Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft
File:                     _0t7padsE3FS0NDzUk_WIBuBW-8.mft (raw, json)
Hash identifier:          +HZcpIkl5qBsgQuTnLalicUlMHi42/3+mwfhKX+14Gw=
Subject key identifier:   58:2D:79:2E:12:09:3C:9D:F5:24:CC:2A:1F:DB:83:F4:11:4B:55:08
Authority key identifier: FF:4B:7B:A5:A7:6C:13:71:52:D0:D0:F3:52:4F:D6:20:1B:81:5B:EF
Certificate issuer:       /CN=ff4b7ba5a76c137152d0d0f3524fd6201b815bef
Certificate serial:       01976C2B5A84EB52BDB4066A3B8DA6CB5012
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft
Manifest number:          BF
Signing time:             Sat 14 Jun 2025 02:01:09 +0000
Manifest this update:     Sat 14 Jun 2025 02:01:09 +0000
Manifest next update:     Sun 15 Jun 2025 02:01:09 +0000
Files and hashes:         1: _0t7padsE3FS0NDzUk_WIBuBW-8.crl (hash: 08vkwztPDu1IonlGObLsMKsE3BmUV5QR6wB5JJW8Mk0=)
                          2: dzWaTBaulL5kl6N51Aq9Q2INFwQ.roa (hash: qCU96anqXB1vi9FIqkKYJeT2OcA8oxOe7J0O6GEIhmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:5a:84:eb:52:bd:b4:06:6a:3b:8d:a6:cb:50:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff4b7ba5a76c137152d0d0f3524fd6201b815bef
        Validity
            Not Before: Jun 14 02:01:09 2025 GMT
            Not After : Jun 15 02:01:09 2025 GMT
        Subject: CN=582d792e12093c9df524cc2a1fdb83f4114b5508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7a:4a:b3:37:7f:a8:85:d9:8d:69:81:64:6a:
                    13:b4:ec:8f:10:fa:83:d8:18:93:76:8b:a7:19:d5:
                    71:ba:a9:99:30:a9:89:2d:f5:f1:00:c2:0f:c4:8b:
                    be:e7:f7:60:f6:87:0f:62:70:9b:ee:60:64:b3:4a:
                    aa:8e:8c:5d:fe:e7:ad:ca:13:70:d5:8a:d6:07:c9:
                    4e:93:fe:d5:a8:22:c4:1f:08:da:3f:e6:0b:9f:f0:
                    04:e6:71:47:40:86:b9:aa:a9:d0:7d:62:3a:3d:02:
                    9c:67:18:6a:50:b8:46:a9:d0:68:ee:69:ce:aa:da:
                    bb:98:f4:b3:65:aa:0d:91:92:ea:21:51:cf:c0:e6:
                    0b:47:b3:0d:45:b4:5c:a2:76:38:59:e1:00:f4:72:
                    5c:fc:2b:5e:ad:87:47:85:ee:7f:b2:9e:94:a5:90:
                    5e:29:90:7b:1a:49:dc:5d:2c:49:50:4e:da:10:dd:
                    d5:69:79:35:96:98:04:af:f1:b5:ea:a0:20:49:a3:
                    2a:91:47:0f:72:98:fc:2f:31:5f:52:82:d5:fc:1b:
                    0a:e6:07:3b:94:b6:29:2d:ba:45:af:fe:53:1c:a2:
                    30:3d:e8:cf:bb:60:f9:bb:fc:c2:69:d2:10:55:18:
                    1d:f1:3d:59:3a:3a:76:6d:e3:55:a3:60:f3:9f:a2:
                    7d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2D:79:2E:12:09:3C:9D:F5:24:CC:2A:1F:DB:83:F4:11:4B:55:08
            X509v3 Authority Key Identifier:
                keyid:FF:4B:7B:A5:A7:6C:13:71:52:D0:D0:F3:52:4F:D6:20:1B:81:5B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:b3:27:f9:cb:10:a0:2a:62:f0:25:fc:cc:e8:06:6f:3e:76:
         24:05:49:06:0f:39:d7:2c:ed:29:1e:09:51:79:39:10:b4:44:
         e6:09:d0:44:be:43:bc:39:66:27:dd:8a:fb:ea:3f:2a:7b:e7:
         60:23:a4:95:0e:8d:2d:c1:40:82:b5:ab:67:77:c6:b5:38:72:
         bd:79:f0:9d:7d:10:ce:1c:3b:75:06:01:35:31:d0:7d:98:05:
         a1:84:58:a0:63:18:e2:84:0a:8a:38:b4:59:95:a0:5f:45:e1:
         bb:05:ce:2f:b1:00:25:8f:05:13:f8:c0:0a:59:df:18:66:6f:
         de:14:69:a2:9b:ef:f3:a6:78:b8:be:c2:fd:e9:ec:9f:31:a1:
         f1:18:e7:48:72:67:d2:fc:33:6c:28:28:17:e5:40:e1:1e:2e:
         a2:53:53:77:03:82:e6:d5:03:d7:6d:ec:d2:42:fa:59:a4:b2:
         55:81:54:fe:87:1e:6c:8e:5a:7d:51:64:01:42:4b:97:31:ef:
         58:3d:49:ea:5f:54:dc:e6:49:db:4b:88:50:dc:b5:ad:cf:39:
         8f:79:86:5f:47:27:00:9b:19:54:8d:74:07:a8:bf:35:2d:93:
         08:c9:7c:0e:dc:cb:96:0e:80:c7:9f:3f:a2:75:e7:ce:33:1b:
         5f:d1:e6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:21:36 2025 by rpki-client