Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
File:                     996iwVmT1oMXUKpjDg5oDZ7viIo.mft (raw, json)
Hash identifier:          lLYjpFUjNJ+s3Xph2edKyMEKju7ByCb6gLK6Db+KpMU=
Subject key identifier:   60:31:2A:47:F3:30:89:F7:60:B3:07:18:60:6F:98:C1:6B:9B:15:CF
Authority key identifier: F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A
Certificate issuer:       /CN=f7dea2c15993d6831750aa630e0e680d9eef888a
Certificate serial:       01974DE9C54C75E08D7AC5CD07A72B0ABDFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
Manifest number:          34
Signing time:             Sun 08 Jun 2025 05:00:55 +0000
Manifest this update:     Sun 08 Jun 2025 05:00:55 +0000
Manifest next update:     Mon 09 Jun 2025 05:00:55 +0000
Files and hashes:         1: 996iwVmT1oMXUKpjDg5oDZ7viIo.crl (hash: ykbVWqAMJ6ZLGCnbrwdcmF6WPfhnTS5QBblB8GE9MXg=)
                          2: Q_OYedJWMY4R6WjcRHhbze4rY30.roa (hash: I5gaAF/DaFJrmNnPn+q8QcrAIPjnX3NXACdoAl2BzTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:e9:c5:4c:75:e0:8d:7a:c5:cd:07:a7:2b:0a:bd:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7dea2c15993d6831750aa630e0e680d9eef888a
        Validity
            Not Before: Jun  8 05:00:55 2025 GMT
            Not After : Jun  9 05:00:55 2025 GMT
        Subject: CN=60312a47f33089f760b30718606f98c16b9b15cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:44:ed:7d:8c:73:15:3d:72:8b:6d:19:62:dc:
                    86:3c:e6:8c:84:1b:22:f7:0c:a2:f4:da:4c:61:69:
                    af:b7:51:cd:84:66:a0:b0:dc:a5:76:13:1a:aa:de:
                    fe:e7:a8:85:b7:c7:21:7c:f8:94:cb:17:40:84:e0:
                    48:1a:50:c6:35:7f:5b:8c:95:6e:f7:60:28:60:89:
                    59:33:a0:d5:cd:ea:7f:c1:ac:55:53:20:ff:4d:b1:
                    2d:fe:d5:e5:68:ea:62:7f:d8:11:5a:93:6a:6b:4f:
                    25:e9:0f:de:81:6f:51:e6:fa:99:df:36:ad:c9:f2:
                    a9:24:f1:c9:90:ed:0f:19:d3:32:cc:c3:10:78:ea:
                    64:6d:47:de:d5:21:8c:1a:25:86:9b:0d:9c:1b:ba:
                    aa:3b:f0:80:c2:c0:89:bb:e0:4b:c7:fe:ed:47:a8:
                    ff:cb:7a:7a:72:bb:2d:b0:9c:f0:0d:e7:45:fb:09:
                    ab:c6:ea:44:ea:3d:da:7b:e8:f5:30:05:9e:a2:d7:
                    59:b6:c6:98:4e:b3:5b:6d:46:c5:89:70:c6:aa:32:
                    ee:9a:9b:56:e4:d2:ae:43:9d:c7:77:f9:80:80:35:
                    1d:e9:0b:be:8b:e6:5a:13:da:b0:17:30:89:5a:57:
                    ca:a3:52:93:de:87:24:80:03:a3:28:ba:72:75:e2:
                    7f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:31:2A:47:F3:30:89:F7:60:B3:07:18:60:6F:98:C1:6B:9B:15:CF
            X509v3 Authority Key Identifier:
                keyid:F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f6:ca:ec:63:bd:dd:5d:f0:04:fa:67:3f:8a:52:c3:a6:48:
         17:ea:80:d8:86:ec:75:90:b3:82:ac:5e:27:a4:20:43:f2:f4:
         48:76:50:88:e0:dd:49:df:51:bf:92:64:19:f4:49:cc:5e:86:
         f0:a2:fe:10:9d:20:69:94:95:49:82:4c:dc:39:e7:14:d4:a6:
         03:a5:39:5e:e1:2e:82:0b:4d:63:c9:d4:ab:9a:eb:4a:1f:e7:
         c3:3b:cb:c4:6e:24:82:77:9c:69:71:de:6a:8c:b0:4a:53:e7:
         be:99:7e:bf:7d:c9:ba:6e:cd:0d:72:a2:b4:56:87:28:82:3f:
         a2:67:45:b5:50:8a:4f:2a:18:0a:41:d5:86:6d:fc:9a:21:1c:
         48:84:7d:00:43:3e:fe:7c:bb:71:bb:46:9a:4d:a0:b6:e9:26:
         0b:88:19:39:1a:48:d9:17:59:c6:39:7b:d3:d2:60:1c:bd:39:
         98:55:83:b4:95:4f:42:0f:84:cb:5a:42:f3:4e:ea:d7:bb:3b:
         43:97:78:f8:e6:8e:46:d1:b6:2a:7b:21:e0:1a:f3:ac:dd:bf:
         34:2c:88:1c:cf:43:ff:2f:e2:5f:44:31:a7:6a:d6:c7:b5:f9:
         fe:a3:0a:59:4a:50:f6:5e:e7:32:f0:12:e9:8c:cd:c9:22:f0:
         4a:29:6f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:53:58 2025 by rpki-client