Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
File:                     DWutPz3QrFVvP3qA0cabn9lk3Ww.mft (raw, json)
Hash identifier:          /JeNlyg7gMzU4oN3wAKXWAIoz1UhqDZ1Gr3C+JnvIQo=
Subject key identifier:   FC:14:42:EF:58:38:14:42:D7:2B:4D:F1:B0:A7:79:87:DC:C3:A2:4B
Authority key identifier: 0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C
Certificate issuer:       /CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c
Certificate serial:       0197684E7B0E668B28F7DF28517D86F71C00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
Manifest number:          0F88
Signing time:             Fri 13 Jun 2025 08:01:03 +0000
Manifest this update:     Fri 13 Jun 2025 08:01:03 +0000
Manifest next update:     Sat 14 Jun 2025 08:01:03 +0000
Files and hashes:         1: DWutPz3QrFVvP3qA0cabn9lk3Ww.crl (hash: SAXJ9/ggtacqGTFvOx8qXf9RNOxYcEYs4F5N0i9u6v0=)
                          2: clB1f_NiIoBJs06I1N2ua9KcprY.roa (hash: Hc2uBMDIF+2ALpimHYsk+DChTWTq8OrIlMci+ZWtnyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:7b:0e:66:8b:28:f7:df:28:51:7d:86:f7:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c
        Validity
            Not Before: Jun 13 08:01:03 2025 GMT
            Not After : Jun 14 08:01:03 2025 GMT
        Subject: CN=fc1442ef58381442d72b4df1b0a77987dcc3a24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f9:16:28:a7:b8:38:15:43:be:ad:d0:b9:81:
                    b8:98:fd:00:49:58:5a:b2:a8:12:17:13:83:c5:8a:
                    74:c2:32:23:84:06:bf:15:ee:62:bb:79:ea:e6:a7:
                    0c:fa:62:4c:de:17:0e:e7:23:8f:b4:6b:cc:91:c5:
                    b4:76:7a:a8:2e:67:51:56:6b:75:94:bd:f2:fd:c0:
                    c3:d8:a3:c5:de:be:85:bf:d7:64:8e:7f:5f:13:bd:
                    36:c8:10:dc:10:19:00:31:3f:e6:ef:1c:9d:a7:14:
                    7e:f1:90:89:27:aa:b7:a8:e8:44:2c:a9:5f:db:2c:
                    6c:96:2b:c9:0c:70:c6:ec:b2:68:a9:bb:30:74:3f:
                    50:f0:76:fe:5c:db:d6:7d:96:f5:81:02:4a:c8:2b:
                    e8:1d:78:e8:e8:64:33:ff:25:db:d5:1f:6b:95:6d:
                    1d:7b:cb:69:a4:a0:bf:1e:62:d7:e7:1b:6c:f2:7f:
                    45:b9:0d:7f:27:80:1f:60:79:c6:8a:eb:47:48:cb:
                    05:db:c6:da:51:03:71:95:8c:73:3b:d4:bb:52:1d:
                    48:df:be:b0:e1:7d:be:31:ab:1a:31:03:d6:e0:aa:
                    37:1c:ff:4b:86:d7:89:d6:d8:90:ca:64:67:54:41:
                    c0:5a:84:20:0c:4b:50:7e:07:2c:8b:35:ec:18:8a:
                    f1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:14:42:EF:58:38:14:42:D7:2B:4D:F1:B0:A7:79:87:DC:C3:A2:4B
            X509v3 Authority Key Identifier:
                keyid:0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:a8:ba:28:c7:53:73:60:9d:82:e2:1b:53:da:14:bb:a2:78:
         8e:2d:d5:cf:98:5b:98:11:b4:04:5f:5c:68:68:68:72:a6:b9:
         72:ef:5f:80:03:35:10:12:f8:d5:1a:3d:b7:8f:4e:79:b8:90:
         ab:97:8d:c7:4f:48:95:cd:f1:c3:62:56:55:9c:38:4c:4f:61:
         d0:66:7c:bb:b5:48:7d:2e:3d:b1:ed:07:3e:66:c3:9d:c5:c3:
         9a:85:ca:69:14:a0:8d:43:49:b3:28:31:85:2b:45:8f:15:58:
         55:38:cd:56:d8:7a:e8:3b:e1:f4:42:5a:a0:86:8c:93:19:e4:
         06:d4:cc:b7:e2:c7:0a:cf:2b:11:38:fd:bf:21:cd:84:9d:39:
         5d:cb:62:95:28:0b:ae:74:94:cd:9b:43:50:73:9f:7d:a5:43:
         b1:74:0f:2c:ac:57:8d:78:ad:19:96:8d:48:93:04:91:b3:90:
         e1:05:b0:89:e0:8d:ba:74:fd:8c:db:b9:5d:1d:00:69:71:1a:
         24:49:6e:a5:3b:54:74:6a:69:79:75:09:db:d8:94:f5:8e:1b:
         b7:a1:19:da:56:fd:ea:d4:9e:cd:97:f7:db:d3:49:9c:11:33:
         26:b1:17:da:5e:53:61:b0:fc:9d:05:b8:07:ed:01:20:c3:5c:
         12:7b:ba:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:32:20 2025 by rpki-client