Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
File:                     dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft (raw, json)
Hash identifier:          oFWmRpq70raoC39D/VqggtbqkXFMq11g0ofV+hWD3vE=
Subject key identifier:   9E:53:98:C5:DA:CB:F1:9C:BF:8A:26:74:E5:15:7E:E6:2E:3C:4B:49
Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
Certificate issuer:       /CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Certificate serial:       0197537DC25A3E0106F6854A45D06756A344
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
Manifest number:          1105
Signing time:             Mon 09 Jun 2025 07:00:40 +0000
Manifest this update:     Mon 09 Jun 2025 07:00:40 +0000
Manifest next update:     Tue 10 Jun 2025 07:00:40 +0000
Files and hashes:         1: JmRIXqWgLbHOS_DUn9tYXP3VwvE.roa (hash: 07OywnLuhNnV2ffg9k1J1SDz7HRBDcbP+ENwBGJ8ZCU=)
                          2: dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl (hash: 4HEjSTjHUw9R3PAd2Py3/mnK9O8SN+pVhTC1qEW/RQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:7d:c2:5a:3e:01:06:f6:85:4a:45:d0:67:56:a3:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239
        Validity
            Not Before: Jun  9 07:00:40 2025 GMT
            Not After : Jun 10 07:00:40 2025 GMT
        Subject: CN=9e5398c5dacbf19cbf8a2674e5157ee62e3c4b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f9:7b:80:aa:7b:dd:a4:bc:64:73:72:85:a9:
                    af:96:af:6f:fb:70:77:4a:cc:00:9f:5c:e4:d2:5f:
                    72:6d:13:43:83:62:88:c2:14:8b:fd:66:bd:e0:0a:
                    a2:41:90:07:64:06:6d:cb:6f:d0:87:3e:eb:37:14:
                    5b:94:e7:29:ad:44:a6:db:dc:d2:ab:49:41:d1:4b:
                    2e:da:83:a4:5a:31:e3:06:0f:2c:fc:3a:08:57:73:
                    37:c7:a5:96:ae:2d:42:7f:74:12:64:dd:c2:61:48:
                    10:9b:20:c2:97:28:77:d3:2d:e0:ce:00:8e:52:37:
                    46:77:af:3a:9e:8a:f5:45:9b:a4:c8:c3:17:31:f8:
                    2b:bd:7d:3d:b4:79:c7:78:ff:84:ad:bd:98:ef:75:
                    4e:10:28:b7:5a:89:35:66:93:e6:ec:db:4a:58:52:
                    0c:3d:70:65:7a:38:2f:7b:59:ed:6c:eb:31:38:5d:
                    2b:ed:93:c3:2d:1b:e0:d3:e8:87:ad:6d:97:e2:c7:
                    7b:56:3f:9a:ab:f4:be:ae:58:ab:aa:ab:da:28:6e:
                    fd:41:3d:52:0a:60:98:4f:d1:a4:3d:e4:43:e2:d1:
                    7e:15:9f:03:3d:cc:51:06:a9:0a:c6:85:62:3f:d6:
                    e0:34:3f:15:d4:fa:fe:70:cb:3f:85:b0:a4:d4:75:
                    8f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:53:98:C5:DA:CB:F1:9C:BF:8A:26:74:E5:15:7E:E6:2E:3C:4B:49
            X509v3 Authority Key Identifier:
                keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a3:3e:7f:af:79:e8:db:a3:2d:f4:30:3b:cf:2f:4f:41:b6:
         63:7f:da:79:aa:92:48:97:c0:29:04:26:d4:d9:10:43:1a:8b:
         7b:66:54:0e:8c:52:3f:43:28:90:1e:d3:b7:70:22:c6:33:72:
         1c:ac:9c:3d:b7:a5:a4:82:0a:2a:f7:35:4f:dd:3d:bf:6d:8c:
         1c:53:da:fe:82:76:16:3d:0e:c7:2f:03:ab:4a:21:c6:15:d4:
         b7:ef:27:e2:c6:a8:f0:7e:2b:09:88:6d:d7:36:2b:52:ae:ea:
         16:37:bf:50:24:9f:7a:6c:26:47:cb:38:7f:f6:d9:ca:d6:ea:
         5b:6c:6a:61:4d:45:7c:30:0d:42:50:35:f3:6f:02:fd:53:94:
         22:c6:d4:3e:8b:42:58:5d:b7:e0:66:6a:0e:d1:ee:4a:8f:b0:
         b4:60:72:b7:70:1f:8b:a9:ae:4e:43:99:4b:bc:52:4d:5a:ba:
         29:33:8e:13:87:f8:1c:6d:f3:96:e6:04:49:81:5f:a4:aa:16:
         78:ca:c7:51:d7:0f:43:41:ec:a3:35:03:77:bc:c1:ee:b5:b3:
         a7:44:4f:bd:99:44:94:af:40:60:4f:34:0b:1f:8c:c6:55:74:
         95:95:95:37:6c:0d:ea:0a:24:c9:e6:63:52:47:5b:0e:96:53:
         24:31:52:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:42:15 2025 by rpki-client