Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
File:                     F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft (raw, json)
Hash identifier:          T36m0ZfUa30rxPSX1Nqj7jewIx98rtQbidOKWS3G52E=
Subject key identifier:   D1:DA:5E:88:64:DB:C5:B4:3A:25:2D:65:9B:2E:89:5F:15:1E:D2:32
Authority key identifier: 17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
Certificate issuer:       /CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Certificate serial:       019746D5092696541659B82E9646310ACF47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
Manifest number:          0836
Signing time:             Fri 06 Jun 2025 20:00:56 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:56 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:56 +0000
Files and hashes:         1: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl (hash: BjvGIqJiczn1ODfl6AubHmTAcOafe6yp9MizxCXfoHg=)
                          2: kyUP_zUxJzKqp_WSRe64xjQTn88.roa (hash: IIbLVXzFiGKxHkStsyV2IH0lCTK/4GbGDWn4D7OnNxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d5:09:26:96:54:16:59:b8:2e:96:46:31:0a:cf:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
        Validity
            Not Before: Jun  6 20:00:56 2025 GMT
            Not After : Jun  7 20:00:56 2025 GMT
        Subject: CN=d1da5e8864dbc5b43a252d659b2e895f151ed232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:40:dd:60:0e:54:98:42:f1:e3:02:83:e3:80:
                    b4:87:c9:74:51:4a:b1:f2:7e:6c:dc:0a:c8:81:ca:
                    ff:95:1f:f6:9c:b2:78:ba:df:82:b3:55:2b:1c:f7:
                    cd:91:e3:06:db:4d:02:58:23:7d:a9:df:3a:65:33:
                    ed:c0:7a:74:ea:c8:32:0b:c6:31:b7:14:0b:7e:03:
                    1f:ca:21:7c:e6:7a:3f:10:55:fe:8a:df:47:2f:9b:
                    a4:a2:4c:83:d8:3c:fa:75:73:61:f0:b9:43:7a:d1:
                    e8:a9:18:12:1a:36:09:79:68:b3:c0:23:3e:7d:8a:
                    4c:26:60:5d:c5:76:64:dd:c8:4e:a6:e9:56:0e:f3:
                    35:35:a9:24:2b:8f:70:fa:6c:2a:8b:b2:02:e1:83:
                    b8:f6:01:9c:a3:df:06:a9:29:6d:0b:80:2c:65:05:
                    e8:1e:69:64:d8:b8:e0:2f:88:7c:48:34:87:29:c9:
                    d3:27:ee:ef:14:d2:e4:ea:99:42:3c:43:be:a2:70:
                    e6:fe:47:dc:04:35:c8:cc:6b:7e:f2:42:00:0d:be:
                    31:3c:71:c9:c8:ea:21:75:bd:f7:12:cf:f5:bc:0e:
                    44:fd:5f:6c:58:ad:76:89:c3:8e:b1:43:cd:1d:25:
                    5a:76:98:1e:7c:8a:62:0b:8e:8a:bc:da:dc:d5:56:
                    d1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DA:5E:88:64:DB:C5:B4:3A:25:2D:65:9B:2E:89:5F:15:1E:D2:32
            X509v3 Authority Key Identifier:
                keyid:17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:77:a3:9e:00:7b:e3:70:4c:55:75:a9:2d:09:00:2a:63:5e:
         d8:65:f1:61:14:ae:6a:49:92:80:19:da:cc:ca:07:3f:a7:f4:
         6f:37:c5:df:92:21:c3:fd:2b:45:d2:6e:c5:37:49:73:35:95:
         9a:4f:92:1a:54:b3:83:f9:9c:ad:fb:3a:95:84:fe:51:a6:5d:
         48:8d:e5:6c:51:b0:23:2e:14:c4:5d:18:61:8e:7a:e4:a0:16:
         be:e7:02:0a:96:37:d7:86:a8:26:62:e9:ae:5b:0f:18:23:05:
         01:35:de:ce:d2:30:46:9a:b7:c3:f9:2a:94:54:e0:e2:ac:e4:
         05:98:18:36:9a:04:2f:0a:93:79:d8:b5:20:c9:85:71:ab:12:
         05:0e:60:ed:72:0e:c1:32:7a:98:dc:91:2f:ad:7b:6e:5c:d5:
         a2:9d:95:c8:9f:ea:0f:e9:16:c5:3c:ec:4a:a8:ad:f2:f5:b6:
         f4:5d:fc:c9:51:01:0d:df:f8:81:c9:c2:c3:e1:9c:c3:9a:d1:
         a1:63:13:66:3a:d7:f5:a3:d6:d1:66:3e:cf:6b:fb:db:6a:8e:
         f3:66:63:d6:4e:9c:aa:fb:24:57:cc:c3:b5:3b:9c:75:91:b5:
         8a:3f:e3:e8:93:5a:7e:36:58:bd:43:cf:5d:2a:d6:85:40:50:
         27:5f:f6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:48 2025 by rpki-client