Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
File:                     95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft (raw, json)
Hash identifier:          XNnk8UTYSu42dbSoxILP9J97wvvbeR4FRQPtXGTUczM=
Subject key identifier:   8B:E6:5B:41:1B:FC:39:D1:92:16:92:7E:67:25:A0:45:12:D5:38:C0
Authority key identifier: F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
Certificate issuer:       /CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Certificate serial:       01974C9F9F99A691C63D14FE931C009288B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
Manifest number:          0729
Signing time:             Sat 07 Jun 2025 23:00:18 +0000
Manifest this update:     Sat 07 Jun 2025 23:00:18 +0000
Manifest next update:     Sun 08 Jun 2025 23:00:18 +0000
Files and hashes:         1: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl (hash: HkoTR1eGNOAmX64T86Cq8uZ7YE5EVeMgJdF2+Szb0gI=)
                          2: Mqsj_mYBdYcPJ5l_74z5bHNTr1k.roa (hash: +l1/GGdu0QqetRbkoCyavDfKTfdB+pfAVXCWByI+XBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:9f:9f:99:a6:91:c6:3d:14:fe:93:1c:00:92:88:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
        Validity
            Not Before: Jun  7 23:00:18 2025 GMT
            Not After : Jun  8 23:00:18 2025 GMT
        Subject: CN=8be65b411bfc39d19216927e6725a04512d538c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:21:80:a0:7e:f0:56:8f:6a:a5:37:26:9b:e9:
                    bb:93:f0:ed:f6:66:50:b3:5f:e3:69:5d:20:72:74:
                    28:1e:d3:f2:16:cb:0a:57:4c:88:21:90:45:97:a5:
                    e8:83:60:0d:52:85:42:05:f5:97:95:7d:50:cb:fa:
                    b7:44:86:95:19:c5:79:94:19:a7:d6:9c:c1:f7:81:
                    d9:ea:6b:e4:14:bd:fb:88:a7:8c:35:64:01:8e:9b:
                    d0:80:43:82:9d:5b:95:9e:d0:e5:4e:2c:b2:96:72:
                    02:90:a7:32:76:66:c0:36:9b:e3:b5:71:4d:21:2e:
                    7c:10:64:82:97:bd:a1:76:fd:4a:8a:b3:91:2e:bc:
                    ec:10:d2:2d:9b:eb:7d:be:13:23:4b:ed:2c:70:dc:
                    a4:92:af:98:0a:d7:de:31:17:ca:ea:f8:c4:9e:ad:
                    3f:6c:25:0a:d9:60:b3:3c:26:3d:81:28:1a:a8:66:
                    73:9b:1a:3e:b6:e6:39:14:d8:6e:fd:f2:aa:31:93:
                    b7:a6:9f:65:68:b4:58:c9:e9:11:18:fa:d8:33:2f:
                    34:bc:36:96:48:3e:ad:f4:ca:c3:a1:ab:fd:a3:62:
                    3d:fb:2c:64:b4:26:e2:c9:2a:60:61:fc:00:eb:6e:
                    3a:bb:82:d0:1c:b6:9b:c8:2d:4c:2a:8a:19:ea:b7:
                    10:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E6:5B:41:1B:FC:39:D1:92:16:92:7E:67:25:A0:45:12:D5:38:C0
            X509v3 Authority Key Identifier:
                keyid:F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:60:8c:e8:ad:46:48:4f:5f:9f:9d:35:3e:da:aa:55:74:da:
         a4:f8:55:17:3b:69:d5:10:aa:c8:f3:80:36:e3:c0:b6:14:8c:
         cd:83:2d:ac:2b:32:b2:f2:45:56:30:c5:fd:1e:d8:04:be:e1:
         94:9c:82:e9:b8:90:a0:9a:35:8a:9e:dc:82:ff:80:9f:d1:6c:
         b6:75:fa:ad:5d:90:a8:fe:f7:aa:e6:c9:79:b6:5d:d4:ef:1b:
         e5:39:45:69:db:31:77:79:6f:75:0c:5e:cc:52:ea:4f:3b:b2:
         c0:fe:70:51:75:ee:df:ab:db:c6:61:2c:c2:db:3e:7a:a1:25:
         5f:3f:7a:50:46:fc:0a:eb:af:e9:3e:d3:a6:b7:f0:7e:13:4d:
         13:8a:64:17:3f:b3:87:30:23:f1:32:00:2a:45:87:3a:02:0b:
         c7:71:30:79:c6:50:47:76:40:f9:4e:ad:90:fc:3f:1a:5d:9a:
         c6:c6:39:49:94:9f:48:69:ff:9e:de:f6:5d:38:fc:e3:dd:74:
         0b:03:b3:c9:44:6a:1d:cd:07:69:16:87:ad:de:74:4f:67:14:
         e3:85:0c:4c:c3:6c:da:a8:61:12:5d:82:02:1c:83:d1:2c:86:
         77:f2:73:84:ad:4e:02:7d:51:41:1d:b1:dc:1b:01:63:dc:58:
         ca:73:a3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:12:37 2025 by rpki-client