Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
File:                     Dw-fBE4rkph410fF_7uArRDj1r0.mft (raw, json)
Hash identifier:          4DurG0MWnVsaT12RFJ8mtmCnRwGT0Ak/tdVgPsWxTzA=
Subject key identifier:   84:E3:4B:F3:D4:D9:7B:D0:40:CB:00:58:0C:9E:18:13:2B:C3:7B:FC
Authority key identifier: 0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
Certificate issuer:       /CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Certificate serial:       01975B371306CC2EB85398C67CD5E466AFA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
Manifest number:          0A1D
Signing time:             Tue 10 Jun 2025 19:00:25 +0000
Manifest this update:     Tue 10 Jun 2025 19:00:25 +0000
Manifest next update:     Wed 11 Jun 2025 19:00:25 +0000
Files and hashes:         1: Dw-fBE4rkph410fF_7uArRDj1r0.crl (hash: YCdXb0mVUvF9DB+S0UiDOk/sm2R/B0cM6QoVuhMlxIw=)
                          2: tnIMWehV7-s3YFdByca6v2OZEG0.roa (hash: NWfOiZrn7Md8Y/fglpHdXuMUMsLmCrcIFNvYQcevZ/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:37:13:06:cc:2e:b8:53:98:c6:7c:d5:e4:66:af:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
        Validity
            Not Before: Jun 10 19:00:25 2025 GMT
            Not After : Jun 11 19:00:25 2025 GMT
        Subject: CN=84e34bf3d4d97bd040cb00580c9e18132bc37bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ab:9e:1e:dd:27:09:d2:5d:29:6f:2c:64:e5:
                    c2:bd:8e:ba:dd:7e:1b:2c:cb:74:db:93:98:8e:8f:
                    97:c5:4f:c6:74:e8:af:d6:ef:e5:96:19:7a:fe:17:
                    02:41:04:c3:61:2c:0b:36:86:88:f2:f8:1a:c7:39:
                    1a:ac:75:be:72:41:99:28:d9:f7:e7:c6:5d:d1:f0:
                    01:26:ff:eb:ed:70:80:7b:1a:2e:cb:39:f9:45:72:
                    99:26:e3:ff:a2:ad:2e:a1:98:77:e9:b2:61:5b:6f:
                    42:a0:9c:db:1f:df:81:cf:2b:13:ea:26:c5:21:74:
                    2e:62:28:32:9f:91:33:06:58:ea:c8:f6:42:6f:d5:
                    b3:0f:0d:11:52:b2:90:ca:f0:1e:8b:5a:6b:d2:f4:
                    21:6b:73:ae:4c:ba:e6:b7:63:ca:1b:85:37:d3:cc:
                    ac:13:bc:0b:3b:f5:c5:01:ca:ac:8c:50:b1:3b:2c:
                    df:33:be:c0:41:d1:33:bd:2a:b8:0a:23:c9:92:e7:
                    a2:b4:69:a7:bf:14:69:50:55:55:7b:cf:3c:a0:95:
                    65:6a:f8:70:9d:b0:88:a7:5d:95:67:7b:0f:7e:32:
                    c3:6b:c6:f1:7f:9b:d1:bf:b0:04:fa:ed:69:aa:1a:
                    0e:03:ab:d6:6a:29:d8:59:fe:14:04:9b:84:41:89:
                    ab:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E3:4B:F3:D4:D9:7B:D0:40:CB:00:58:0C:9E:18:13:2B:C3:7B:FC
            X509v3 Authority Key Identifier:
                keyid:0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:e7:14:23:e4:d3:13:72:94:07:62:d1:79:37:a2:1e:e0:f8:
         d6:69:18:89:38:c8:6f:bb:91:82:56:3b:08:8b:6d:e3:33:47:
         00:63:93:d3:87:02:be:69:94:11:e4:73:8b:04:35:0c:ea:3b:
         74:21:90:c0:03:4e:1b:d2:75:8c:a6:71:a2:a1:51:3d:e3:c9:
         30:99:0e:95:6d:89:a6:66:51:ae:7d:61:1f:df:4c:b4:e8:5b:
         64:c1:93:6a:8f:43:94:0a:80:49:e2:48:5e:0a:92:a6:11:87:
         af:7f:67:a2:64:73:4a:1c:a5:53:63:18:56:bd:c1:e9:b7:26:
         ee:9a:e8:bc:bc:76:c3:da:18:65:e5:89:d6:b3:b1:3e:81:0f:
         92:7e:d2:cf:e2:f3:43:ab:91:4a:c7:0e:1a:c5:f0:18:10:48:
         20:19:ec:dc:6f:e6:a0:ad:05:90:28:2a:15:a8:62:b0:67:c9:
         37:50:f0:56:3b:60:27:e2:97:6b:f6:9d:b7:50:ae:a6:66:80:
         c4:a0:a6:37:cc:16:57:0e:9a:50:3b:51:b9:ff:79:0d:57:00:
         29:bd:70:30:47:d9:09:98:25:41:e8:f9:5d:d5:f3:27:65:3e:
         54:8c:8f:c0:b0:6e:ca:a7:28:c3:22:c1:eb:49:02:ab:06:15:
         d5:29:d2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:55:08 2025 by rpki-client