Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft
File:                     fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft (raw, json)
Hash identifier:          nSfXxFYyYi+BEvoxOP70qKJgj4D1D42G2rV1Nf2mcLE=
Subject key identifier:   8B:B3:DA:06:60:70:48:51:42:C9:37:CD:E4:9B:0E:A0:F2:E1:49:E8
Authority key identifier: 7E:2C:0C:CF:1F:FB:FC:DB:8B:61:D7:38:20:13:01:B8:79:11:84:E8
Certificate issuer:       /CN=7e2c0ccf1ffbfcdb8b61d738201301b8791184e8
Certificate serial:       0197C34992E999FD860E27DB2023FE59DA56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft
Manifest number:          15C1
Signing time:             Tue 01 Jul 2025 00:01:08 +0000
Manifest this update:     Tue 01 Jul 2025 00:01:08 +0000
Manifest next update:     Wed 02 Jul 2025 00:01:08 +0000
Files and hashes:         1: _YypdYwNnlrSxn7Xk5pVVLuYXRI.roa (hash: UMpoA6QJ7yrchwDrkwz1jDoIaBrnsc3wqSmOPTPFUrQ=)
                          2: fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl (hash: d75w/QD5CMIjvOwzFGHvMvSGWNX1ezksd+rYFcBDo3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c3:49:92:e9:99:fd:86:0e:27:db:20:23:fe:59:da:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2c0ccf1ffbfcdb8b61d738201301b8791184e8
        Validity
            Not Before: Jul  1 00:01:08 2025 GMT
            Not After : Jul  2 00:01:08 2025 GMT
        Subject: CN=8bb3da066070485142c937cde49b0ea0f2e149e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b3:1f:3f:0e:42:2c:65:95:36:65:58:b1:32:
                    fb:3f:1c:a8:86:2f:f8:ea:43:3f:b3:35:ba:bc:0d:
                    58:1d:b9:e8:16:a3:3a:5b:d1:8d:f9:db:5b:6e:39:
                    0c:be:c6:80:11:90:45:ce:38:48:aa:66:fa:9e:83:
                    0d:a9:e4:23:b1:43:c5:b7:be:57:d2:7c:cc:08:f7:
                    c5:66:da:34:03:89:04:6d:8f:4e:3e:0a:87:35:83:
                    3c:ff:e4:a4:9d:58:9d:4e:0f:b0:c0:1c:36:46:2d:
                    85:0e:c3:68:23:e0:c0:b8:06:f8:82:a3:b8:c3:60:
                    9d:8b:cb:6f:83:8b:14:aa:91:21:f1:05:ee:eb:e9:
                    e6:a9:07:b8:2a:de:d6:ae:e7:c0:ac:5f:79:c1:d0:
                    da:29:0f:72:bb:b8:3d:bf:c8:5c:3e:6d:c9:ba:25:
                    85:45:c3:0d:81:fb:56:e5:09:f8:66:53:bd:3b:6d:
                    36:dd:f2:e9:e8:b0:68:93:ae:5a:50:f6:df:61:ad:
                    e7:e2:82:67:51:d2:f9:25:1c:b2:e8:88:62:fe:79:
                    fb:66:5e:81:0b:07:ae:64:68:c6:63:d4:84:a3:47:
                    dd:f6:5f:ab:1e:2d:7b:9d:44:13:f4:0f:b7:16:eb:
                    22:b3:3a:b0:83:65:ee:2e:01:de:b0:27:aa:42:af:
                    fe:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B3:DA:06:60:70:48:51:42:C9:37:CD:E4:9B:0E:A0:F2:E1:49:E8
            X509v3 Authority Key Identifier:
                keyid:7E:2C:0C:CF:1F:FB:FC:DB:8B:61:D7:38:20:13:01:B8:79:11:84:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:5c:39:cf:f3:be:f3:bc:51:d1:ff:05:e4:cc:be:0f:08:a5:
         23:99:97:6c:d2:1e:8a:7a:8b:07:2c:cb:9d:4c:b4:2a:56:3c:
         3b:18:92:f2:c7:45:8b:5b:a1:41:01:9a:19:4f:3f:f9:ed:be:
         7d:a7:1c:0d:da:4b:b3:44:9d:95:1d:89:19:e3:87:e0:3e:75:
         73:2d:90:31:c4:8e:61:f8:0c:76:ce:dd:6b:4c:7b:e6:c7:f9:
         ee:64:f9:1f:ac:4a:21:b4:5c:88:98:5e:29:e0:b1:d4:83:b3:
         a3:b6:dc:07:2c:b8:de:fa:b9:fb:1c:f4:16:b9:60:f4:6f:a8:
         88:fa:07:d1:d0:51:48:27:84:5d:b4:0e:51:54:66:fc:ea:19:
         cc:d0:8e:47:1f:26:c2:bb:9d:7c:f8:1d:fc:c2:8f:ab:87:c4:
         22:06:60:11:ae:c0:df:e6:da:4f:ec:30:51:3a:8f:ad:87:e3:
         c1:7e:cc:e5:95:2c:0f:d0:89:78:91:e9:b0:ec:7a:f2:8e:6e:
         79:f9:79:a2:b9:e3:1f:ca:7d:3f:2e:a9:6e:b8:62:18:9b:68:
         76:31:61:7e:7b:c9:31:aa:5c:7f:47:58:e0:34:78:82:a5:fe:
         55:b9:7b:d4:e8:c0:3e:d4:a8:10:4c:84:cd:ef:9c:03:7c:46:
         30:21:4e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:44:34 2025 by rpki-client