Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
File:                     FJD8Fzgt1gZqOOQjutstihjRwEU.mft (raw, json)
Hash identifier:          GGaBerKIXDqkwUB1EV6s2DXJcPhVdgzwLJMCxHwvxZ4=
Subject key identifier:   77:68:6A:40:95:3D:06:D7:F6:2B:75:1F:8F:57:85:98:73:C5:4A:4E
Authority key identifier: 14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
Certificate issuer:       /CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Certificate serial:       0197BA7D021F6AA850C2B196DC7ADC09765F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
Manifest number:          1339
Signing time:             Sun 29 Jun 2025 07:00:44 +0000
Manifest this update:     Sun 29 Jun 2025 07:00:44 +0000
Manifest next update:     Mon 30 Jun 2025 07:00:44 +0000
Files and hashes:         1: FJD8Fzgt1gZqOOQjutstihjRwEU.crl (hash: +UKcHbz1GoHO6AZy5x0tm0zOVpxeEWGDAMFQQTwUAvo=)
                          2: GBpd_CXuB-9kNsxFo6gk--Reihk.roa (hash: g01Wtwi7iT3bkjePjiBnddon67j1RhvdGQsrObyK/EU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 07:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:7d:02:1f:6a:a8:50:c2:b1:96:dc:7a:dc:09:76:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1490fc17382dd6066a38e423badb2d8a18d1c045
        Validity
            Not Before: Jun 29 07:00:44 2025 GMT
            Not After : Jun 30 07:00:44 2025 GMT
        Subject: CN=77686a40953d06d7f62b751f8f57859873c54a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fe:e5:48:3f:97:e1:4e:16:04:96:1d:a5:a6:
                    21:33:86:e5:fc:a0:92:25:e9:3f:55:9c:b1:53:dc:
                    83:21:83:06:a9:90:e1:76:8d:32:a6:e7:f8:70:a6:
                    f6:6a:8e:27:97:b2:59:d5:f6:b4:22:54:4a:70:15:
                    41:d4:39:2c:86:bb:ad:5e:57:64:0d:c0:5a:29:29:
                    76:71:e2:50:96:c3:87:87:59:3e:d4:d6:08:2e:4c:
                    f8:09:1c:3d:89:0d:05:cd:15:3c:9a:19:fc:12:05:
                    6a:ba:ca:81:a0:a0:ff:65:36:97:0e:e1:fc:a1:74:
                    03:09:cf:01:bb:a8:48:a1:42:dd:c3:c7:dc:0e:aa:
                    97:16:cd:43:e7:ad:60:4b:e3:6e:a0:a4:38:b7:c7:
                    c2:b0:35:3d:d6:4f:0c:7b:25:2b:ba:d1:02:20:ba:
                    05:60:a7:da:8d:ec:91:c8:1d:54:04:ac:c6:9c:a4:
                    65:cb:e4:6b:08:61:8b:33:92:c1:4c:44:07:30:6d:
                    14:6e:c9:b4:1a:1c:19:7e:97:5f:86:fb:c7:f1:aa:
                    9c:e8:4d:f4:5c:fc:e8:7d:53:4f:79:0a:c5:fa:3a:
                    76:85:85:30:f1:af:6f:b8:ad:ff:3e:69:69:4c:fd:
                    9c:a3:8a:6b:45:e3:31:af:11:eb:c0:29:6e:51:f7:
                    e6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:68:6A:40:95:3D:06:D7:F6:2B:75:1F:8F:57:85:98:73:C5:4A:4E
            X509v3 Authority Key Identifier:
                keyid:14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b2:c6:8c:73:98:ce:2e:7a:5e:2b:fb:57:87:dd:b4:69:e7:
         b0:e1:8f:c4:58:f8:e2:07:53:d8:71:cd:01:62:2f:52:99:56:
         29:bd:eb:42:a2:32:02:49:3d:23:65:61:37:d6:8f:cb:3b:03:
         6d:83:a6:c8:94:60:1f:fd:67:a7:92:1b:65:f6:18:0f:80:05:
         dc:b6:89:34:b1:f5:64:4f:8d:d9:1d:21:4a:8e:ee:f0:70:f0:
         2b:a9:20:4c:75:f3:22:3e:61:19:ca:60:14:08:7d:cc:45:55:
         3e:7d:bf:47:a7:38:23:02:7d:85:5b:79:f4:e7:8e:4c:04:59:
         72:46:c8:d2:74:83:91:a7:03:e1:67:de:53:3a:31:71:28:d7:
         8a:a2:fb:1d:07:c5:ce:fa:dc:7d:91:cd:e0:50:50:4a:50:7b:
         4a:49:42:c9:8e:12:8a:45:8f:1f:e8:67:69:8d:e9:9f:ab:b4:
         a8:ef:8c:33:e2:eb:c8:fd:ba:74:e7:34:f6:c6:c2:90:bc:49:
         90:3c:1a:34:b8:b7:c0:3c:8c:36:de:45:6a:cc:66:77:d1:c6:
         63:17:54:78:b2:22:1b:a7:2e:b0:16:04:20:52:68:05:80:49:
         69:5b:16:24:58:9f:62:d6:cb:c1:fc:cb:cd:ca:68:40:ac:28:
         82:92:b5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:48:51 2025 by rpki-client