Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
File:                     rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft (raw, json)
Hash identifier:          4EWfprpyIp/Y+6LUv/kCk+oJMrQKmwzB3vtbsF6OmSg=
Subject key identifier:   96:F0:C2:68:1A:93:95:29:49:D7:49:FF:92:72:3E:DF:78:94:60:C9
Authority key identifier: AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04
Certificate issuer:       /CN=ad3cc1a7870b610c355c6ec299b166edaba3df04
Certificate serial:       019759B6FD4F827A4F51A8661A8C1E2AAAA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
Manifest number:          07CA
Signing time:             Tue 10 Jun 2025 12:00:53 +0000
Manifest this update:     Tue 10 Jun 2025 12:00:53 +0000
Manifest next update:     Wed 11 Jun 2025 12:00:53 +0000
Files and hashes:         1: rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl (hash: /Hl5Mq2YV5ds0H9yGEVPe0AcBiqbHDrzRJ4PuUu+LR0=)
                          2: tFQcfPCSB6BXqTTZvhFAhl-OS0Y.roa (hash: gDfDS8wP6pJ9Ytao7oOOdrquqvAnErNK/1uv1jTII9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:b6:fd:4f:82:7a:4f:51:a8:66:1a:8c:1e:2a:aa:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad3cc1a7870b610c355c6ec299b166edaba3df04
        Validity
            Not Before: Jun 10 12:00:53 2025 GMT
            Not After : Jun 11 12:00:53 2025 GMT
        Subject: CN=96f0c2681a93952949d749ff92723edf789460c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:85:32:d2:f6:71:95:2c:81:1e:02:23:3e:f3:
                    27:70:ee:e9:2b:e9:f4:cd:90:df:7d:26:20:fd:cc:
                    90:8b:c2:09:50:48:ad:24:67:1f:b6:e1:89:60:dc:
                    61:20:c7:d1:99:2d:6d:40:37:cf:85:cf:34:1e:14:
                    c3:fe:d1:67:54:df:08:ea:1c:a0:18:81:63:ea:10:
                    97:53:84:c4:7f:1f:3b:fa:b4:35:a5:5a:37:1d:92:
                    cf:ae:7c:18:58:ac:18:92:ec:66:2a:93:6a:14:8b:
                    6a:b6:0c:a0:b4:2b:c3:9e:98:2b:2d:c7:71:5b:5c:
                    46:57:64:7b:b3:25:65:12:30:45:5b:22:1e:10:99:
                    c1:cc:b2:a0:7f:9d:e3:95:a8:3d:ce:b0:ab:a1:d6:
                    3c:cd:c4:2a:53:f6:9e:ed:8f:ff:58:4e:b0:08:00:
                    5d:48:ad:1e:bf:ed:8b:10:dc:81:60:d7:db:ab:6b:
                    e6:65:65:93:8e:5e:7d:0a:38:19:9b:13:1f:7d:1f:
                    64:ee:1f:bd:a0:5c:1c:0b:b5:58:57:5a:ea:a3:cd:
                    4b:83:af:ed:05:fd:5d:e7:0f:73:17:40:1f:53:dd:
                    0f:d0:87:8f:5e:8b:c1:67:ca:22:a8:b9:85:70:ba:
                    25:3c:bc:46:77:cf:ea:01:fc:ce:73:bc:cc:79:a8:
                    9d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F0:C2:68:1A:93:95:29:49:D7:49:FF:92:72:3E:DF:78:94:60:C9
            X509v3 Authority Key Identifier:
                keyid:AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:4a:7b:fb:ba:cc:74:b4:65:98:fe:a7:23:4c:e4:47:9a:32:
         b5:81:b6:37:6b:1c:72:2f:9d:b7:a9:92:93:62:23:4e:0f:26:
         f2:5f:db:e5:55:54:2a:76:a8:88:09:c4:4c:b1:2f:c6:65:8a:
         86:f9:b1:4a:ae:68:2f:6c:58:f8:05:0c:e5:d9:92:ab:54:b1:
         a9:a4:6a:97:de:c0:a2:da:bf:3d:ed:bd:28:ab:05:c7:aa:87:
         d5:ad:50:90:2e:7e:a6:98:14:4d:cf:9c:a0:59:c2:18:12:52:
         62:83:08:7f:2a:d4:bd:8c:2c:3a:6f:53:c9:93:2f:88:5a:09:
         83:d4:bc:52:c6:db:2a:83:60:50:ae:76:a2:d7:77:12:96:b5:
         8e:c7:4e:e0:bd:fd:d0:3e:15:62:b5:87:5e:ac:eb:33:79:b1:
         dd:86:be:6d:0a:c7:3f:4d:29:a9:a4:ad:0f:ad:95:6c:0e:80:
         59:ce:fc:25:51:62:af:f8:74:e5:0c:b8:fd:f6:3d:c6:e0:37:
         32:bf:b1:c6:c9:a3:32:c4:af:0e:9b:84:ef:21:4f:6c:df:77:
         5d:09:a7:04:9e:13:44:6e:b1:68:ee:c7:68:25:81:41:f1:62:
         b4:dc:2f:50:86:60:e8:f9:21:52:61:89:a2:af:63:d3:33:15:
         1a:00:ab:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:16:49 2025 by rpki-client