Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
File:                     F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json)
Hash identifier:          5kTksGwqzjfchawl8ggx0csz5OMz3ePZC9TlZ6+n0j4=
Subject key identifier:   02:6A:E9:F1:3C:EC:7E:B7:19:96:C5:25:B0:69:B6:C8:76:ED:53:73
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Certificate issuer:       /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial:       019764A85AA51741FCB108B535CEA3CD324A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
Manifest number:          0DE8
Signing time:             Thu 12 Jun 2025 15:00:44 +0000
Manifest this update:     Thu 12 Jun 2025 15:00:44 +0000
Manifest next update:     Fri 13 Jun 2025 15:00:44 +0000
Files and hashes:         1: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: apEVJcj9D3PPPf+zalqjdNP7rg7jjrWo60ln/+UYTtc=)
                          2: sUbLpeFS3XLLLQIvzdPabGUHzHo.roa (hash: 3V72mhpNF2hyMt7Kyc3iG5tEZ6zvkVberiaxQXV1Hcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:a8:5a:a5:17:41:fc:b1:08:b5:35:ce:a3:cd:32:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
        Validity
            Not Before: Jun 12 15:00:44 2025 GMT
            Not After : Jun 13 15:00:44 2025 GMT
        Subject: CN=026ae9f13cec7eb71996c525b069b6c876ed5373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:90:cb:20:11:ea:2f:b1:ca:96:88:f7:23:
                    9a:54:cb:2a:a9:68:d6:1c:c5:1f:44:4b:ac:48:1a:
                    ce:e9:dd:64:3f:de:3d:b1:2f:4b:52:70:35:cd:b1:
                    f6:a3:01:7b:5f:3a:80:ea:05:5d:45:ad:8b:14:8f:
                    02:db:98:65:1d:73:7f:9b:5d:a5:4e:70:8b:f5:9a:
                    d1:da:5e:55:2b:d2:1b:fc:47:fb:93:cf:57:1a:b2:
                    ee:6f:61:09:5d:88:76:48:43:9b:88:e7:70:37:5c:
                    51:00:54:6d:23:2d:48:e2:4d:b8:0e:c5:86:ce:c3:
                    b8:5a:e2:f1:4c:19:bd:c1:c1:0a:68:f8:02:89:54:
                    f0:73:b6:69:77:ae:b3:b6:0c:5d:e1:a3:57:63:a3:
                    f1:a2:c3:ed:c8:60:c3:d6:d7:dd:22:0a:89:4d:ff:
                    49:e1:10:5f:ca:29:cf:f8:1f:3d:af:2d:6c:0b:a1:
                    e5:f5:db:36:35:9e:13:ef:a4:8d:e8:8f:b8:9f:84:
                    3b:71:78:63:32:32:42:05:d4:61:22:84:72:32:b0:
                    9f:28:2c:e4:41:ad:7c:6a:84:d7:f5:28:b9:fc:22:
                    05:93:73:4d:e8:69:b5:49:53:fe:7a:fa:00:4b:d1:
                    b9:e0:33:11:40:ce:e5:dc:d3:ea:19:b0:bb:0e:ad:
                    82:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6A:E9:F1:3C:EC:7E:B7:19:96:C5:25:B0:69:B6:C8:76:ED:53:73
            X509v3 Authority Key Identifier:
                keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:6a:6f:fd:02:0e:d9:39:e5:4e:b3:1d:4c:7e:d4:6c:5a:cd:
         f5:24:cc:6e:62:94:ed:20:cd:28:a6:2a:05:b7:a0:d3:ee:31:
         b8:c9:fb:34:24:61:25:2b:af:ea:f7:a8:5c:82:ef:4c:43:04:
         bf:49:f5:89:ee:aa:fe:e3:eb:d7:2d:eb:9a:1f:80:bf:57:d7:
         f5:f3:6f:81:32:0e:f2:3d:2a:8a:34:04:77:01:9a:e8:47:d3:
         4e:95:a3:75:af:8f:41:79:af:00:00:cd:33:39:7e:a0:e7:42:
         02:64:b7:94:1f:3b:7b:53:e5:2a:33:94:40:a2:74:9d:e1:81:
         0c:59:ae:4d:7a:d0:d4:03:a1:7b:48:73:30:bd:7a:9e:0c:06:
         dc:94:fa:60:7b:e5:6d:90:f9:4d:07:b7:d7:e1:ab:f9:85:1b:
         62:e8:9e:de:28:b8:bd:36:d4:32:5d:53:95:5f:25:df:47:2c:
         16:29:44:16:89:c4:96:42:de:41:1e:18:82:12:27:ea:70:0c:
         3f:02:4e:ca:03:83:75:fb:19:50:93:ec:59:1e:a4:cd:f5:ed:
         f6:98:d2:fe:ea:78:eb:e1:df:b9:0a:cd:4c:2b:7b:45:0a:7b:
         08:6d:39:40:ff:aa:4d:63:59:72:de:e5:98:99:a3:ff:35:18:
         14:6f:06:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 21:29:58 2025 by rpki-client