Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
File:                     RFJjMnSx2IapJ1f2UhnC51RuzfU.mft (raw, json)
Hash identifier:          E/vM9HplH4gpJMVouvmStZ6MPY2bvBy/yYE2ht11u3A=
Subject key identifier:   5D:67:52:92:79:28:99:49:C4:F3:AF:6C:92:5E:A3:0A:88:0A:A9:AB
Authority key identifier: 44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
Certificate issuer:       /CN=4452633274b1d886a92757f65219c2e7546ecdf5
Certificate serial:       0197B7B34F3E57D0685EF93F11A6A1C5D9F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
Manifest number:          1547
Signing time:             Sat 28 Jun 2025 18:01:11 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:11 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:11 +0000
Files and hashes:         1: 1-2BRV4sfO38uFELp8sV79L0B1lw.roa (hash: APyNfY72IzRC6P6hQGMuA+VkTRyCwcNbDRlCp4K0Vjw=)
                          2: RFJjMnSx2IapJ1f2UhnC51RuzfU.crl (hash: n1GuE80+Xccn34M5nBv7cigVndjk4OnMg5HMoGYj6H4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:4f:3e:57:d0:68:5e:f9:3f:11:a6:a1:c5:d9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4452633274b1d886a92757f65219c2e7546ecdf5
        Validity
            Not Before: Jun 28 18:01:11 2025 GMT
            Not After : Jun 29 18:01:11 2025 GMT
        Subject: CN=5d67529279289949c4f3af6c925ea30a880aa9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:2f:5b:e7:94:9d:cb:ea:a1:78:97:1a:0a:
                    53:b4:19:ca:14:fb:3d:a3:88:5d:46:78:7c:b2:46:
                    b4:01:af:9a:04:5c:cc:03:46:74:6b:bf:3a:f1:1d:
                    71:e6:3c:a4:bb:ab:bb:2c:d5:1b:3c:ba:75:c3:3f:
                    24:b5:d9:8a:04:be:4b:25:27:0c:9a:3b:e3:6e:45:
                    ad:bc:d3:54:33:d4:58:6c:24:0c:ac:22:82:6b:42:
                    6e:69:2d:14:4d:46:1b:ea:57:8e:cd:2c:14:ce:fd:
                    fb:ee:2e:1b:1f:c2:a2:12:ad:fe:3d:d0:ec:a5:17:
                    48:5f:84:1e:0e:b3:e6:56:be:43:3b:17:dc:db:5d:
                    9f:af:fa:ea:ff:09:9a:bc:14:b0:47:63:4d:db:02:
                    43:71:80:59:f6:f6:36:e3:91:6a:62:e3:08:37:ed:
                    ac:e0:33:a2:68:30:b3:aa:44:85:74:0a:8e:7b:4d:
                    aa:90:43:22:1a:39:58:a5:5b:f8:6b:24:ca:23:fd:
                    a5:d5:a5:c5:69:e0:68:a2:0e:fc:95:05:47:5e:ca:
                    49:0f:db:f5:62:dd:c8:13:84:37:1c:7a:65:16:93:
                    69:ba:a9:bf:52:d1:04:ba:c3:51:81:10:5e:9c:01:
                    d2:8a:f0:60:3b:11:db:69:51:11:ce:0d:17:fc:e7:
                    b1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:67:52:92:79:28:99:49:C4:F3:AF:6C:92:5E:A3:0A:88:0A:A9:AB
            X509v3 Authority Key Identifier:
                keyid:44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:49:f3:ce:96:16:6d:96:2c:72:e5:c7:96:75:d9:c6:e5:07:
         f7:ec:b7:70:a5:ee:56:ff:06:70:a2:c1:86:3a:12:06:0c:d7:
         81:fc:ee:86:8f:b0:08:05:a2:78:98:12:ee:7b:e1:8b:32:d1:
         68:04:8b:51:9a:a1:18:ab:89:43:c3:f4:0e:1b:20:17:b0:3f:
         fd:be:23:5b:07:3e:cc:86:2d:0c:db:dc:e8:4f:b6:63:4e:6f:
         a7:5c:2a:1d:cc:0d:f0:03:73:04:1a:35:a0:f5:c9:97:40:04:
         ba:f2:c3:0e:73:2a:55:31:8f:72:fe:80:0c:64:07:5f:88:ff:
         16:5c:d7:04:b0:cc:26:44:f5:69:db:bd:42:51:a0:db:cf:a0:
         bd:da:4e:9a:af:2b:eb:e9:ae:d5:65:67:07:df:8d:84:c5:06:
         73:6e:bf:a1:b1:c0:c3:6e:dc:95:83:15:47:5f:83:e7:15:06:
         22:77:3f:72:3d:0a:84:8e:1a:69:59:d6:35:ca:4f:6c:71:5d:
         5d:0b:20:72:c9:92:a8:24:02:e9:4c:e1:29:f3:c4:94:7f:f1:
         5f:da:06:12:86:fa:73:3e:5b:91:4e:3c:6d:33:1f:27:9c:e8:
         99:38:81:93:ed:70:07:8b:9c:e8:24:44:05:cb:9b:46:b9:da:
         27:b7:b8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:23 2025 by rpki-client