Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
File:                     p1f4f4bpOyXvTAQzZku-ctqY-_4.mft (raw, json)
Hash identifier:          J3ADuNO4x/y9ya6oqy88rqllvtt0RVqU9/MQ4MEHSxQ=
Subject key identifier:   FE:AA:53:88:53:42:83:8B:5E:AF:E1:E9:51:73:0F:3F:4C:F8:FF:50
Authority key identifier: A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE
Certificate issuer:       /CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe
Certificate serial:       0197B6A13AC1836D089B20A5095D740598E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
Manifest number:          03CC
Signing time:             Sat 28 Jun 2025 13:01:48 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:48 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:48 +0000
Files and hashes:         1: IZ6vDZjMHwfmvRBOdfcy5i9E3QM.roa (hash: uS025afpY/Jz9tEZKMABnGMw3AujzF5/XTw1sc/dgNo=)
                          2: p1f4f4bpOyXvTAQzZku-ctqY-_4.crl (hash: KhcJQhXkHcxtSdFxIbAhls3V1AYmIdVJSVDC/51Euv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:3a:c1:83:6d:08:9b:20:a5:09:5d:74:05:98:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe
        Validity
            Not Before: Jun 28 13:01:48 2025 GMT
            Not After : Jun 29 13:01:48 2025 GMT
        Subject: CN=feaa53885342838b5eafe1e951730f3f4cf8ff50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a7:8e:0a:47:9e:f3:9e:31:20:38:12:e5:10:
                    74:46:59:87:0c:e0:d9:ce:5a:b5:ab:3c:4e:c9:ce:
                    eb:89:02:5d:1f:b8:c1:8c:23:04:82:ed:46:d0:6c:
                    a8:5d:20:2c:32:31:62:29:e7:f3:fa:a0:f3:9b:07:
                    3f:7c:9d:82:63:e0:04:57:82:7d:85:a9:ec:bc:28:
                    9e:cc:f4:80:39:4a:cd:53:ab:0a:e3:59:84:34:54:
                    99:66:70:e0:4d:6c:7c:d5:9e:ae:9f:39:e1:df:ac:
                    67:b5:ac:7d:3f:77:53:f8:45:77:ba:15:1a:34:db:
                    20:ba:76:2a:82:4d:d5:5e:86:fc:40:38:35:8a:7b:
                    a5:3b:c5:49:a7:b6:e8:59:40:61:09:88:de:60:41:
                    2d:cc:9b:dc:1f:9f:1d:1f:b8:84:89:1b:97:51:c3:
                    8c:57:f9:5c:9b:06:74:21:bb:af:c0:90:ff:21:87:
                    9c:50:bc:a1:1f:a1:55:d1:b0:70:ac:80:13:a9:be:
                    5b:93:4a:06:b1:60:e4:a3:e7:e2:9b:81:1e:56:e9:
                    5a:11:01:21:1b:4d:ac:28:4c:be:36:a3:d1:bb:5d:
                    5b:ff:fd:8f:84:90:a9:b8:64:01:6d:fd:3a:1a:ef:
                    fd:6b:e7:55:0d:cb:62:7f:7f:97:80:d8:b3:42:fd:
                    23:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AA:53:88:53:42:83:8B:5E:AF:E1:E9:51:73:0F:3F:4C:F8:FF:50
            X509v3 Authority Key Identifier:
                keyid:A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:5c:f5:38:22:7b:16:3b:08:d0:34:d1:02:60:ed:72:21:d7:
         75:fa:90:af:d4:31:0d:a8:1f:02:d2:d2:fa:36:ae:8b:77:39:
         8f:54:fe:47:be:be:cd:7f:97:8f:b3:a1:7b:cb:00:8f:87:b6:
         f3:da:52:83:92:36:12:6c:4c:2d:78:81:19:93:61:5c:65:6c:
         ab:e8:a5:4a:56:51:94:d2:bf:78:88:54:34:2d:6d:13:3c:34:
         06:6b:99:b4:89:c0:be:07:36:15:d1:1e:c6:9e:24:dd:ad:65:
         fe:15:b1:57:08:56:31:78:6f:0d:5d:d6:2e:45:c4:5b:8e:c5:
         fe:79:6d:5c:b4:3e:bd:7c:c0:8b:28:2b:38:58:40:5d:84:82:
         f3:cf:0d:06:59:de:4a:ac:58:c9:30:05:29:3f:e3:cc:57:ae:
         57:ef:83:15:58:05:ca:7a:09:c8:31:56:1d:c0:93:04:70:3a:
         bf:3b:91:c1:35:46:d6:1d:68:6f:c8:2a:2c:b5:2a:72:6d:89:
         31:70:09:12:b5:1f:33:49:54:76:46:0c:01:b2:db:3e:b6:91:
         9d:7b:fd:3f:f0:a7:1e:07:d1:21:a9:fc:3d:99:6c:d9:c9:d3:
         28:24:c0:f0:4d:d8:b2:87:93:64:41:a6:df:10:7c:26:14:5c:
         84:16:d8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:31:54 2025 by rpki-client