Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
File:                     ddUf2ReUrgygfzkwcw0Gmqwbku0.mft (raw, json)
Hash identifier:          Q3qVVzDFeftSD8x3pg2x5Q81ec1dz+A8AoE0rKyatvI=
Subject key identifier:   25:56:D3:D7:58:BD:C9:35:1E:2B:67:BD:92:1B:DC:49:B7:4B:FB:9B
Authority key identifier: 75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED
Certificate issuer:       /CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
Certificate serial:       01974CD72DCB148F22FB87EA8487DA2AE494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
Manifest number:          BB
Signing time:             Sun 08 Jun 2025 00:00:59 +0000
Manifest this update:     Sun 08 Jun 2025 00:00:59 +0000
Manifest next update:     Mon 09 Jun 2025 00:00:59 +0000
Files and hashes:         1: ddUf2ReUrgygfzkwcw0Gmqwbku0.crl (hash: KvZzGUy48bgyf3igIwMf97KhLiqRflrZDxDfbfjhA1s=)
                          2: ggnUuCiiw5KDxP7VC2MuE-m18jg.roa (hash: hCPwze5ka3HW9b6kkZEr86kyUHzmDg3+6W3Ek9YCVgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d7:2d:cb:14:8f:22:fb:87:ea:84:87:da:2a:e4:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
        Validity
            Not Before: Jun  8 00:00:59 2025 GMT
            Not After : Jun  9 00:00:59 2025 GMT
        Subject: CN=2556d3d758bdc9351e2b67bd921bdc49b74bfb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:59:b6:8c:7c:cc:0b:2a:39:d4:18:fc:fd:8a:
                    4a:17:61:84:9f:ac:e7:0a:0e:47:08:87:5c:9c:bd:
                    30:1c:09:b9:d4:54:0e:ed:e8:e9:c4:de:ea:d8:55:
                    71:2a:07:61:fd:ee:f8:d8:75:78:ba:80:26:13:51:
                    3d:f9:26:36:45:96:9f:e8:ce:14:07:ae:3d:15:13:
                    32:36:96:06:18:70:b2:19:b5:99:03:d6:4c:ce:a6:
                    10:c8:53:6a:26:bb:f9:e9:8b:c2:42:de:f9:c3:64:
                    91:61:29:d4:1e:5b:9c:94:ad:0f:c4:66:f8:fc:1b:
                    f8:da:2f:aa:ae:f0:dc:01:f2:e0:a5:31:f7:7b:fc:
                    ac:ff:52:69:96:02:ff:70:ec:cb:4d:3f:37:2b:2b:
                    41:c3:b2:ce:fa:1d:b4:fb:55:44:04:e0:e2:1a:88:
                    23:c7:d9:25:03:5b:ea:7c:c7:5c:55:cc:27:10:7b:
                    64:8f:4a:d5:6f:c1:8f:8a:94:83:1c:38:bb:70:4f:
                    93:87:77:b7:56:68:2f:80:9a:bf:9b:34:21:cf:31:
                    bc:a6:25:c0:6f:0e:90:16:42:8c:66:76:2f:25:75:
                    31:53:a1:e7:f1:e9:f9:5c:fd:17:3e:c8:99:31:59:
                    c8:a3:a9:f3:64:37:43:5e:8e:2a:cd:05:a1:f7:e0:
                    46:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:56:D3:D7:58:BD:C9:35:1E:2B:67:BD:92:1B:DC:49:B7:4B:FB:9B
            X509v3 Authority Key Identifier:
                keyid:75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:5c:55:64:19:4b:e8:07:3a:c0:d2:1b:f9:b8:4e:59:e9:2e:
         a5:d9:ef:a2:d6:5b:85:fb:7f:fe:97:bb:f6:9b:c0:9a:d9:e5:
         2b:d3:16:61:6b:9d:07:8a:8b:62:ae:d1:3a:dc:88:f0:88:f0:
         a2:9f:5f:7d:95:ba:88:86:68:de:d7:b9:55:43:1a:0d:18:96:
         05:6c:75:cd:46:51:5f:5b:5d:3c:fd:e8:62:ed:79:40:fa:09:
         2b:b6:65:bc:31:e3:1c:d3:47:dc:a9:33:8b:3d:93:ee:71:e3:
         a4:fa:03:1d:81:48:a5:df:75:c5:59:4b:86:22:42:8d:69:1c:
         d9:45:6e:91:9e:c0:49:06:3f:7c:e8:0a:72:d7:34:af:ae:79:
         fb:bc:31:e8:a7:54:dc:1a:f1:0a:38:35:ae:56:52:56:db:9b:
         98:e8:cd:5f:0c:52:2c:3f:35:33:74:4a:d7:0e:8a:f1:c3:29:
         17:18:9d:8a:e0:50:45:20:1b:17:57:39:07:88:0c:60:55:5c:
         27:5a:6a:24:4a:73:c4:dc:8c:71:6b:91:83:16:f1:c4:ef:29:
         60:70:cb:62:b0:fe:08:00:d9:d3:55:8c:e6:02:79:13:dc:5e:
         e6:ef:ee:65:d0:fa:d5:40:01:68:59:50:03:53:27:ca:d5:23:
         04:ed:15:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:16:28 2025 by rpki-client