Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
File:                     DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft (raw, json)
Hash identifier:          qE/TKlJlSMe5Tkn9bH6q1StCu3umffVqEy07wu1p/sE=
Subject key identifier:   6B:AC:AD:9F:77:01:EA:AA:67:BE:6C:87:08:61:C6:FF:25:93:00:1C
Authority key identifier: 0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
Certificate issuer:       /CN=0dd33ca83affbb801172d5094b00e06856e6f547
Certificate serial:       01976584767D49E24524EB6FC15C80E1FB18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
Manifest number:          14F8
Signing time:             Thu 12 Jun 2025 19:01:09 +0000
Manifest this update:     Thu 12 Jun 2025 19:01:09 +0000
Manifest next update:     Fri 13 Jun 2025 19:01:09 +0000
Files and hashes:         1: DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl (hash: Xd/qcGkjvzpdunx/9E/6do4rC8zigjujmphcrt1Q0HA=)
                          2: fvo32ZlXLNUWfNKLhRu-uClyC2U.roa (hash: bzkWT3EH+ccZpwHViIEHvMRRGrNUoXsGOv/sbjZrV0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 19:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:84:76:7d:49:e2:45:24:eb:6f:c1:5c:80:e1:fb:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dd33ca83affbb801172d5094b00e06856e6f547
        Validity
            Not Before: Jun 12 19:01:09 2025 GMT
            Not After : Jun 13 19:01:09 2025 GMT
        Subject: CN=6bacad9f7701eaaa67be6c870861c6ff2593001c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:93:c8:43:05:7d:cb:1e:6c:67:43:55:f2:
                    b0:d8:dc:4d:7d:c0:9b:f6:9e:72:4c:b6:da:af:12:
                    46:0b:51:82:92:0f:b3:03:a7:b1:ad:36:4a:ef:74:
                    26:84:85:57:d9:6a:b3:d9:08:f8:b6:d2:c4:1e:00:
                    8b:66:86:cd:c2:57:8f:e9:0c:de:71:7b:db:c6:19:
                    94:13:03:a7:bf:10:53:6c:65:42:6a:ed:5e:4f:b5:
                    7a:12:c3:74:91:6d:34:e5:0b:d1:70:1e:93:fb:37:
                    09:3d:a3:04:f3:74:b3:d3:c5:ee:db:0d:3e:ab:b4:
                    9a:bb:58:df:6c:46:aa:e8:57:45:97:ff:47:4d:5d:
                    bd:09:11:68:7a:21:97:d2:2d:79:87:c2:e0:77:55:
                    89:58:66:14:fd:6b:c0:aa:6c:de:81:cb:e1:83:5b:
                    7a:2e:1f:1e:28:ed:19:34:2b:ea:d2:06:19:f3:ad:
                    a3:be:15:ec:5e:e5:76:d6:22:d0:3a:a7:f0:5b:d1:
                    ae:b9:2b:eb:79:c1:d1:21:98:fa:e3:19:f8:87:36:
                    9a:15:e3:7c:f0:78:33:e6:76:e6:fd:ad:f2:3b:dc:
                    fc:d7:1c:ff:21:6e:2f:de:7d:28:b4:1e:7f:20:77:
                    b0:19:02:79:f9:d9:84:82:74:fb:82:ca:90:f1:b5:
                    44:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AC:AD:9F:77:01:EA:AA:67:BE:6C:87:08:61:C6:FF:25:93:00:1C
            X509v3 Authority Key Identifier:
                keyid:0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:73:9a:be:7d:d2:b0:90:b7:34:b7:a9:67:5c:b0:c6:3c:48:
         2e:3b:5e:8a:0f:b5:3c:ee:b1:c7:ff:34:77:46:a3:60:cc:04:
         d4:92:97:f8:aa:3d:f8:db:25:b9:af:0d:65:5e:4c:cb:95:4f:
         26:95:db:e6:23:bc:b7:9d:f1:15:cf:6c:05:e7:50:13:3c:7d:
         14:3c:9e:a4:26:67:52:d8:fc:66:cb:ca:d3:40:71:7f:be:60:
         ac:5d:e5:9b:b8:48:a5:d8:43:4e:54:12:bb:65:ac:83:1e:4e:
         be:51:94:d7:c6:2d:ba:db:0c:47:0e:64:52:71:da:2b:c8:c1:
         fb:17:a8:37:77:64:da:1a:20:fd:b7:40:86:ae:de:28:83:20:
         ef:01:00:c6:ae:cc:d5:34:5c:cb:41:d7:b7:cd:54:34:63:f6:
         b3:72:5b:c7:79:43:e1:b7:24:ca:60:4d:14:f4:7a:b9:f9:87:
         7f:8f:1e:ed:fe:bc:1f:43:f5:e5:55:8e:dd:41:38:e3:e2:10:
         77:4a:cb:e8:35:0d:8c:8f:1f:bd:a2:b1:04:7c:d3:09:b1:09:
         af:71:f8:72:45:3f:37:ee:aa:66:6c:be:a1:ea:f6:28:6a:ce:
         9f:4b:4c:bc:e7:92:35:e9:7a:d8:21:71:e9:5f:26:cd:cc:35:
         85:11:83:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 05:04:38 2025 by rpki-client