Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
File:                     05EjiA9CdEbV_wfO-WM-htxJGY0.mft (raw, json)
Hash identifier:          6pqjpURIMlCz5VM6tfu49Ypmw4Ty2jsSYuxKCPhyoXA=
Subject key identifier:   FB:77:C8:92:C4:C3:06:8C:E8:22:73:A4:C4:9F:92:0C:F5:20:6F:52
Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
Certificate issuer:       /CN=d39123880f427446d5ff07cef9633e86dc49198d
Certificate serial:       01975C4A8093B0E897DA3D94C51523152CE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
Manifest number:          066F
Signing time:             Wed 11 Jun 2025 00:01:15 +0000
Manifest this update:     Wed 11 Jun 2025 00:01:15 +0000
Manifest next update:     Thu 12 Jun 2025 00:01:15 +0000
Files and hashes:         1: 05EjiA9CdEbV_wfO-WM-htxJGY0.crl (hash: SX2xV+p3OdVdaEMshU/ygU3PkSjxarKetI1UpD7/qgs=)
                          2: 1-HePaXJiClEhHOw237Wa73vaFTc.roa (hash: 4PUKfjaEAzPB9R2XBWxJhNfJbqqZiV/WF7YuGVgHgMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:4a:80:93:b0:e8:97:da:3d:94:c5:15:23:15:2c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d
        Validity
            Not Before: Jun 11 00:01:15 2025 GMT
            Not After : Jun 12 00:01:15 2025 GMT
        Subject: CN=fb77c892c4c3068ce82273a4c49f920cf5206f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9d:d4:3f:13:91:9a:47:a1:10:88:bc:38:59:
                    c3:1c:49:85:63:e1:6b:9c:21:b4:7b:fc:e9:37:7d:
                    b4:8a:5e:d9:ec:f1:cb:19:4b:c3:6d:54:37:92:c8:
                    a6:0c:27:69:49:3d:d8:eb:4c:d0:80:d9:a7:33:c9:
                    65:18:13:1b:fa:d6:8b:53:24:15:14:16:14:fc:3f:
                    3e:d2:ea:c8:a6:2e:3c:fc:d6:1c:73:83:5f:cc:11:
                    80:78:c6:98:76:b9:2a:d6:ee:3f:f1:70:cf:30:19:
                    91:cb:ed:a8:5e:ba:63:a8:4a:ab:7e:dc:59:86:57:
                    8b:d1:c3:54:2d:9b:82:38:52:0e:f1:37:95:22:4a:
                    f8:54:1b:e2:15:52:69:5d:6c:e8:f3:7e:f9:e3:3b:
                    2a:90:9c:8b:48:44:d1:68:cf:76:46:8c:e8:48:e3:
                    62:58:f4:07:34:ca:8f:be:4f:48:d6:69:64:ee:b0:
                    7b:da:db:50:6b:12:e1:10:a2:4c:a8:78:a6:9e:70:
                    5d:7e:35:93:2e:f2:31:a3:fc:df:9b:89:b3:e0:96:
                    27:86:56:8c:59:7e:25:e2:f0:96:20:42:6d:ca:cb:
                    5e:51:03:ad:5f:98:2e:94:2e:c8:17:38:3a:19:cc:
                    f1:b0:c8:dc:9d:09:b9:5b:2c:26:0a:a5:65:9b:e3:
                    ed:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:77:C8:92:C4:C3:06:8C:E8:22:73:A4:C4:9F:92:0C:F5:20:6F:52
            X509v3 Authority Key Identifier:
                keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:16:22:59:10:99:6e:56:ee:35:dc:f3:ae:4f:db:f8:e5:ac:
         d2:80:8c:cd:d4:16:7a:5f:8b:23:88:be:8d:0a:95:ae:9e:4c:
         ea:94:64:a5:4d:20:2f:5d:06:72:c9:7b:4e:09:19:39:fc:e9:
         15:57:72:77:cf:4c:99:2f:55:84:96:57:21:be:d7:cd:19:a4:
         23:1b:54:3a:69:0b:6f:de:f3:90:c9:4b:61:ca:a6:5c:67:b6:
         12:f4:c1:43:8f:dc:f2:0f:35:fe:a3:6d:66:c9:23:c8:0b:1c:
         e4:48:0e:5f:72:8c:c1:60:07:5c:df:2b:ba:53:22:1d:96:48:
         4e:78:c1:7f:c5:66:7b:be:61:b4:15:24:07:ea:69:84:0b:60:
         63:f2:e5:e1:06:a2:5c:08:9e:54:00:d1:69:8e:8b:b6:e7:47:
         90:82:94:2e:80:5d:3c:d3:f9:53:f3:08:b9:79:49:5b:8c:57:
         ae:2d:b7:dd:f3:ff:13:a2:54:df:ad:7d:d7:cb:b0:31:19:46:
         c1:86:a6:49:15:dc:43:66:1a:d4:cc:0c:d1:92:7b:29:f4:3c:
         22:a6:78:2f:21:dd:63:aa:a3:af:e8:34:f1:70:a4:8d:ec:f5:
         4b:11:60:2b:ed:c9:7b:9d:3a:98:4b:8e:75:b9:e0:2b:3d:0b:
         41:ba:8b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:17:26 2025 by rpki-client