Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
File:                     _Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft (raw, json)
Hash identifier:          rCBeAntZ3djgCVoBOc+mCS0qDCmyQGrDiuJ0Cdnn5R8=
Subject key identifier:   BC:79:BD:0F:4B:C9:11:E0:F7:97:71:C4:0F:1F:DD:89:59:DE:19:AA
Authority key identifier: FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6
Certificate issuer:       /CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
Certificate serial:       0197B70F39FD348BAF44820E24E9D38743A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
Manifest number:          1548
Signing time:             Sat 28 Jun 2025 15:01:57 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:57 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:57 +0000
Files and hashes:         1: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl (hash: Szv7OgBqugaPbvnfJu51h3nB74DlyvQgXE7n4chLv8U=)
                          2: c19V5yQN4hQJXG1HEKFTsTlUGYc.roa (hash: LxQCTalyFAq3yyk0zwyqgHCvSE1O+q8WDWzWwj0pBzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:39:fd:34:8b:af:44:82:0e:24:e9:d3:87:43:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
        Validity
            Not Before: Jun 28 15:01:57 2025 GMT
            Not After : Jun 29 15:01:57 2025 GMT
        Subject: CN=bc79bd0f4bc911e0f79771c40f1fdd8959de19aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:59:e4:38:18:12:96:4e:58:18:e6:6f:25:47:
                    73:8a:bb:6e:28:0c:43:55:c9:a2:aa:26:10:30:6e:
                    4c:62:3e:cb:e2:23:a3:cf:fa:2a:2d:8b:8c:d2:cd:
                    69:94:cc:09:c8:af:44:ce:9b:16:1c:24:e6:15:7d:
                    79:f0:64:ae:f2:71:47:49:ea:5d:34:80:b2:06:7d:
                    b2:c9:2b:58:e6:77:73:10:dc:2b:5f:29:d1:0d:f5:
                    9e:b7:3c:a8:ca:0b:4e:65:22:a5:fa:90:f1:09:73:
                    10:7d:88:3b:2d:10:b0:b2:24:81:15:8f:0e:d9:76:
                    e6:db:aa:3a:f1:ee:38:8a:1c:af:8f:73:50:9e:8f:
                    c9:02:af:22:bd:cc:66:2c:9d:ce:eb:cb:31:18:a7:
                    38:25:28:29:94:4a:33:6a:16:69:01:2f:aa:16:02:
                    49:f1:d8:7f:38:2f:6f:b1:bd:23:45:39:69:ee:b3:
                    5c:e1:b4:da:59:5a:b2:9e:1d:15:20:a8:ad:33:06:
                    d0:7e:c4:da:15:c6:94:e6:2b:1a:80:59:43:db:bc:
                    d8:f8:56:38:ea:b7:1e:8f:a4:29:c8:33:66:d3:5b:
                    8a:53:e4:1e:65:4a:56:98:d6:df:5f:0b:ff:3a:a3:
                    d2:51:cc:30:6b:54:80:06:cd:fc:3b:69:4f:0e:66:
                    37:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:79:BD:0F:4B:C9:11:E0:F7:97:71:C4:0F:1F:DD:89:59:DE:19:AA
            X509v3 Authority Key Identifier:
                keyid:FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:db:32:dd:c5:6b:03:c1:39:31:37:4a:ed:23:7e:e2:0b:06:
         3d:fc:96:e0:37:80:3f:7e:f2:f4:9f:62:0e:92:75:bd:06:6d:
         85:bd:b3:3e:8d:f9:49:94:65:07:6c:3c:e0:46:5e:24:0c:53:
         12:c6:6b:6e:24:5a:f5:9a:fa:e8:a1:4c:f3:ff:3c:3e:66:18:
         aa:44:29:6b:87:87:02:4c:09:dc:9a:77:a7:1a:39:7c:61:73:
         40:f5:c7:82:29:e7:50:16:70:7b:22:28:38:d6:bd:98:fb:4c:
         59:67:00:20:85:c0:df:df:cf:d9:32:82:36:24:73:e4:61:10:
         c2:99:41:41:d9:eb:0d:17:1e:6d:1e:87:ec:35:e2:33:b4:8b:
         b5:e5:4f:f7:f7:8a:84:b4:35:b6:49:b1:17:be:fd:d4:13:c6:
         16:76:fb:e2:bd:58:72:21:30:be:af:d0:14:3b:83:3b:23:ca:
         92:0e:8f:cb:69:ef:73:17:77:a3:a5:40:37:01:24:be:02:41:
         1b:f3:f9:02:bc:09:87:95:66:9b:69:5c:f3:a8:c2:3c:ed:9e:
         5c:69:34:b4:a2:76:4d:eb:6b:a8:36:b1:b8:74:30:0d:93:3a:
         eb:fe:5a:5d:1c:84:9a:0a:f5:1c:bf:63:23:99:15:d0:c9:e1:
         81:16:d2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:23 2025 by rpki-client