Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
File:                     Dw-fBE4rkph410fF_7uArRDj1r0.mft (raw, json)
Hash identifier:          Cv1kLS+pJXmR4wDtnra0A5IPru16xeDYxpoWa0oDDcM=
Subject key identifier:   83:F7:20:BF:84:E2:1A:10:4F:6F:51:D5:DF:F2:2D:C9:46:15:58:2C
Authority key identifier: 0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
Certificate issuer:       /CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Certificate serial:       0197575A545D74F328DCF7E3E12B739D6341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
Manifest number:          0A1B
Signing time:             Tue 10 Jun 2025 01:00:26 +0000
Manifest this update:     Tue 10 Jun 2025 01:00:26 +0000
Manifest next update:     Wed 11 Jun 2025 01:00:26 +0000
Files and hashes:         1: Dw-fBE4rkph410fF_7uArRDj1r0.crl (hash: jTdGjsdrmvq8yzjkVJ9iDZe60BTntmpevpwx3oiU2WI=)
                          2: tnIMWehV7-s3YFdByca6v2OZEG0.roa (hash: NWfOiZrn7Md8Y/fglpHdXuMUMsLmCrcIFNvYQcevZ/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 01:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:5a:54:5d:74:f3:28:dc:f7:e3:e1:2b:73:9d:63:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
        Validity
            Not Before: Jun 10 01:00:26 2025 GMT
            Not After : Jun 11 01:00:26 2025 GMT
        Subject: CN=83f720bf84e21a104f6f51d5dff22dc94615582c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:4f:4a:cb:1b:e9:3b:bf:4a:25:1b:42:cd:
                    81:1f:84:a8:83:d9:0b:48:ea:d8:88:e3:ef:36:98:
                    be:6e:61:77:5e:70:6c:fb:a5:e1:b9:ae:ce:7b:2a:
                    b9:33:94:96:44:da:7c:d0:1b:96:cd:07:2f:0c:ff:
                    3e:0d:9d:c0:c5:5e:2a:72:80:d7:ea:50:99:24:bd:
                    bb:2b:cf:06:ea:ed:0d:45:63:87:42:02:c3:3f:a6:
                    15:02:1e:18:e4:d6:f3:01:da:52:fc:5c:86:b2:3b:
                    58:4a:11:9f:fc:9b:6b:30:52:5f:0f:a0:16:4f:f8:
                    93:81:05:19:81:79:31:73:a5:89:da:47:69:46:eb:
                    9c:76:14:01:0f:14:39:09:88:df:17:fb:db:f0:a2:
                    6b:43:14:e7:8e:a5:2c:aa:07:ad:6d:bc:35:7d:9f:
                    9a:66:2c:9e:11:88:79:44:1c:6b:8c:a1:fd:b8:ce:
                    22:c6:8b:08:da:81:2c:39:87:92:95:94:13:34:04:
                    03:d8:17:87:96:80:ad:bd:6f:61:f3:67:c6:9b:b4:
                    9c:7c:9b:a7:56:15:14:67:95:19:62:04:87:8c:31:
                    35:3b:dc:69:1f:d4:a7:a2:f6:46:90:e7:a6:1c:74:
                    7d:37:74:5d:3a:53:b7:e5:14:63:a5:95:e4:17:b2:
                    6a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F7:20:BF:84:E2:1A:10:4F:6F:51:D5:DF:F2:2D:C9:46:15:58:2C
            X509v3 Authority Key Identifier:
                keyid:0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:12:70:26:53:39:5b:f7:9c:b9:ae:c7:3b:11:ea:00:fc:c0:
         db:3f:95:41:17:6f:5f:d2:10:08:c6:8d:2a:10:f9:ce:a2:78:
         05:cf:a2:7f:98:0b:f1:ec:23:54:8b:71:e2:44:39:59:e8:b6:
         f2:61:7c:f1:5f:57:c0:7f:3a:37:a8:27:c5:51:dc:5c:8b:f2:
         01:d8:43:bf:c1:62:bd:d5:d2:1e:da:2c:1f:76:6f:1f:78:8a:
         10:04:fc:e3:9a:71:90:bc:39:24:6d:82:c0:76:82:55:f1:80:
         dd:e3:f8:32:53:c3:61:7c:96:35:70:c1:0f:71:85:0f:f1:a5:
         77:0d:5f:2c:4b:7e:c4:27:63:30:04:fc:12:2a:5a:f0:52:d4:
         8c:09:52:94:95:0e:ef:87:7e:a4:49:95:3d:89:a0:a1:ff:f3:
         29:6b:a6:75:7e:31:35:2c:68:03:f8:a4:48:c1:69:d9:ce:ab:
         76:36:6b:56:a0:a1:4a:0a:38:3b:be:69:5c:71:25:1a:cd:74:
         c9:bc:c2:b2:23:79:6d:2a:ef:2c:1f:b2:e0:fa:0d:a3:da:8c:
         cd:75:a2:c5:26:7b:f8:3c:37:4f:25:5b:ac:90:6d:55:79:ba:
         72:aa:37:e3:fe:45:55:f3:68:2e:55:25:c4:6c:6f:78:26:ac:
         75:85:3f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:24:41 2025 by rpki-client