Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
File:                     MSOZsSkM1Bmni9L7MR47x9-fXx8.mft (raw, json)
Hash identifier:          FsOPQEaRsdGBmo2/0IN7nKcDwjBH6W/FzB6OQnVjzk8=
Subject key identifier:   45:6F:A6:4C:17:EB:56:91:88:76:AC:D9:F8:79:37:DB:50:4D:75:6D
Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
Certificate issuer:       /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Certificate serial:       019762BA5C0A63B12FE8134BC7667F840DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
Manifest number:          97
Signing time:             Thu 12 Jun 2025 06:01:09 +0000
Manifest this update:     Thu 12 Jun 2025 06:01:09 +0000
Manifest next update:     Fri 13 Jun 2025 06:01:09 +0000
Files and hashes:         1: MSOZsSkM1Bmni9L7MR47x9-fXx8.crl (hash: jOw4uWMbDNyYNxK+XHn8BkubeGp9oq3Tg+yHIFNhpnw=)
                          2: _YRrPXeHgAXgMpc2QmNmEMk3D08.roa (hash: rjz45MaRJ7ZN8GT6YntGrX6BstY+oeOQVYxVS/+RMXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 06:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:ba:5c:0a:63:b1:2f:e8:13:4b:c7:66:7f:84:0d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
        Validity
            Not Before: Jun 12 06:01:09 2025 GMT
            Not After : Jun 13 06:01:09 2025 GMT
        Subject: CN=456fa64c17eb56918876acd9f87937db504d756d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:57:13:76:d9:b0:23:10:ca:6e:77:55:15:c2:
                    c5:b2:de:dd:a0:c4:76:f9:14:9f:0e:a5:17:a2:69:
                    d7:e3:55:8c:c7:a4:cf:78:bc:42:2f:c9:2d:9f:a8:
                    62:58:98:f7:8d:57:a7:51:34:23:ca:a7:3a:e3:9d:
                    12:b9:f7:ca:f0:cd:40:47:b0:e4:0e:c8:54:c0:4c:
                    c9:b2:ff:0e:c5:39:30:a8:4e:80:78:29:90:6a:de:
                    5c:a5:95:22:8a:76:b2:ee:05:7a:3f:98:de:41:d2:
                    47:aa:a1:e9:c6:fc:23:78:92:17:d3:b7:95:71:24:
                    d7:96:ce:d1:b6:f6:31:10:80:15:9f:63:5f:2a:13:
                    74:b6:2b:b9:8a:be:60:7f:7e:90:1f:9f:87:27:c4:
                    4c:03:e5:8f:d0:19:42:ad:86:a2:0d:5f:d7:a0:54:
                    57:a7:92:0a:e5:b6:16:bc:f7:df:f7:a5:4a:1a:99:
                    6b:71:5a:0d:a1:75:bc:4e:29:74:42:75:ac:d0:76:
                    60:8a:ac:2e:f0:26:72:e3:2f:d5:e1:06:29:86:4e:
                    9a:54:2f:c9:e4:92:96:3b:59:ac:71:a3:8c:d9:e9:
                    3b:e0:f4:a0:b4:91:09:13:80:e2:0e:56:68:b9:d9:
                    06:1c:77:3d:fa:9b:5d:3d:d3:6c:5d:63:a3:97:87:
                    cd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6F:A6:4C:17:EB:56:91:88:76:AC:D9:F8:79:37:DB:50:4D:75:6D
            X509v3 Authority Key Identifier:
                keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:3f:d5:e4:43:18:81:63:97:00:51:94:08:d4:e0:86:b4:a8:
         96:db:fd:7e:07:b9:c8:a5:a6:a3:7f:b2:e0:b4:fc:1b:7e:26:
         f6:91:c9:53:a1:2c:5d:15:44:ac:9d:4b:d5:e7:73:49:8c:64:
         99:d7:52:ba:48:93:71:b0:06:d8:ca:67:f0:33:2d:8d:a2:6a:
         7f:56:dd:5f:03:0e:81:cc:03:f4:6a:ca:af:ad:eb:6c:61:ed:
         c9:91:65:9a:99:e3:87:af:0b:97:60:89:d2:ac:bb:2e:c1:e0:
         45:fe:08:96:ab:fb:42:4b:67:47:9e:ed:68:98:52:aa:8d:59:
         ee:76:a7:43:67:de:d5:10:de:1b:36:3b:20:2d:41:bc:11:fd:
         37:7d:33:1e:e7:d9:b1:5d:ee:5d:dc:94:bf:66:6f:83:b3:48:
         fd:e6:ee:41:73:9b:0a:a2:7c:fe:55:7c:92:89:8f:64:2b:15:
         d7:a5:a5:a8:91:02:ae:fc:5c:52:0d:fc:04:28:02:a3:9c:d6:
         dd:6c:98:96:64:a6:fb:a4:6d:8b:91:c0:e2:88:44:3c:ed:3a:
         06:8c:83:10:26:03:61:1d:61:84:4d:b2:21:a5:29:3a:45:63:
         3a:89:a9:44:c5:20:6d:b4:bb:ec:4a:be:f5:14:76:41:d1:17:
         64:f1:d0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:55:59 2025 by rpki-client