Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
File:                     f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft (raw, json)
Hash identifier:          c2JxJZiDEsDacgVRUK/SYA4sW1QRVLFR2o8KZEVove8=
Subject key identifier:   81:CC:5F:C4:1F:B2:A3:AD:FB:DA:2F:ED:3B:38:2C:06:6D:7E:77:A6
Authority key identifier: 7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8
Certificate issuer:       /CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
Certificate serial:       01974A0C9756B4C3AC11533CFDB57EF8D578
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
Manifest number:          150E
Signing time:             Sat 07 Jun 2025 11:00:28 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:28 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:28 +0000
Files and hashes:         1: ZbCuBvhm3WPg8vIgNTz5bN7GnM0.roa (hash: geQ1HtbnOZqLyTn8wKAlnJdK10ztk7Vg8HhapzU1X2M=)
                          2: f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl (hash: 1TXLzQc4pLsLJzNOKkkBPy5YY4PftP8FNvZBCAnR5nQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:97:56:b4:c3:ac:11:53:3c:fd:b5:7e:f8:d5:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
        Validity
            Not Before: Jun  7 11:00:28 2025 GMT
            Not After : Jun  8 11:00:28 2025 GMT
        Subject: CN=81cc5fc41fb2a3adfbda2fed3b382c066d7e77a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ef:c5:02:57:00:42:20:c4:d9:21:e7:6a:78:
                    be:3c:a9:16:5d:b6:56:ef:42:08:ef:0a:f6:28:e2:
                    65:e9:33:2d:1a:bf:3a:3e:87:1c:14:27:79:ac:c6:
                    78:3b:63:5b:6a:29:77:6c:59:7e:b2:21:c5:95:e9:
                    9e:6a:04:01:e6:91:a6:94:7f:e0:eb:9e:9e:c9:1c:
                    38:f1:40:c8:0b:8b:9d:23:cd:56:02:75:9b:d8:b0:
                    d3:d4:e2:18:e8:c5:30:27:14:0b:b6:53:d5:ab:e0:
                    ee:b0:4a:26:7a:fc:6c:cf:37:98:c2:39:f3:69:ef:
                    a0:1a:ed:54:0a:0c:73:1a:08:1e:aa:6f:b6:1b:fb:
                    61:0b:ef:43:65:06:24:b3:e5:f4:bd:73:47:97:a3:
                    b0:80:3f:c9:91:e5:f3:17:7e:dc:24:b8:c5:d5:a9:
                    76:31:6f:6f:c6:74:01:6f:36:3d:a1:9b:49:cf:66:
                    19:02:59:26:ec:66:2e:dd:70:06:26:0d:66:0a:be:
                    ea:6c:fb:78:7e:f5:10:a4:d3:d8:e2:30:7e:f6:a4:
                    e3:2a:23:97:df:1f:a4:39:0d:94:c2:78:ca:74:a7:
                    f0:c6:c3:46:08:7a:7c:38:49:6e:15:63:e1:85:4b:
                    81:e3:f8:7d:81:77:b9:8d:cb:73:4c:cd:0f:5d:2d:
                    de:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CC:5F:C4:1F:B2:A3:AD:FB:DA:2F:ED:3B:38:2C:06:6D:7E:77:A6
            X509v3 Authority Key Identifier:
                keyid:7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:28:d8:32:06:d5:c6:2e:ff:d5:b1:fa:03:91:7f:f2:18:f5:
         e6:6d:d0:41:2e:c7:53:1f:c6:60:ac:47:1b:71:9e:59:42:6a:
         db:40:23:2d:f7:f6:4d:47:59:11:cf:94:c5:6c:ba:8f:60:d8:
         db:99:30:40:f3:c3:03:b3:47:53:21:c1:05:af:44:d0:96:ab:
         40:27:a0:70:72:05:8b:35:10:aa:fb:f1:f0:84:03:47:47:66:
         b0:fa:cb:b9:dc:47:74:87:21:4a:13:85:2f:80:c0:c0:7a:52:
         3c:0d:0e:60:9d:32:20:3b:83:e5:71:8b:1f:97:05:ea:28:da:
         c5:fe:20:5f:ce:04:12:88:03:0b:81:1b:b6:99:66:7b:3f:fa:
         89:84:04:1b:6d:10:6d:f4:26:cc:20:c5:05:3d:03:69:2b:5a:
         07:eb:fb:9b:6b:38:40:b3:27:8c:70:bb:2b:d9:00:c2:30:09:
         55:b8:c7:ce:67:1c:77:84:d9:63:66:2b:9d:c6:73:b4:ea:1a:
         da:1f:23:fe:3f:bf:5f:44:57:f0:c4:40:0a:88:e0:8a:f7:4c:
         bb:e4:a6:38:55:f6:80:a0:45:9d:fe:1c:de:e3:96:7d:4d:8a:
         27:a8:02:9d:ef:5d:e6:66:7b:72:60:92:42:ea:76:b4:ee:40:
         9a:b0:c2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:28:12 2025 by rpki-client