Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft
File:                     _0t7padsE3FS0NDzUk_WIBuBW-8.mft (raw, json)
Hash identifier:          BlwRpYkBk99VO4YDKXk1Y2PS2DD5cHRFWOVfe72MbG0=
Subject key identifier:   33:C1:5D:48:CE:6F:41:4E:62:70:B7:CC:F0:E6:90:C9:C8:12:12:F9
Authority key identifier: FF:4B:7B:A5:A7:6C:13:71:52:D0:D0:F3:52:4F:D6:20:1B:81:5B:EF
Certificate issuer:       /CN=ff4b7ba5a76c137152d0d0f3524fd6201b815bef
Certificate serial:       0197647142BB4CBA791975D3A80AB9412FC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft
Manifest number:          BB
Signing time:             Thu 12 Jun 2025 14:00:33 +0000
Manifest this update:     Thu 12 Jun 2025 14:00:33 +0000
Manifest next update:     Fri 13 Jun 2025 14:00:33 +0000
Files and hashes:         1: _0t7padsE3FS0NDzUk_WIBuBW-8.crl (hash: uyta03YkJWTtKeRRxWk+w/r7dYeQUmLzxFCx0iwvwZE=)
                          2: dzWaTBaulL5kl6N51Aq9Q2INFwQ.roa (hash: qCU96anqXB1vi9FIqkKYJeT2OcA8oxOe7J0O6GEIhmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:71:42:bb:4c:ba:79:19:75:d3:a8:0a:b9:41:2f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff4b7ba5a76c137152d0d0f3524fd6201b815bef
        Validity
            Not Before: Jun 12 14:00:33 2025 GMT
            Not After : Jun 13 14:00:33 2025 GMT
        Subject: CN=33c15d48ce6f414e6270b7ccf0e690c9c81212f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7a:cd:96:d5:93:48:30:98:e2:ec:33:1a:8d:
                    d6:e1:c7:8d:1e:6e:4b:71:57:4f:49:bb:a0:de:52:
                    a5:1d:d2:bc:97:f7:36:66:68:83:c0:a9:70:e8:dd:
                    53:88:7b:8b:71:e5:07:da:64:9b:37:4e:05:5c:e7:
                    b8:ca:a6:63:4f:1d:ec:a2:4d:18:c1:84:e7:cb:e9:
                    ad:c3:f3:6e:a3:05:71:4e:f3:17:76:bc:24:ff:2e:
                    cd:03:7f:00:04:8e:44:43:4c:52:be:6d:8c:d2:cd:
                    f6:18:5b:9f:a2:2b:ac:7f:39:90:9a:19:84:39:68:
                    b8:38:d7:9a:2f:25:4a:45:0c:91:15:e8:76:3f:09:
                    30:aa:96:99:b1:1a:b0:cc:a0:eb:6f:b5:a4:07:3f:
                    30:09:b6:61:df:b0:d1:89:60:13:08:1e:d8:eb:29:
                    2f:7f:8f:b2:fe:7e:7a:b3:a1:df:78:0e:e2:0c:2d:
                    3d:06:88:e4:60:b8:8f:0a:8a:79:c4:13:1d:89:ee:
                    de:80:86:ec:64:b8:27:47:3d:4c:42:3a:5b:af:4d:
                    72:20:50:f5:52:f2:35:a5:a8:1a:24:26:68:8a:dd:
                    78:ad:dd:42:37:7d:de:e3:fd:e3:f0:b7:06:49:e3:
                    83:7e:60:f9:39:89:9a:91:02:dc:af:52:12:4e:1f:
                    eb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C1:5D:48:CE:6F:41:4E:62:70:B7:CC:F0:E6:90:C9:C8:12:12:F9
            X509v3 Authority Key Identifier:
                keyid:FF:4B:7B:A5:A7:6C:13:71:52:D0:D0:F3:52:4F:D6:20:1B:81:5B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:70:c3:b8:6b:af:98:05:29:3d:4b:5e:8e:cb:2c:11:77:86:
         b0:a7:3f:30:a2:30:63:26:6c:bc:71:2f:05:38:bd:18:dc:7c:
         f6:7a:54:36:f7:d7:79:e9:c2:f6:c2:e5:06:f3:03:71:1c:09:
         c0:e2:65:c5:85:a3:34:a4:5e:53:6e:b4:6a:05:45:59:19:a0:
         85:9e:45:41:e9:11:18:27:ba:87:46:93:14:9f:df:f0:03:6c:
         63:d6:ce:be:8d:d0:36:d3:d9:86:d3:88:e8:4a:7a:6e:2f:f5:
         f7:af:1d:26:5d:bc:7b:13:a7:19:bc:80:91:99:95:96:3a:0c:
         90:27:fc:ef:e7:85:bb:ca:30:73:72:92:03:14:44:ea:54:7e:
         c8:ab:22:aa:a1:2e:87:da:b8:1d:8b:8c:0f:8e:61:cd:9d:47:
         09:37:a0:48:49:99:c0:f5:c1:04:18:42:32:05:aa:94:d3:a1:
         a9:62:db:2a:d2:48:fa:4b:23:16:3a:41:c7:8d:93:44:42:4e:
         a4:29:e6:18:7a:50:fd:62:7a:00:d2:84:e7:01:2b:f3:f7:5f:
         62:79:90:da:51:b4:45:a2:d4:7d:c9:8d:02:9e:5c:57:13:ea:
         37:f5:ed:34:1f:5b:ae:4f:ea:64:39:97:c1:68:6b:47:5f:66:
         ea:e8:74:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:52:49 2025 by rpki-client