Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
File:                     FT8kGD1slRhZGTSebpJTNzZDe5Q.mft (raw, json)
Hash identifier:          S9iKPrXDFCn2VcHiZR7BxOjEYRZtnIXJUhzlduvseTw=
Subject key identifier:   40:EB:7F:4F:EE:33:25:40:08:22:E8:EA:14:6C:32:1C:34:6F:A0:26
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Certificate issuer:       /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial:       0197B6326583EFD25AE8EB7324C5670DB96F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
Manifest number:          06AF
Signing time:             Sat 28 Jun 2025 11:00:45 +0000
Manifest this update:     Sat 28 Jun 2025 11:00:45 +0000
Manifest next update:     Sun 29 Jun 2025 11:00:45 +0000
Files and hashes:         1: 02srA_dodlsqHDgp--vASVvWX9E.roa (hash: lJ1KGWWna7XFX1YELq/QOjPK38+hDLl/0ZeJxdIW2VA=)
                          2: FT8kGD1slRhZGTSebpJTNzZDe5Q.crl (hash: 9VRb1STidR1WKarrr4r7xTHBwmy42wSW5WZ/RMiGbO8=)
                          3: MBq9_d6LT2vyQzQfNudTMEVPC5w.roa (hash: md4P7geg1tPk/NRWigzWi02Y2+T+SaZ3+I/C1pIam5U=)
                          4: w6nyjw8CCPdGWE2r0om0qvXFyXo.roa (hash: 1O15ZgeKf2Rbzxb6TQY0MNC2RDhbgVcfZUfdxbDgya4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:65:83:ef:d2:5a:e8:eb:73:24:c5:67:0d:b9:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153f24183d6c95185919349e6e92533736437b94
        Validity
            Not Before: Jun 28 11:00:45 2025 GMT
            Not After : Jun 29 11:00:45 2025 GMT
        Subject: CN=40eb7f4fee3325400822e8ea146c321c346fa026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:06:92:b2:0c:7b:40:a1:0c:b9:e9:4f:f8:db:
                    61:6c:ab:e8:da:37:f1:3f:da:cc:b5:c5:76:76:cf:
                    31:e6:89:d8:29:56:b2:77:03:d2:f6:63:98:4a:55:
                    52:d9:70:4d:87:b2:2c:9b:ee:4c:fd:38:9e:38:0a:
                    81:ec:e3:8d:f7:f2:19:d4:b5:45:6f:45:61:93:b8:
                    f5:23:30:27:1a:90:30:5a:6c:b4:da:6c:ad:b0:c8:
                    ca:5f:af:2e:3c:cc:11:9a:f8:38:a5:fe:15:33:eb:
                    3b:98:11:ca:c5:52:f6:24:34:91:d6:9c:13:9c:3c:
                    fe:fd:90:ee:9b:cc:d9:7c:b1:e0:5b:01:7c:e7:39:
                    83:58:d3:ba:92:fe:23:5e:34:b1:27:10:cd:b0:81:
                    76:a6:98:0c:e7:27:99:3a:58:8b:22:fa:e2:46:96:
                    e9:65:23:a9:31:0f:98:46:b2:30:00:7d:61:99:d5:
                    90:30:60:8e:55:f1:26:1f:34:31:37:81:3a:ca:31:
                    d5:44:3b:07:05:05:87:0d:34:40:66:05:3f:a4:38:
                    7e:97:76:42:4e:85:c8:4a:e7:66:1e:94:4b:46:e8:
                    1a:62:1c:a8:78:4f:15:fc:d8:ef:36:7a:e1:93:cd:
                    af:91:d6:07:dc:3d:68:9a:a6:2e:c3:67:22:3e:40:
                    b3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EB:7F:4F:EE:33:25:40:08:22:E8:EA:14:6C:32:1C:34:6F:A0:26
            X509v3 Authority Key Identifier:
                keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:bd:53:51:df:ef:73:b8:47:a0:ac:5c:9d:2a:62:3b:5d:2e:
         84:44:80:06:df:dd:cf:78:8c:bc:09:32:8a:7d:54:af:a5:4d:
         0f:a2:d5:33:ba:46:9e:34:70:37:3b:46:9f:74:fd:10:22:4c:
         f2:10:46:ba:58:ec:17:be:e6:04:f6:fa:9e:78:92:81:e1:ad:
         66:f4:84:6a:28:2e:e8:0b:fa:9e:07:cf:83:70:3b:c1:d5:af:
         f7:a6:cb:7e:bd:cd:52:f0:c2:b5:2e:98:e4:9a:9e:41:03:18:
         59:59:23:16:9b:02:8f:be:cb:00:5a:c3:fc:90:9a:3c:26:cb:
         1b:1c:75:c7:a2:6c:f4:7f:0f:6b:ea:61:13:09:d7:cf:b4:c9:
         73:63:dc:6f:6d:4d:3b:4c:c0:f8:b2:71:ef:5b:ab:0e:52:b5:
         f6:92:62:d6:00:2e:e9:0e:34:a2:1c:ec:2d:b7:e1:ba:ee:c6:
         f1:cd:1d:c9:c9:1b:c1:56:dc:fb:b0:36:7d:46:6f:d0:f8:25:
         cd:98:46:fe:d6:ff:15:a3:ba:f7:b7:06:f8:b4:0e:04:6f:d5:
         e9:b8:c6:5f:bf:b7:16:b3:5c:6f:91:d9:5b:1f:11:3a:e4:10:
         15:0b:e9:d4:20:34:8b:40:4a:91:5c:a9:52:a6:c4:58:5f:22:
         6a:ae:7a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:29 2025 by rpki-client