Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
File:                     FWKPn9qri4VJS8M4gJGhIrC7pcg.mft (raw, json)
Hash identifier:          KKbEGWQt6aWouxuvwIxQo9jP266Cuqm/ucPkuUeyAF0=
Subject key identifier:   CA:D9:0F:20:32:0E:68:B5:98:1D:55:28:31:59:F8:27:7E:D8:B2:2E
Authority key identifier: 15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
Certificate issuer:       /CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Certificate serial:       0197BAB44CD85C7D0B1EFF5CBB3EE5120FB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
Manifest number:          15B6
Signing time:             Sun 29 Jun 2025 08:01:07 +0000
Manifest this update:     Sun 29 Jun 2025 08:01:07 +0000
Manifest next update:     Mon 30 Jun 2025 08:01:07 +0000
Files and hashes:         1: 7ckiXqFCsl9Ii0LOr5UmFiqADBU.roa (hash: 9bGwX0kwTRRgIdjNNDlgMuEQgvhNB3ZWI22IbqLrXvk=)
                          2: FWKPn9qri4VJS8M4gJGhIrC7pcg.crl (hash: ODa2if9dU0SV7xU3n/YzE7U++LqdHO2BVIgaMTgjJ3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:b4:4c:d8:5c:7d:0b:1e:ff:5c:bb:3e:e5:12:0f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
        Validity
            Not Before: Jun 29 08:01:07 2025 GMT
            Not After : Jun 30 08:01:07 2025 GMT
        Subject: CN=cad90f20320e68b5981d55283159f8277ed8b22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cf:06:a6:5a:a4:62:8d:33:49:a3:91:f3:51:
                    07:21:4f:27:02:b4:dc:72:23:33:b8:57:18:82:b1:
                    92:f0:3e:b2:81:28:00:e5:15:15:ac:8d:03:66:0a:
                    1f:1d:e2:b5:08:b8:2f:40:bd:fb:d8:d5:cf:bd:07:
                    4e:f1:da:c5:00:d6:19:69:9d:01:71:ae:a4:1c:f5:
                    e7:6e:20:36:8f:91:f8:bb:5b:e7:74:8b:dc:80:0d:
                    fc:39:46:96:88:fd:d7:0c:11:ad:66:6b:f7:8a:fc:
                    f2:ea:03:80:0f:0e:42:1c:a1:14:6d:03:d7:68:b2:
                    91:1a:2e:f5:86:d4:2a:d0:f6:ba:b1:bc:41:64:65:
                    19:7f:3e:6f:f3:b2:1a:d8:ee:b2:cc:cb:bb:c7:6a:
                    ad:f7:0f:01:2f:c1:af:21:e9:90:01:bf:8a:f9:3d:
                    e5:d5:4e:1a:22:4e:27:2b:aa:cd:d6:01:fc:9d:db:
                    c3:2d:78:5f:28:46:c8:de:5f:de:17:40:bf:f2:b7:
                    de:6c:51:72:47:75:3e:0e:d6:10:57:05:e3:5d:f2:
                    14:7a:b8:cc:60:95:ec:29:8a:ca:dd:f7:bb:9c:5c:
                    9d:c0:e5:3c:fd:e8:1f:46:7a:12:5f:83:1d:91:51:
                    39:c6:1b:51:55:8a:e2:8e:3c:e7:26:f2:51:e6:17:
                    51:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D9:0F:20:32:0E:68:B5:98:1D:55:28:31:59:F8:27:7E:D8:B2:2E
            X509v3 Authority Key Identifier:
                keyid:15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6e:a1:1f:95:09:fd:3c:41:28:77:c7:f2:79:ca:93:19:09:
         df:7c:2a:ab:85:eb:ea:3f:7c:06:93:c0:2d:7f:19:b4:41:6a:
         60:19:60:b8:dc:fa:2c:9e:7a:b4:95:65:5c:35:78:4a:b3:b2:
         f5:a2:f3:96:df:57:72:f7:9a:89:b2:b2:c1:d5:b2:8a:61:33:
         b5:55:a9:4b:2f:9a:32:95:27:26:a3:e2:63:ee:92:38:5e:fc:
         bc:37:7b:90:0a:74:4e:b2:c0:8e:71:a8:90:bf:4d:e2:83:db:
         2b:0c:05:ae:a0:71:0d:3d:07:b0:47:78:b5:cc:7b:4a:9a:bd:
         76:9a:01:c8:a5:6e:61:11:66:61:7b:f7:f7:6a:ff:0c:d9:e3:
         1a:95:a5:35:1c:74:a2:44:24:c4:fc:82:b9:aa:fd:91:1a:4c:
         2e:0c:7a:14:2d:ef:e8:81:ae:1c:1c:9c:e2:46:cb:5e:1a:cc:
         4c:5e:b3:71:90:9f:c9:44:43:45:c6:f2:11:e4:8c:a0:d1:ae:
         83:24:09:00:3e:0f:51:ae:33:34:88:fd:77:ad:db:3c:05:05:
         f9:42:36:e1:d8:ea:b0:0a:34:56:5e:28:f4:f0:39:f2:68:8b:
         c6:34:85:b1:5a:e7:2f:78:14:79:3b:8c:28:5d:95:9f:9f:17:
         5d:88:82:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:27:28 2025 by rpki-client