Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
File:                     ccFpDvV6_P-uc725k0MJ-LcOu2E.mft (raw, json)
Hash identifier:          672CYd1PcR31nDtwBHYUdwUWY4SHBhPUFRZEK7ka9WU=
Subject key identifier:   49:C1:15:1B:AC:A9:82:8A:3B:02:D5:DB:47:27:C8:1A:00:BA:CB:97
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Certificate issuer:       /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial:       0197C492D21D553F2F57EA347EC07580EC45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
Manifest number:          1510
Signing time:             Tue 01 Jul 2025 06:00:45 +0000
Manifest this update:     Tue 01 Jul 2025 06:00:45 +0000
Manifest next update:     Wed 02 Jul 2025 06:00:45 +0000
Files and hashes:         1: T2Ms0IsK2hwIWCpu2VyNXMVfGqg.roa (hash: I5IAteZyEq5YzDFXdNGjAqCsBN2dhyO1KERPjxCLefk=)
                          2: ccFpDvV6_P-uc725k0MJ-LcOu2E.crl (hash: YKtBbmzCAoZY459c41F1hOheXmfrhbG2/gMgOxukRkI=)
                          3: gIUgoRTyJmRfCQYS7uklAVhDlWU.roa (hash: K7KWFvQ91COOPs2G9/YPr+v2xa3Bl9m3cSR+0EKlTlQ=)
                          4: ghc4MPH3vTiYP5rga0h6BtqPh6A.roa (hash: +n/mGZaNW3qMvM/6+1HZZ0mUd3q3k/RCYwms9UGlFSw=)
                          5: h8NM3QNMAy3JQUb-72WEZdGpGjA.roa (hash: Lxvl2etM6iQ3TxJnQc+Uy0mpsnRIUxQq3ad2YMjelB0=)
                          6: rWTlkbZNrrsZjKWZTJP_rkzWTv0.roa (hash: OOrIatFR59tEQa9JkYCnHVEOWGvvetBIFgDhOWDZNAQ=)
                          7: v0zBDXFOccttRX2cT7fDoONDswQ.roa (hash: 4vPi5VK0C1d8kjVecT9rugkIfwxa9eC7Ww52TXS0hqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 06:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c4:92:d2:1d:55:3f:2f:57:ea:34:7e:c0:75:80:ec:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
        Validity
            Not Before: Jul  1 06:00:45 2025 GMT
            Not After : Jul  2 06:00:45 2025 GMT
        Subject: CN=49c1151baca9828a3b02d5db4727c81a00bacb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4e:d8:e0:f8:bc:a6:51:79:26:18:06:91:9a:
                    1b:b2:14:75:73:7c:3d:e9:9e:ed:e5:ea:1a:dd:61:
                    3d:ad:ae:9f:c3:e6:48:31:18:7a:d2:60:07:44:8f:
                    c1:8e:c7:1f:5a:8e:58:bb:cd:0f:83:7e:96:89:83:
                    98:74:33:f5:28:de:75:f5:66:41:3f:3f:b9:af:89:
                    1d:ff:1a:8b:30:25:f9:f4:08:d6:ba:8e:4b:19:29:
                    95:a8:bf:46:0a:b6:52:8f:be:97:f3:4a:0a:24:8c:
                    5b:c3:fe:b7:09:9b:f9:14:66:d6:c8:51:1e:65:f5:
                    6f:10:5f:a6:14:6c:21:42:93:c4:6f:50:0e:b6:34:
                    dd:c1:5d:6d:45:cc:db:ba:23:7f:b7:66:c0:55:5a:
                    e1:64:62:17:26:78:78:28:1c:22:3f:c7:91:8d:b0:
                    47:ed:a6:7c:44:8a:43:b8:3d:7d:6f:9f:1f:f6:61:
                    55:59:73:f1:ce:fb:90:f0:7d:30:47:a3:cf:1f:e5:
                    0e:0d:08:35:36:c0:c2:1d:11:df:bc:7b:92:f8:de:
                    0a:11:4c:97:da:8c:2f:c7:17:1a:0a:d1:bf:98:a5:
                    ed:5c:50:cb:2c:ad:23:70:36:a4:02:fb:55:49:70:
                    f1:39:ba:d3:0d:80:53:21:da:5d:87:d5:ea:fa:1f:
                    b6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C1:15:1B:AC:A9:82:8A:3B:02:D5:DB:47:27:C8:1A:00:BA:CB:97
            X509v3 Authority Key Identifier:
                keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:7a:ce:92:0f:68:d5:8a:79:cb:8c:b8:2a:29:36:3d:67:62:
         4e:1e:57:67:14:52:87:ef:8d:f7:a2:9e:74:41:33:9c:a0:84:
         af:d4:3f:9c:f8:5a:e0:d7:6d:ba:38:1a:11:aa:35:6e:1f:18:
         21:e9:37:8b:02:5c:27:e3:ea:84:55:5a:a2:84:7d:75:94:ab:
         47:b9:02:d7:37:29:12:0d:52:9a:b5:2a:05:8b:9d:71:2a:a7:
         7b:88:a3:fc:56:0a:a0:e8:58:f8:e9:8b:0f:37:9d:d5:44:a5:
         3e:d2:45:41:8e:93:fb:13:5b:6b:0e:7e:e9:09:b3:e9:50:ce:
         4c:e9:57:99:8e:c8:ba:95:0d:94:54:54:df:8d:5b:db:93:97:
         1c:58:e7:f5:be:ad:58:e7:ad:1b:c0:04:45:51:56:1b:ef:54:
         88:20:d3:5c:46:41:37:95:49:72:15:44:7b:ba:41:a2:ed:d8:
         ad:63:42:c5:af:88:44:bf:8c:9f:b8:1a:27:17:0e:99:de:47:
         28:a2:b8:6f:d0:bb:c6:c6:05:9f:ce:65:6c:74:04:10:78:4b:
         63:b9:34:3d:e2:16:99:4d:e9:70:63:3d:06:9d:25:fb:6f:23:
         51:43:b1:50:13:0b:95:1e:95:e0:40:d3:87:64:47:05:bc:95:
         dd:f6:db:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:35:43 2025 by rpki-client