Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
File:                     h7l24qq5IySO6A7lfL00rYe87zQ.mft (raw, json)
Hash identifier:          o4lVyNoG2sfeUijjc77EJUHm+vhmt6+HWT4b33/GW3Y=
Subject key identifier:   21:10:48:34:34:B2:9E:61:EE:4D:1D:9F:1F:A4:AA:FB:34:F9:67:C2
Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
Certificate issuer:       /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Certificate serial:       0197523549772F1FBA4AE10F62FE4C64F131
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
Manifest number:          0C75
Signing time:             Mon 09 Jun 2025 01:01:53 +0000
Manifest this update:     Mon 09 Jun 2025 01:01:53 +0000
Manifest next update:     Tue 10 Jun 2025 01:01:53 +0000
Files and hashes:         1: h7l24qq5IySO6A7lfL00rYe87zQ.crl (hash: hxq86tJcbh/3f3EFw1pEZMEtqujQsid4m82rIcEVdpg=)
                          2: hrRjboaEddMTvU1wn6u0WdMEQ5k.roa (hash: R2w89TKLu5CTfHL7zBMhtJ8zldIghHv3KwB06EytEuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:35:49:77:2f:1f:ba:4a:e1:0f:62:fe:4c:64:f1:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
        Validity
            Not Before: Jun  9 01:01:53 2025 GMT
            Not After : Jun 10 01:01:53 2025 GMT
        Subject: CN=2110483434b29e61ee4d1d9f1fa4aafb34f967c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:51:6c:c6:bd:46:c6:6c:18:c7:61:2f:d3:8a:
                    49:02:93:cc:43:a8:fb:17:dd:a3:79:a5:07:be:80:
                    bf:8a:4f:97:99:00:64:7d:45:53:31:b3:f8:54:7e:
                    3d:29:04:b9:f2:79:8d:ba:7e:d3:95:cf:b0:f7:2d:
                    1e:f3:db:c0:2c:24:9a:0d:22:1c:e3:f5:a5:b0:9c:
                    fa:29:61:1c:c6:1e:85:69:10:56:05:39:38:7b:74:
                    ee:62:e2:b0:fa:dc:92:06:8c:6e:cb:67:00:7d:8e:
                    d2:f6:ed:88:a7:87:87:79:c3:35:56:51:a2:ab:6b:
                    42:09:f9:72:b7:14:14:a8:5c:70:5c:3d:35:0a:43:
                    a2:25:e5:24:29:11:9c:80:2e:62:c1:8f:c8:78:b9:
                    a6:da:2f:0c:4d:38:b9:e4:78:01:90:54:fe:93:8b:
                    66:c6:f9:44:e5:b8:19:2b:e6:4d:0d:e8:2e:c8:ca:
                    d0:52:90:7f:04:8d:f9:21:90:6a:58:9a:e6:a9:63:
                    47:e6:79:ae:12:b4:f8:1b:39:b1:57:93:4d:4c:f5:
                    a5:7f:d4:c9:e4:8a:53:21:3c:9a:8c:ce:f5:f5:04:
                    ad:ad:f5:b5:45:5e:08:4c:43:94:f2:4f:1f:51:03:
                    7f:97:fa:18:ed:9f:c4:7b:75:6c:c5:e2:7f:e6:c3:
                    30:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:10:48:34:34:B2:9E:61:EE:4D:1D:9F:1F:A4:AA:FB:34:F9:67:C2
            X509v3 Authority Key Identifier:
                keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:fe:a2:bf:ed:a2:d5:24:8f:45:b9:39:d6:3b:9c:42:89:d5:
         90:9b:c4:5a:b2:3b:c6:31:86:68:6a:5f:c4:2c:16:6e:f8:78:
         8a:92:04:89:6b:b0:ff:b8:6e:86:46:b0:91:d5:57:88:88:04:
         39:e3:21:61:c8:d8:fa:a3:38:de:16:32:22:78:60:66:d8:69:
         76:7b:5f:ac:ef:69:a3:74:b2:91:9c:f6:69:03:fb:6b:9d:c9:
         14:4d:95:59:51:c2:93:6c:df:a3:84:e2:84:3e:a1:ee:36:0a:
         4a:8f:5b:66:a4:5f:44:8e:7b:14:92:29:ed:af:3c:43:5c:f4:
         e4:1b:56:1e:fe:78:6a:4e:b2:28:46:44:af:94:b3:4c:a9:bb:
         a2:e4:54:5c:23:f7:69:a6:e0:79:9a:80:3d:7b:7d:28:b7:79:
         57:b4:b2:c1:92:ff:6e:e1:7f:63:73:85:f0:5f:03:6a:cb:df:
         5e:55:e8:83:31:f1:1c:57:4a:c0:0e:09:89:95:bc:40:73:c1:
         a9:28:b5:5a:cd:7e:34:d7:2e:82:1b:f0:29:ae:48:9e:8f:48:
         27:ac:13:3b:95:06:7f:50:f0:a4:7d:62:a7:f6:e7:43:c1:1b:
         4d:db:d5:91:23:57:71:88:b1:11:76:86:ed:28:7a:20:c1:8d:
         56:c5:89:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:57:28 2025 by rpki-client