Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
File:                     Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft (raw, json)
Hash identifier:          C1b0e65U4/2zb0qkdZsPcnBbTCRNDBWamXL7H8Gly7Q=
Subject key identifier:   C9:0C:94:7D:CF:C0:BB:D3:C6:78:F3:D0:1F:82:E1:8D:D9:A6:80:98
Authority key identifier: 0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
Certificate issuer:       /CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Certificate serial:       01974A7AC28A9333109FEB493782334CB999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
Manifest number:          09BC
Signing time:             Sat 07 Jun 2025 13:00:48 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:48 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:48 +0000
Files and hashes:         1: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl (hash: bwMyhjH5B7oSDcVOrzv0riO7WTmFkZoJ6D5nwvF0jHY=)
                          2: j5fTeizLnlg0u2Mo-sXKcy6aHzU.roa (hash: N7eKHafDgm+sPu3JQlpm/bB7Ce1uPT9byBM0H76oyj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:c2:8a:93:33:10:9f:eb:49:37:82:33:4c:b9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
        Validity
            Not Before: Jun  7 13:00:48 2025 GMT
            Not After : Jun  8 13:00:48 2025 GMT
        Subject: CN=c90c947dcfc0bbd3c678f3d01f82e18dd9a68098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:92:5d:63:e8:87:5a:94:7a:24:e3:51:7e:54:
                    2b:9a:ce:48:e2:a9:a0:ab:0e:79:8a:05:b0:b1:2f:
                    87:7d:cf:93:be:55:ed:f4:88:5c:1a:68:52:a7:51:
                    e3:af:5e:34:ec:f9:36:cd:b5:f0:ab:4a:01:ac:88:
                    4b:d2:30:dc:9a:6e:26:e4:c0:e1:10:50:09:5a:fb:
                    50:37:b4:8d:37:3c:db:ce:6c:f5:b5:bf:39:26:1b:
                    3f:a8:da:cb:0f:32:a2:fd:0e:36:54:ce:9c:41:ef:
                    1a:e8:e2:44:9e:21:3f:31:1c:dc:6f:2a:72:b0:04:
                    47:79:9c:4c:63:db:95:a5:94:fa:f2:0b:5d:43:27:
                    35:88:bb:d6:42:4e:9f:b6:84:c7:65:58:47:2e:da:
                    fd:fe:47:3d:26:d6:79:59:af:d7:e2:c2:92:64:4b:
                    dc:1f:4b:47:31:d5:49:13:71:14:76:17:4b:3d:c3:
                    82:85:d3:5f:d2:e5:1b:34:62:44:af:30:83:2d:fe:
                    ff:24:ce:21:62:6a:4d:e4:f2:8e:fe:23:c3:16:33:
                    ab:48:d8:a5:86:11:01:58:ad:10:fa:12:71:e0:8c:
                    a7:f0:ab:74:b2:8a:17:38:b6:cf:3d:f8:15:d4:f7:
                    b4:b1:a9:c2:60:9c:fe:14:69:63:4e:c2:bd:13:c4:
                    d1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0C:94:7D:CF:C0:BB:D3:C6:78:F3:D0:1F:82:E1:8D:D9:A6:80:98
            X509v3 Authority Key Identifier:
                keyid:0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:2c:1d:24:cd:3e:0f:cc:54:e1:44:cd:42:08:71:ae:23:2a:
         33:a0:fc:09:4a:84:34:90:19:b5:37:9c:ab:4c:6b:08:88:16:
         e1:72:51:66:8d:08:ba:1d:fc:70:83:13:04:a8:8d:fa:18:47:
         9d:cb:bb:2b:dd:26:e8:0b:50:ac:98:38:c6:69:fa:2c:a3:d1:
         c4:a3:8d:12:69:98:71:b6:bc:a4:72:f8:ff:b3:b7:c0:37:3c:
         79:ec:98:a8:89:1b:76:1b:ce:b4:4a:d9:4d:c5:cf:e4:42:cc:
         34:09:e6:c5:0a:55:4b:21:b8:63:b5:10:68:22:d8:9e:7e:39:
         9f:8e:2b:b3:2b:58:62:f3:5f:32:99:c6:2d:f1:b2:1c:8d:8f:
         e2:6f:07:13:64:78:b4:a3:08:a7:69:8f:2c:25:75:c9:5e:80:
         d0:f5:fa:9f:73:e5:db:1a:b5:b5:b1:76:39:3f:88:ac:f2:0e:
         cf:76:98:08:63:c2:0d:e2:3b:31:d2:c6:41:29:b8:e7:c2:6d:
         b8:f6:b6:89:96:6d:31:ea:ed:0e:a1:0e:94:83:80:b7:01:71:
         42:90:9c:e9:36:01:88:36:eb:ac:5f:6f:9a:62:1e:b2:8c:9c:
         d2:28:e1:ba:51:8f:25:73:07:bf:fb:fe:eb:f3:23:30:9f:94:
         4c:63:51:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:36 2025 by rpki-client