         9f:11:50:7a:df:b7:3e:34:b6:2a:ad:8e:d5:26:96:b2:74:ba:
         a0:62:66:90:71:db:74:82:61:53:f6:1f:b6:a7:c6:20:43:48:
         bf:ec:7e:48:92:44:28:48:c4:04:02:1d:fb:f1:a4:4e:99:1f:
         b4:25:97:f6:4a:3f:82:65:c0:81:57:3d:10:6f:8a:f4:db:ba:
         16:d1:1b:dd:6c:f7:fb:d6:12:71:50:c4:18:b5:ad:dc:2f:d6:
         32:38:13:75:6f:b9:ea:c7:e6:5c:76:a7:4b:64:4b:15:10:b5:
         a9:ba:03:62:a5:f9:ad:30:dd:a7:fc:ed:7c:52:ce:72:b6:cc:
         79:16:f3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 21:07:12 2025 by rpki-client