Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
File:                     Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json)
Hash identifier:          vkq0mPla6khltOHoBUqr94zBtAb+q0zbURpKy9sKwg4=
Subject key identifier:   60:D4:7A:D2:F5:14:D4:AF:AD:F7:52:98:EF:13:4D:3C:28:84:DF:5A
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Certificate issuer:       /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial:       0197639550D83CBA1CAAEA9E1CEB3BE2CFF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
Manifest number:          0D01
Signing time:             Thu 12 Jun 2025 10:00:19 +0000
Manifest this update:     Thu 12 Jun 2025 10:00:19 +0000
Manifest next update:     Fri 13 Jun 2025 10:00:19 +0000
Files and hashes:         1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: jvGVh260wEkLvj2w+VziMvFDE7/V4v83JddF7z7Jz2w=)
                          2: u2KSOkA9Tk7vaFv7OCby2G46AIs.roa (hash: QpVj8Qnda9R0uaJPbddZ05OYdtwL9DiuDJMuscNQj0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 10:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:63:95:50:d8:3c:ba:1c:aa:ea:9e:1c:eb:3b:e2:cf:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
        Validity
            Not Before: Jun 12 10:00:19 2025 GMT
            Not After : Jun 13 10:00:19 2025 GMT
        Subject: CN=60d47ad2f514d4afadf75298ef134d3c2884df5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9b:ce:54:8d:ce:9c:65:68:66:44:24:26:56:
                    29:06:b9:ef:0c:0a:c2:58:a4:14:99:7d:00:65:b9:
                    7b:27:8f:4f:40:23:ca:bc:25:ce:7e:50:dc:d1:b6:
                    d4:1d:51:19:e7:5e:9f:2d:ea:2f:25:17:2e:42:0c:
                    77:f4:54:be:57:33:30:3a:80:f7:dc:6f:ba:ee:e3:
                    f9:e3:b8:00:c6:94:8b:e6:9a:94:67:2f:d5:15:fb:
                    8f:1d:c0:aa:7b:04:a7:f2:a3:31:df:fe:9b:78:50:
                    dc:5a:a9:4a:ad:65:3a:b2:e0:77:b6:74:47:4a:10:
                    d9:08:87:46:81:84:5b:ca:be:c7:87:67:9d:f8:30:
                    a9:32:02:fd:2d:5f:48:66:a4:49:69:92:c3:bd:f7:
                    57:67:6d:d9:69:ee:f7:9b:0a:e4:fd:89:3d:21:09:
                    c5:b8:df:cf:6a:96:6b:f0:ca:3a:72:06:61:d3:f7:
                    1d:72:8b:7a:bf:b4:c2:32:3e:ea:61:fe:04:d4:ff:
                    cd:dd:78:63:b2:33:02:c3:df:4e:15:d1:25:bc:be:
                    1d:89:31:39:5a:bc:86:6c:22:2e:e1:9a:16:93:ce:
                    b3:f4:0c:8d:90:1c:88:64:c2:1d:e7:98:4a:3f:5b:
                    2b:14:43:7a:26:24:3a:7d:2a:e1:92:85:e9:b3:23:
                    90:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D4:7A:D2:F5:14:D4:AF:AD:F7:52:98:EF:13:4D:3C:28:84:DF:5A
            X509v3 Authority Key Identifier:
                keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:64:c1:9c:31:b6:f7:bb:c5:6a:7d:85:2d:dc:0f:25:cd:f3:
         cf:09:c2:44:83:3f:f4:ba:d0:b1:1f:52:46:0d:87:b7:69:8a:
         93:7d:85:36:df:6f:35:a3:68:a5:7b:86:43:f8:72:05:bc:fe:
         18:58:30:43:ef:ac:d8:96:18:25:27:70:e0:68:7b:35:18:f8:
         3a:52:b0:37:6e:b6:f1:c8:86:b2:6e:0c:02:ba:40:48:72:a7:
         db:83:a6:6d:20:9b:30:c1:85:06:c9:ca:19:f1:13:7e:1a:e1:
         c7:f6:fb:eb:28:42:8f:59:73:43:0c:0a:51:36:fd:98:de:09:
         a6:f4:13:ff:56:08:28:53:c6:84:8b:88:cf:79:99:19:53:12:
         f7:78:f0:7a:40:77:d6:73:39:19:93:35:02:78:4e:8d:ef:1d:
         ce:fe:5b:8b:0a:1b:bb:7b:8c:fe:ed:4c:25:8a:2e:11:df:52:
         5e:5b:a7:f9:da:50:ee:c8:1f:45:06:b6:d6:1d:95:bd:63:61:
         d2:c6:5f:30:69:ae:0d:b3:9a:4e:03:6d:5a:e9:34:a8:07:f8:
         bf:55:08:94:48:a4:88:87:1a:94:5a:9f:32:88:0e:b5:c4:19:
         91:a1:54:ed:af:4e:06:65:7e:9e:36:e2:a6:cd:d3:7c:73:10:
         df:3c:81:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:53:46 2025 by rpki-client