Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
File:                     CR2q09J9vPlNMAb7-6fh3dXSnxY.mft (raw, json)
Hash identifier:          xRjMdNmYAxZljzQRx86zVCIlydLYaSgZtULBibF6kA0=
Subject key identifier:   F7:6B:D8:15:C4:5C:D0:85:6B:94:F1:C3:07:13:62:68:1E:8F:13:53
Authority key identifier: 09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
Certificate issuer:       /CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Certificate serial:       019748FA5BCFE2E370D0F01ACE49840A2987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
Manifest number:          063A
Signing time:             Sat 07 Jun 2025 06:00:56 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:56 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:56 +0000
Files and hashes:         1: Bd7FcffIWEfbujnp9WS-BYRh8lY.roa (hash: 1aqbGtOUu0Pm7rzIGfOGmwYKjDdAbGNYXLp563xVUt0=)
                          2: CR2q09J9vPlNMAb7-6fh3dXSnxY.crl (hash: JdWxBX4409hrTuNe6xDZ8qcAEyOLsSu4EZNPp4L3UU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:5b:cf:e2:e3:70:d0:f0:1a:ce:49:84:0a:29:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
        Validity
            Not Before: Jun  7 06:00:56 2025 GMT
            Not After : Jun  8 06:00:56 2025 GMT
        Subject: CN=f76bd815c45cd0856b94f1c3071362681e8f1353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:01:76:9d:e0:41:46:07:b7:82:ac:59:11:98:
                    c6:35:0e:b7:ef:3a:49:ee:b8:37:13:f1:b6:94:87:
                    12:62:63:7c:d0:f7:31:f4:9e:c2:e5:72:25:48:fd:
                    84:63:b8:36:c8:de:f5:78:38:ca:88:9f:a8:ff:d8:
                    4f:29:4d:ab:6c:8d:f3:0c:4a:68:17:e4:c8:14:83:
                    d5:f9:5f:a9:11:0f:d2:0a:89:ba:a1:f3:c6:d0:91:
                    c9:b1:55:d0:46:08:c1:aa:12:a3:9f:21:e1:30:89:
                    45:33:b0:b2:52:bf:83:2f:ae:00:29:17:de:dd:ca:
                    83:52:2e:5d:65:3e:51:26:24:0f:38:ee:b2:ad:49:
                    1b:04:fe:5d:32:03:49:0f:9a:00:f1:da:6a:84:39:
                    02:84:a6:6f:18:15:f7:0b:01:18:f3:f5:c9:3e:dd:
                    26:8c:be:76:1e:44:20:2f:a2:69:ef:10:2c:0a:cd:
                    d5:4b:ef:46:da:a5:82:5a:77:a3:03:ad:64:4f:3b:
                    2b:a9:ca:72:ce:d4:39:1f:5c:3f:6d:6f:b8:a8:98:
                    7f:32:22:0c:e5:90:8e:d8:19:09:64:a9:24:a5:46:
                    02:6a:70:07:ce:81:23:e1:36:46:00:b8:ed:72:c5:
                    37:7d:47:4d:cb:ab:28:bc:d1:ed:99:7c:a1:58:12:
                    d6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6B:D8:15:C4:5C:D0:85:6B:94:F1:C3:07:13:62:68:1E:8F:13:53
            X509v3 Authority Key Identifier:
                keyid:09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:30:14:3b:a2:7d:9b:49:1e:2d:98:41:93:76:fd:9b:d5:47:
         e9:bd:3f:3f:72:e0:1a:64:99:fd:bd:00:27:b9:d9:66:3e:53:
         8a:67:38:d6:fb:9e:bf:d6:42:05:5d:a2:cd:21:4d:8d:37:75:
         ca:53:f5:7c:41:2e:b0:6e:39:06:3e:f9:71:af:d7:c7:06:c6:
         ba:82:76:e7:8d:02:3f:ec:84:02:c0:25:e0:5f:8c:02:91:30:
         9c:98:63:03:96:d0:20:2a:57:f0:9f:75:a1:20:5b:c5:83:1e:
         9f:c8:d5:f2:39:f9:5d:c6:28:02:be:da:24:ed:44:af:5b:37:
         1b:5b:de:20:47:b2:ca:bc:d8:f9:d2:82:4c:8e:23:8c:d9:51:
         28:18:c6:05:de:6a:94:ad:cb:1e:63:26:20:eb:19:d8:13:a3:
         b3:de:9e:4e:63:83:68:e4:fa:75:5f:b6:5d:78:2d:03:56:3b:
         86:3f:4f:20:42:db:0d:f2:c7:4a:cc:eb:3e:b9:da:fa:05:bd:
         0b:d9:30:03:5a:46:cd:82:e3:41:85:d6:22:11:e6:a2:61:0c:
         7c:8c:ec:ff:a1:91:21:6e:6b:64:1e:bb:20:74:f0:c1:7a:09:
         93:ad:90:09:b1:8d:34:2a:e0:a1:04:38:6a:18:4f:77:5b:50:
         68:c5:5a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:11:15 2025 by rpki-client