Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
File:                     oJRwOdnwgKQn91JcXQZvbPYhNPM.mft (raw, json)
Hash identifier:          WUtvaOKejlRializo+aCbzIWKyLReA42F2J5JGuAs8o=
Subject key identifier:   4A:3C:F0:13:BF:10:C4:82:F2:FC:10:D6:75:59:B7:10:8F:44:3E:B6
Authority key identifier: A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3
Certificate issuer:       /CN=a0947039d9f080a427f7525c5d066f6cf62134f3
Certificate serial:       01974FD7EA3D13FA15854F7C2D72416B14A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
Manifest number:          06FA
Signing time:             Sun 08 Jun 2025 14:00:39 +0000
Manifest this update:     Sun 08 Jun 2025 14:00:39 +0000
Manifest next update:     Mon 09 Jun 2025 14:00:39 +0000
Files and hashes:         1: 2CUF8fkBOk7BwaT2x7tRMW9KGPA.roa (hash: czarYHJez6qAV6nXVQK9tcHYXpAXKKAJjoacYgptlzg=)
                          2: oJRwOdnwgKQn91JcXQZvbPYhNPM.crl (hash: NmRE848vrLTDAZz57K4DbyOLU1tNHEmX1agOkiBkHCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:d7:ea:3d:13:fa:15:85:4f:7c:2d:72:41:6b:14:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0947039d9f080a427f7525c5d066f6cf62134f3
        Validity
            Not Before: Jun  8 14:00:39 2025 GMT
            Not After : Jun  9 14:00:39 2025 GMT
        Subject: CN=4a3cf013bf10c482f2fc10d67559b7108f443eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e6:a2:6e:36:31:41:c2:2c:45:be:8c:1b:8f:
                    0e:ba:8d:60:95:ae:89:39:f8:aa:1e:dd:ac:f6:b5:
                    a6:f7:83:05:08:bb:1f:04:18:89:4a:6a:79:9c:2b:
                    7c:60:81:e8:b1:8d:84:9b:b8:91:33:4b:ca:02:1e:
                    fe:ff:8e:2b:cf:03:d9:92:94:58:ed:6b:1a:a3:15:
                    42:23:2f:44:03:b9:60:30:27:fc:e0:2a:f7:04:40:
                    e8:3c:d2:1e:98:fb:95:bc:5d:94:13:c9:6b:c0:7e:
                    ad:a9:53:f2:ab:0f:1a:0c:0d:6e:dc:2a:8a:b9:89:
                    d6:03:9e:b2:f0:95:90:b8:aa:21:89:6e:b6:9f:a3:
                    aa:61:23:af:50:a6:cf:6d:87:f8:cc:dc:f7:48:3c:
                    a4:d0:3e:54:e0:cb:17:cb:dc:9a:db:0f:dd:a0:b4:
                    28:96:23:76:91:bf:4f:5d:80:a4:ab:a4:27:fc:e3:
                    1d:b5:2b:f5:0a:cc:ad:94:62:ad:e8:94:6f:47:29:
                    68:e5:ce:fd:1e:04:a2:8c:9d:ce:bd:d6:e1:bd:6b:
                    28:04:48:c7:ae:bc:74:f5:ae:72:2a:bf:21:22:a1:
                    83:c9:52:52:85:c3:cf:58:d0:1c:79:75:d2:60:7f:
                    b6:09:0a:d0:13:bd:8a:1b:da:de:98:3a:a4:a8:52:
                    1c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3C:F0:13:BF:10:C4:82:F2:FC:10:D6:75:59:B7:10:8F:44:3E:B6
            X509v3 Authority Key Identifier:
                keyid:A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:81:c6:9e:d4:78:67:e3:67:cf:58:a3:94:c2:72:e4:68:c5:
         02:b4:39:8a:2e:fa:17:80:b0:f4:3d:00:5d:b3:4b:7a:37:20:
         cb:f7:8d:5f:2c:9f:1f:f7:e2:d5:d5:e5:13:cd:19:b8:9b:3d:
         1e:ae:15:0c:77:f3:07:2a:7a:4e:4a:80:ae:aa:2c:a6:2c:c3:
         c0:00:4d:23:dd:5e:ae:ec:cf:8c:70:fc:55:9b:6b:c3:db:f3:
         ca:6e:9f:34:5b:02:95:fc:0c:34:8c:1d:71:7e:d2:37:a6:a7:
         49:da:d7:11:1a:37:2e:4d:6d:65:af:9d:f3:f3:39:e7:05:c2:
         1b:43:ce:37:08:0a:45:7e:79:7c:f9:7b:05:79:e0:a6:d6:40:
         74:eb:b5:7f:45:88:c0:51:9e:fa:0f:4f:ac:4c:6f:68:0d:f3:
         39:22:69:d7:10:2d:bd:b8:20:53:4f:5a:50:d4:61:7f:70:d3:
         b9:29:1e:df:b9:39:ca:28:a7:6f:23:e2:2d:8f:95:67:0c:34:
         d6:fa:87:b2:ad:46:ac:88:51:19:6e:69:3e:64:03:c7:49:20:
         8d:be:ef:bf:54:47:9c:c0:be:ea:a3:d7:1c:09:87:3b:1c:3b:
         89:80:82:a9:62:50:41:72:e0:15:18:04:70:13:a4:8d:38:21:
         d2:69:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:19:20 2025 by rpki-client