Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
File:                     35BBVe46z-P-qLv-6G6XxYyJkfQ.mft (raw, json)
Hash identifier:          iKIMz3ick5JTfN7Jg2Y1akWRD+oPo3Khhf+aIBGynjM=
Subject key identifier:   FB:AC:88:86:B8:8D:8F:D0:71:25:3B:08:07:AD:0F:FF:81:67:FB:04
Authority key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
Certificate issuer:       /CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Certificate serial:       0197586D37E8E3A4CAB46C12CCEE95D1822B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
Manifest number:          11AA
Signing time:             Tue 10 Jun 2025 06:00:42 +0000
Manifest this update:     Tue 10 Jun 2025 06:00:42 +0000
Manifest next update:     Wed 11 Jun 2025 06:00:42 +0000
Files and hashes:         1: 35BBVe46z-P-qLv-6G6XxYyJkfQ.crl (hash: 8Ys8DK6VkwG1rbQALUP/p2luaE3G0IeiSS1MWhwfP68=)
                          2: B-nM1GTMLKr4Gk1KLpOo23YK3j8.roa (hash: 0wOg2hC46+mvVWLdy3l+GE8WwSTmGrLshzLKyEpaIwQ=)
                          3: zrrMlICGpdDYFya8WKvO7u0XM-Q.roa (hash: txsRNfUipxo+CqvVL0kXrQvI1GxCBc26tW/8hZA3omw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:6d:37:e8:e3:a4:ca:b4:6c:12:cc:ee:95:d1:82:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
        Validity
            Not Before: Jun 10 06:00:42 2025 GMT
            Not After : Jun 11 06:00:42 2025 GMT
        Subject: CN=fbac8886b88d8fd071253b0807ad0fff8167fb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a5:51:33:c9:d4:a1:91:48:48:e2:e5:29:9e:
                    07:06:8e:b3:43:8c:aa:dc:a4:a3:97:f0:fc:a4:39:
                    44:3a:48:ef:d0:8c:7b:91:4d:7e:fb:a9:ed:12:ce:
                    de:20:8e:0e:9f:e7:6e:75:bc:ef:d8:2a:df:53:b3:
                    fb:ee:c1:7e:e7:5b:69:dc:da:84:8f:29:0c:7f:8e:
                    76:42:7e:79:18:d1:a2:c6:97:06:b4:50:c7:d9:15:
                    3e:36:50:e5:0b:c0:ed:3e:3e:fa:19:e7:30:db:60:
                    7d:c8:26:26:6e:c5:ea:cd:68:10:41:f3:10:1b:18:
                    73:05:b1:fd:c9:9f:e8:16:e0:ea:f8:87:e4:fa:0a:
                    87:a4:a5:e5:10:2d:f5:1e:7b:a3:d4:58:1e:a9:f8:
                    c6:5e:20:c8:70:9c:a8:78:80:b0:7b:1a:64:b4:59:
                    60:23:92:3c:aa:0f:2f:3e:3f:a8:89:d2:a8:a0:27:
                    68:ed:68:09:ca:e1:30:25:10:40:28:46:be:eb:a1:
                    83:f4:41:3c:b3:4d:b3:7e:2e:c3:e8:a0:b0:dd:cd:
                    52:75:c1:93:86:8f:95:d9:9e:3d:96:4b:b8:00:5b:
                    73:eb:c8:ca:0c:50:bc:fb:7b:92:1d:be:3d:45:d3:
                    84:1a:20:c0:49:f9:ad:de:6b:47:a4:03:ec:96:b1:
                    bb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AC:88:86:B8:8D:8F:D0:71:25:3B:08:07:AD:0F:FF:81:67:FB:04
            X509v3 Authority Key Identifier:
                keyid:DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:55:b9:74:4a:1f:70:49:a2:9a:27:8b:97:da:a6:34:af:78:
         72:dc:ed:30:bb:94:eb:71:e8:4b:71:df:56:d5:b8:a0:83:86:
         25:0f:9e:05:79:77:06:f2:f5:14:28:84:2c:3d:85:83:2c:04:
         1e:7f:0d:9c:c2:90:84:17:d9:90:63:d4:c8:a3:36:0e:5c:d6:
         ed:39:84:24:39:65:79:7c:a6:ad:45:02:0f:1f:96:30:2b:29:
         5e:3d:98:85:68:c0:90:ee:f1:3c:8c:c3:cf:4a:f4:00:17:95:
         5a:8b:36:3d:34:55:81:03:3a:5a:ff:11:24:ee:61:d2:be:b2:
         6e:2b:fd:bd:98:36:73:b0:85:30:c6:84:b3:28:6c:45:44:35:
         c5:d6:a0:f9:ba:9a:eb:5c:aa:22:c7:a6:14:92:07:20:5e:08:
         be:93:e6:d3:80:04:22:7d:42:f2:ed:9a:7d:ea:f0:96:24:b6:
         2f:59:13:44:f0:bf:fb:e7:f4:ed:29:b1:eb:7c:52:be:7e:49:
         09:ce:64:a8:f7:d3:39:10:42:22:22:91:b3:58:61:3a:a7:23:
         00:2f:e9:f5:72:c8:df:78:ce:a6:60:cd:e3:8e:3c:a9:a5:d2:
         ad:e2:32:bd:1c:c2:b6:9d:cf:32:e3:59:80:d5:37:dd:80:77:
         f2:08:b2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:40:59 2025 by rpki-client