Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
File:                     fGc9qtbZMX8BAdQaBCph5XaJRTo.mft (raw, json)
Hash identifier:          x7kKFNdPnR7P6jP3V3iTA3SDTNk+ySMAEvP3eCNwDNw=
Subject key identifier:   93:A4:F9:55:C5:B5:57:49:18:B8:99:96:F9:2E:9D:64:B2:64:73:6E
Authority key identifier: 7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A
Certificate issuer:       /CN=7c673daad6d9317f0101d41a042a61e57689453a
Certificate serial:       0197BA0F3B038C866B3182406BC6ED6A88B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
Manifest number:          1018
Signing time:             Sun 29 Jun 2025 05:00:49 +0000
Manifest this update:     Sun 29 Jun 2025 05:00:49 +0000
Manifest next update:     Mon 30 Jun 2025 05:00:49 +0000
Files and hashes:         1: 7GFUUPQe5X4o8br9pIJdHkkRXtg.roa (hash: 4KUOaFluZqET8tORnDH6HMaQ2V49mBLgUsZvrKGZ4Yk=)
                          2: QruSm__TwUr_yHAYXjuNZoojNTM.roa (hash: 3QNaGA7ZG6uoQs8cjkKS1muqAr2cgCC2owbsQ1FitJQ=)
                          3: fGc9qtbZMX8BAdQaBCph5XaJRTo.crl (hash: mRQ2+O+Hj3Rr3iGGZCR90kgmHfhXXIr2rav1RCw3ITs=)
                          4: qQ7iOR4Ssn9YuOR2RGcWRIhX7kw.roa (hash: wQiE3t4T6OAM43VIDSTCvTQoMR/uz5WRMJgjbw+3Glg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:0f:3b:03:8c:86:6b:31:82:40:6b:c6:ed:6a:88:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c673daad6d9317f0101d41a042a61e57689453a
        Validity
            Not Before: Jun 29 05:00:49 2025 GMT
            Not After : Jun 30 05:00:49 2025 GMT
        Subject: CN=93a4f955c5b5574918b89996f92e9d64b264736e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a3:b4:c4:97:81:ba:f0:93:54:61:0d:9c:3a:
                    b2:fb:5f:d8:a2:d9:58:35:e8:4c:72:14:b1:f5:75:
                    1f:68:44:39:e8:28:68:aa:c5:a9:47:01:0b:d5:37:
                    0c:4b:c1:4d:03:01:31:5f:c9:fe:c6:06:b8:cf:26:
                    22:aa:65:98:c4:60:05:31:91:c5:8b:5f:be:82:fb:
                    29:ad:a3:65:43:72:ef:54:b9:f2:89:1f:55:79:e6:
                    e4:dd:a8:bc:e9:28:c9:4c:1d:ba:57:8e:bb:1a:2d:
                    ee:54:56:e6:41:ac:6d:44:04:12:80:73:27:99:c1:
                    09:f5:3e:af:00:aa:0e:29:d7:62:72:72:d0:8f:b5:
                    4b:76:2a:e0:15:58:96:95:82:cc:33:5d:2f:57:df:
                    99:41:ee:7e:f0:3b:66:84:f1:97:c8:88:a4:f0:ab:
                    ab:7f:c0:67:43:ba:42:8e:47:a2:1b:5d:3b:e3:a8:
                    ee:69:7e:da:38:4e:d4:ca:2c:28:ea:03:4a:95:5d:
                    d1:af:b5:72:9e:02:ee:17:50:f1:30:3d:55:80:67:
                    ba:77:4d:06:3e:a4:8e:78:75:3d:b2:e8:2d:6c:ee:
                    3e:02:fd:68:53:0a:b1:8b:89:79:16:c9:85:5b:fd:
                    a5:8e:a5:f0:28:ee:fd:ac:68:e6:67:0a:69:48:5c:
                    41:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A4:F9:55:C5:B5:57:49:18:B8:99:96:F9:2E:9D:64:B2:64:73:6E
            X509v3 Authority Key Identifier:
                keyid:7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f3:3d:a0:b5:39:bf:52:e7:00:19:33:da:00:45:09:50:ea:
         89:ea:ec:e8:b1:c2:6d:73:5a:7c:68:28:82:fe:48:09:5a:26:
         e3:29:19:5b:2c:9f:96:48:cd:db:87:34:18:9a:25:ea:d5:db:
         62:bd:62:11:75:ff:25:ff:9a:39:58:c1:e5:7b:24:31:3e:01:
         e9:fd:b0:b0:4b:86:23:6a:30:6e:ac:b9:57:79:f4:c4:78:ef:
         74:45:e0:08:02:56:c9:64:47:3d:0d:1a:d1:ad:5b:25:68:bd:
         45:30:8d:38:31:36:a5:80:65:cf:73:01:41:33:2a:a8:41:f1:
         48:65:f0:ba:81:c8:52:e8:f1:a6:72:73:94:2c:91:cb:bb:35:
         5a:ee:1b:ce:48:e7:4d:a6:56:ba:f7:6f:36:2a:00:7f:93:b3:
         44:dc:03:77:6a:f4:74:f7:f4:2a:ea:6f:6e:6e:88:90:aa:22:
         f3:68:e3:9c:49:3e:80:78:da:49:aa:d3:95:34:4c:d5:7b:bc:
         e9:ee:70:4d:d3:25:8b:30:22:8c:58:76:e7:1d:e8:08:48:4a:
         68:cf:4e:a6:37:1c:78:f0:12:36:43:50:3d:38:f4:a5:57:ce:
         57:44:57:89:d9:07:2f:59:69:d3:bf:cd:ce:3d:8c:63:bc:f6:
         90:47:54:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:38:47 2025 by rpki-client