Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
File:                     DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft (raw, json)
Hash identifier:          DyWCt9tXecYjbXZ+VJ6MBocpG+/UP/U51r8kxEwm62E=
Subject key identifier:   D6:9C:64:AB:30:61:91:49:E8:B1:8E:47:49:08:F3:6D:45:38:49:C4
Authority key identifier: 0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
Certificate issuer:       /CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Certificate serial:       0197469D87BAF2F4801F8D4AF76B93B3B9F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
Manifest number:          07A0
Signing time:             Fri 06 Jun 2025 19:00:18 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:18 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:18 +0000
Files and hashes:         1: DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl (hash: wXJSY1fVb8EXpzaNfVbxQftkWdVoq7qi2cKg5geDfLA=)
                          2: vyoLOYF7hsLBOGjck5t3unLW39g.roa (hash: zHMbGWldBzia3+X0+26y7vhQZZJp5fFWFDYQyTykG6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:87:ba:f2:f4:80:1f:8d:4a:f7:6b:93:b3:b9:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
        Validity
            Not Before: Jun  6 19:00:18 2025 GMT
            Not After : Jun  7 19:00:18 2025 GMT
        Subject: CN=d69c64ab30619149e8b18e474908f36d453849c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:29:14:d7:5b:19:fa:16:fd:0a:49:27:11:
                    7c:98:cb:27:5e:f3:97:d8:f1:4d:f2:9d:7c:ae:c6:
                    a8:10:3a:4a:4e:df:0f:94:03:82:8f:ce:78:6a:70:
                    53:66:bf:fb:d5:38:64:c1:4d:39:7f:c3:25:b5:94:
                    26:1a:2a:25:bd:a3:34:aa:05:81:70:c6:68:fd:2b:
                    d2:8c:26:62:e7:f2:51:3a:f7:f6:9c:24:07:59:bd:
                    53:b8:66:d1:ab:a1:09:03:e0:f6:bd:c9:6e:9a:89:
                    e9:22:58:ec:84:5d:a0:9c:5c:70:01:58:82:56:10:
                    da:db:27:56:b1:b9:38:b8:db:b4:6e:7f:af:d4:ca:
                    f6:39:fe:f7:8d:87:8f:e0:80:f4:86:31:88:bf:db:
                    ce:42:b1:f2:6b:41:80:55:25:1b:08:76:0b:dd:4a:
                    c4:ce:65:69:4a:a9:be:2c:ed:cd:f3:a6:a5:87:ae:
                    53:9c:19:57:d7:85:72:fb:a4:dc:f6:c0:cb:33:0a:
                    08:00:34:1b:58:5c:9e:37:80:57:48:16:47:39:07:
                    57:1e:d2:3e:64:44:6f:57:e3:41:05:87:00:cd:1b:
                    48:f6:0f:34:e6:a0:0b:a2:47:63:13:b5:7e:55:e7:
                    83:5e:df:f4:b4:21:c5:0b:13:12:21:94:dc:1d:4b:
                    47:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9C:64:AB:30:61:91:49:E8:B1:8E:47:49:08:F3:6D:45:38:49:C4
            X509v3 Authority Key Identifier:
                keyid:0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:56:81:00:cc:bd:98:95:76:5d:9b:54:42:63:cd:52:90:7f:
         30:42:10:3b:27:0b:ea:ca:3b:5e:ec:a6:53:9e:a8:e7:01:12:
         d2:8b:55:7d:65:22:40:72:df:e3:fd:75:98:cf:4e:5f:30:73:
         c4:83:de:d2:25:ea:75:08:16:cb:54:e3:1c:1b:87:e4:92:63:
         f3:35:f4:ac:7d:e3:5d:ef:9d:a5:bc:b8:15:f7:a9:1c:6a:3a:
         0c:76:47:3c:1c:2d:e3:f6:ac:ca:c9:d3:27:20:a8:25:f8:f3:
         07:26:81:0b:6f:29:98:fb:fa:5a:82:c3:7b:0f:fc:56:e0:67:
         ea:c9:2d:d4:fc:e5:8f:da:23:ab:bb:b7:90:53:35:a1:63:b0:
         c9:88:45:ce:22:38:b0:dd:54:82:37:51:3e:02:f6:73:bd:cb:
         bd:29:8d:96:10:42:59:05:e9:15:72:2f:84:e5:db:9d:31:d0:
         f0:12:e3:f1:6d:20:89:22:56:a3:90:7d:ab:0d:14:36:c0:7a:
         ff:f0:db:81:b1:0e:c5:7c:57:18:48:ad:47:f3:18:1e:e2:7b:
         58:3a:00:9a:2a:8e:ba:3f:50:a5:8b:04:7a:24:68:64:12:f6:
         c8:22:20:21:02:24:c6:db:4d:27:93:6a:85:a8:99:93:1e:30:
         34:c2:5b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:16 2025 by rpki-client