Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
File:                     F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft (raw, json)
Hash identifier:          JOo3yW4ZbtAkpo/1fWTRj3TgZKmidw+14HJtklbGZIE=
Subject key identifier:   D0:CC:9B:18:59:89:6B:FF:1C:EF:35:40:D9:7E:6C:5D:6B:78:B0:A3
Authority key identifier: 17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
Certificate issuer:       /CN=17972d43835cd6a66e54e5a5856ce57de282d43a
Certificate serial:       0197643AB410F4F3DEE0A24B81D3AF5A9A46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
Manifest number:          0C84
Signing time:             Thu 12 Jun 2025 13:00:58 +0000
Manifest this update:     Thu 12 Jun 2025 13:00:58 +0000
Manifest next update:     Fri 13 Jun 2025 13:00:58 +0000
Files and hashes:         1: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl (hash: matPC3Cp6D9MMNhb3t6XxI3g4Z/ElMH2cBiG+pLjCNc=)
                          2: nD9K7BuoobBm0UoH5h6nnInzZ5M.roa (hash: n+EpS4FTLeyovvcIgss8uVwl4+ZqeSqmuV4HpNA3yWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:3a:b4:10:f4:f3:de:e0:a2:4b:81:d3:af:5a:9a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17972d43835cd6a66e54e5a5856ce57de282d43a
        Validity
            Not Before: Jun 12 13:00:58 2025 GMT
            Not After : Jun 13 13:00:58 2025 GMT
        Subject: CN=d0cc9b1859896bff1cef3540d97e6c5d6b78b0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dc:9e:ee:34:d7:05:bb:a5:74:da:ba:99:d5:
                    9c:c2:c2:c0:92:6b:b7:cc:06:ac:ab:96:b4:16:09:
                    38:a5:17:bd:d5:6d:36:fd:99:b7:9a:2f:05:96:eb:
                    57:35:31:ce:45:3c:b1:84:83:5f:e4:fa:c8:bb:a6:
                    4c:8b:09:a7:b8:01:16:39:2f:71:e1:d9:9d:69:8d:
                    54:6f:86:16:5e:3b:cb:54:e7:76:33:c2:e4:79:c5:
                    b4:de:38:ac:bb:36:43:dd:58:8e:1b:fc:0b:98:15:
                    6f:b9:3d:5b:56:01:8a:d9:77:c1:06:9e:f7:18:94:
                    75:bb:10:cf:23:38:da:39:57:a5:83:83:c6:34:42:
                    35:eb:33:d0:d7:93:5e:db:3d:8b:6e:39:eb:51:5c:
                    94:0f:97:d0:97:3d:92:20:00:89:1b:24:71:c1:56:
                    23:16:6f:4f:39:fd:30:4e:fc:d6:50:cb:df:12:26:
                    ea:09:d7:5f:fb:47:4e:39:2e:49:09:84:ab:c0:b1:
                    db:a7:eb:99:ff:e2:76:7b:71:2e:96:68:f5:fc:1c:
                    41:93:4d:09:14:da:6b:ee:81:12:97:3d:6f:b2:31:
                    a6:88:75:85:11:fe:a4:35:82:a3:a8:f5:65:82:86:
                    a7:5e:17:1a:cb:3e:04:4d:e9:06:fe:7c:c7:41:03:
                    c5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CC:9B:18:59:89:6B:FF:1C:EF:35:40:D9:7E:6C:5D:6B:78:B0:A3
            X509v3 Authority Key Identifier:
                keyid:17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f9:c7:f3:06:a3:25:ea:8d:e6:25:2a:7c:83:a9:28:db:d5:
         04:4c:58:dd:f3:fc:30:de:21:5e:6a:45:ec:fe:7f:fb:61:95:
         cc:d3:53:72:d2:d8:6f:2f:5a:11:70:9f:71:eb:a2:38:e7:97:
         8c:75:70:e3:b4:61:de:0c:89:99:dd:47:11:88:05:64:79:b4:
         2f:ca:2e:e1:18:61:52:1c:ea:66:9b:7b:3d:2c:49:07:37:c4:
         0d:89:fa:8b:e8:af:31:93:a7:f9:27:50:e5:07:bb:9f:44:2f:
         c4:70:08:1d:1b:f7:ba:42:c2:0b:e1:2e:58:9e:36:bf:91:b6:
         df:1d:d4:ae:65:5d:a9:83:fb:5e:ae:ee:ea:49:dd:99:0e:29:
         08:6a:13:ca:aa:70:bf:07:f9:7e:3f:23:7e:91:29:22:a8:ed:
         d6:d5:f3:ed:10:44:42:ec:23:de:5e:48:2e:62:db:d4:7c:ec:
         0d:69:d8:73:c8:7b:c1:cb:59:cf:b9:54:8e:f7:75:75:68:4a:
         7e:64:2d:6c:bf:0a:0f:ea:57:03:30:ed:08:ea:9d:19:2e:23:
         cc:1d:d1:d7:fb:8c:79:b0:cf:e3:db:4c:41:ba:69:f5:e0:4b:
         d5:5d:9a:f1:a6:c4:7e:2a:d4:91:1b:d1:9a:ad:71:6a:ba:3f:
         3c:cc:26:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 00:03:27 2025 by rpki-client