Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
File:                     1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft (raw, json)
Hash identifier:          1+xLAYSnQfkJL7Z8ujETcAN5TpygGkOVw1t2+Ie1O0o=
Subject key identifier:   C4:B8:D6:69:11:72:21:38:0B:AB:73:D9:54:5D:7D:E5:C5:C0:70:7A
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Certificate issuer:       /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial:       0197B6A0EF873AFED8700602FADF1D0BE2EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
Manifest number:          15CC
Signing time:             Sat 28 Jun 2025 13:01:29 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:29 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:29 +0000
Files and hashes:         1: 0OeAqS6vX3gO6vvCqqj93y9hg-0.roa (hash: 4e6GVSZZmDnDLgJOl3djtnEbqT5lDhaJq4dAZ/qU/lk=)
                          2: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl (hash: JzjMsTzf8j7QE+OFpBIfUz83K6WIPpAz0v5wGPL1IFc=)
                          3: D6tj7JT1P0jiEOVSthEhCTE5wmk.roa (hash: uOBUARGoP6eXuPcaSTgozIdLNVRwgpXpaylajpzEpjY=)
                          4: IHhv8_mZDx6A2j-F31Pdu0k8CrY.roa (hash: STtIVy8Sw+YzG++4aOUBuN18lGWUI/cMQ7xzdEE/ceE=)
                          5: LrhxRNeyx_23QLWa5vtG1ZBXoY0.roa (hash: /kvdZiHdgr3LrYazf+YoZJL5PqLcDvAeE/KjO0/IEmY=)
                          6: NBa1UmmcofJztBL8pTAUTjZFH0k.roa (hash: 86hIGHbzSCBjbpNQmq5AwTHYQV5MFxXejgndiQ6r1LA=)
                          7: VO1QZo2vfxheLbeFL1rejYxNYBI.roa (hash: FCnZcb/OtfouViKRapPfAgcT5IF02/4Osl8N+1EzEnE=)
                          8: Wc2-UHBTfF-XHLzgQS0SwCmvlB0.roa (hash: 7aSWc04NFLdsEACjlaycXN0TGgVCRx18P8RZa+kCQIU=)
                          9: cUk9gF1NAvXhh8uQPdgOvohfLq4.roa (hash: kUG38NhhNKk78iTPsGRqnyUiXKkoTEwb6ImAUIs7EvU=)
                          10: eXcQTJbrXozTeKAzDqeuNqeJXS8.roa (hash: BgZU2yDI43+qdgAmRyguF06tz72w3j3d1e5R8Nv35Sw=)
                          11: h_wKw8soWFxgRuHS6A95s-ovjqU.roa (hash: c4ZYt7Tyz12qMO6YCVjf1T39qDV6z2Th7V8r47Jgtdg=)
                          12: m1zGjpaqVIfs0FT9TFYnVV0Yqug.roa (hash: 2qoTzI6foljMw6Ah++0pgV/FdR6MO3DvTBVmA5i5Ook=)
                          13: pVMgUdSHj0nlaCG6yBmxCGoOV48.roa (hash: iYu6/b1RnNkG7/TqQe3ysX2HEttIbsgucDRlivFMstY=)
                          14: udVjWjtCw8-mpprcmzafPsXqAEg.roa (hash: 4jYyql/ul3ChaZUGCo2qkL0DtI4tuS2kYKNXsqMrYh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:ef:87:3a:fe:d8:70:06:02:fa:df:1d:0b:e2:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
        Validity
            Not Before: Jun 28 13:01:29 2025 GMT
            Not After : Jun 29 13:01:29 2025 GMT
        Subject: CN=c4b8d669117221380bab73d9545d7de5c5c0707a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b5:0d:c0:11:13:b0:55:71:5f:04:81:c2:4f:
                    25:c0:b8:56:b6:67:87:24:fd:f8:93:d6:0a:a1:9a:
                    06:29:35:7f:0a:81:20:fd:00:c8:92:32:9a:c5:c4:
                    6d:7b:f9:4b:ed:fd:53:88:c3:90:b6:ce:23:31:03:
                    f2:03:d0:0c:44:dd:e2:24:60:d9:f8:cc:27:8d:72:
                    07:2d:9e:fc:87:9d:c9:ff:0d:df:8f:eb:d1:11:a4:
                    27:7a:b9:fb:89:d7:04:4b:ee:cc:16:6e:24:ac:17:
                    7d:e4:fc:24:76:27:d1:ee:52:e0:73:20:43:b7:92:
                    fe:8b:76:93:09:71:e8:01:13:82:a5:ce:55:cd:92:
                    e1:32:df:d1:e5:dc:27:f8:6c:18:50:17:48:10:27:
                    53:f0:f9:d3:c3:6c:80:01:90:97:26:8e:bc:e3:09:
                    23:aa:78:53:87:90:21:dc:0d:3f:30:d6:4d:15:2e:
                    cc:08:ff:d9:9c:26:71:23:14:2d:f7:ad:9a:2d:d8:
                    99:0a:c1:42:54:90:f2:50:0f:9e:1e:e6:cf:5a:36:
                    5b:1d:83:bd:b4:d3:16:cc:87:e8:06:55:36:6b:41:
                    63:bd:b7:0d:7c:5c:e1:d6:28:d6:a8:49:02:de:e7:
                    50:ce:f1:6d:eb:8e:98:17:c9:b6:a4:38:5f:05:bd:
                    96:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B8:D6:69:11:72:21:38:0B:AB:73:D9:54:5D:7D:E5:C5:C0:70:7A
            X509v3 Authority Key Identifier:
                keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a4:63:11:0e:61:43:6c:a6:43:7a:22:3e:8d:18:65:ef:cb:
         2c:f6:20:22:fa:d4:f6:9b:ec:80:e7:99:51:ff:ea:ea:45:ce:
         0f:1b:c7:34:39:3e:9e:91:a0:7e:88:e6:f6:39:bd:22:14:20:
         3f:e5:32:b2:bd:61:cc:af:7b:8c:e0:ff:0c:4c:81:7c:fe:7d:
         8f:77:86:ff:1e:d8:ee:a4:89:76:3f:ec:26:41:e0:51:d3:25:
         7a:f3:c3:19:1c:30:4c:e2:7e:fa:85:79:4b:1c:65:40:6b:a8:
         05:20:91:57:d7:a6:57:0e:e6:40:c9:2d:86:16:4f:e8:e9:79:
         0d:e8:38:0d:73:0f:02:60:87:45:34:b5:93:5e:bf:4b:de:fd:
         ec:07:43:20:96:fd:8f:d9:7f:06:4d:ac:a5:da:e7:41:53:92:
         61:10:16:e0:dd:9e:b3:84:fa:a9:25:3f:b9:05:fb:99:a5:a0:
         ab:c5:1b:50:be:e9:26:36:fc:46:e6:31:74:41:fd:15:bc:11:
         14:e2:96:6b:82:98:38:e3:d2:b1:64:7c:3b:8f:f0:30:c9:b5:
         e8:bf:49:9f:0f:e4:cb:74:7a:63:ff:0c:3f:59:bd:17:09:05:
         82:9b:04:38:37:af:b2:08:d4:59:5f:4c:46:48:e4:b5:53:4c:
         09:23:82:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:29 2025 by rpki-client