Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
File:                     91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json)
Hash identifier:          Je1yNAjygWZOIfsb6qmwhKVwtc2Ph8hHpyNAEAwYpSU=
Subject key identifier:   59:EF:06:6F:53:FF:E2:28:70:02:60:79:CA:E7:BD:35:9C:FF:BB:A3
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Certificate issuer:       /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial:       0197580019A07028A9F999CB832450286931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
Manifest number:          0894
Signing time:             Tue 10 Jun 2025 04:01:30 +0000
Manifest this update:     Tue 10 Jun 2025 04:01:30 +0000
Manifest next update:     Wed 11 Jun 2025 04:01:30 +0000
Files and hashes:         1: 7DobkB9YDZRCFthUqh8EeCazT9A.roa (hash: wrSSktbEIiruaMGzjyB9HPAsqfXawT4rvBYdbF17ar8=)
                          2: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: XlJvFJEp0DY4Z9Deib/sh6BPS3kTGH9LqDrNWuanzqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:00:19:a0:70:28:a9:f9:99:cb:83:24:50:28:69:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
        Validity
            Not Before: Jun 10 04:01:30 2025 GMT
            Not After : Jun 11 04:01:30 2025 GMT
        Subject: CN=59ef066f53ffe22870026079cae7bd359cffbba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:07:f7:ec:c2:1c:8e:93:08:3e:10:db:d9:f5:
                    8b:89:78:e0:d6:35:2f:d1:16:db:d4:12:18:f5:e2:
                    95:eb:5b:f6:93:ad:2e:70:00:35:9c:e7:6f:42:08:
                    e7:1c:da:1c:8b:68:d8:ef:aa:f4:e7:76:a4:53:d4:
                    04:60:ec:b6:5b:a6:57:fd:dd:f0:5c:24:49:f4:a9:
                    3f:0e:b6:0c:4f:c5:57:09:6f:b4:3b:4b:33:f5:42:
                    87:9d:1b:7d:80:34:83:97:17:b9:82:bf:03:e6:0f:
                    51:8f:29:1a:62:c9:e3:a8:c8:95:de:00:c1:ef:0b:
                    b9:24:54:b3:6c:e0:d3:a9:c8:57:13:a9:88:cc:44:
                    2f:43:77:e4:2a:b8:9a:95:b9:00:26:c7:83:99:bc:
                    35:87:60:f0:a5:21:d5:3f:3d:81:6d:7e:ea:0d:62:
                    71:02:85:0f:38:c6:ed:60:e9:e1:6c:c2:39:da:54:
                    b5:02:d6:2f:03:45:f1:a0:aa:d8:69:d1:c0:72:bf:
                    ee:62:40:19:9f:8b:f5:1d:75:96:d6:d2:7e:79:fd:
                    1f:23:10:69:cf:3f:d2:0f:48:38:9d:b2:51:cd:98:
                    5d:f7:6b:6d:43:41:52:c1:1e:43:c3:2a:a8:ed:a0:
                    5f:cf:c9:98:0e:1e:c1:c4:f7:27:ee:28:e0:b2:b9:
                    a5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EF:06:6F:53:FF:E2:28:70:02:60:79:CA:E7:BD:35:9C:FF:BB:A3
            X509v3 Authority Key Identifier:
                keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ff:cb:3e:b2:f1:91:e7:bf:e9:f6:99:ce:e9:31:ff:c4:99:
         8c:52:ac:03:06:5d:d0:71:70:87:1a:1c:5e:78:97:af:3d:c1:
         f2:5d:2b:5c:d6:0b:c1:a5:b0:ed:7d:e2:ae:32:4d:be:9c:2a:
         71:b0:b3:16:7f:7a:e2:88:97:18:32:99:3c:c8:a6:68:55:d0:
         81:8b:33:bc:37:ec:07:38:a2:d6:1a:ec:97:0b:bc:74:5d:81:
         4c:dd:81:60:fd:9a:84:70:29:e3:44:3b:a9:70:de:32:d9:60:
         f8:14:6c:8f:d4:4d:b5:5e:d7:19:8c:e6:04:8a:00:bb:41:30:
         ac:78:9c:a9:07:cc:1a:a0:7d:49:3b:61:4d:90:d7:77:d3:84:
         91:6f:6c:65:98:f2:82:cf:ad:df:72:83:13:ba:dd:e4:7f:5d:
         e9:28:d8:ad:2c:49:50:6d:22:a5:7f:4e:0f:b3:08:1a:db:c1:
         fb:8f:ba:c0:7c:7b:e1:cf:03:99:8c:86:53:cb:b2:a2:8e:89:
         45:56:c8:e9:a6:6b:c7:7a:3a:19:f3:3b:31:ec:c7:f7:48:b0:
         bb:8e:85:f4:b5:81:ec:f6:6c:b5:a9:8d:1e:64:3e:64:35:ae:
         4f:6f:55:07:9c:36:58:ce:34:4f:15:b8:e2:a9:48:c6:fd:33:
         03:06:96:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:22:40 2025 by rpki-client