Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
File:                     _JYd_F9wvxt28F5Ep07QKTEl5L4.mft (raw, json)
Hash identifier:          fvyyVHOjvWwrk7o3PBbhj8KWfppcTq9oVNJlyU6cyuw=
Subject key identifier:   1D:CF:A9:C9:48:2E:AD:50:CF:9A:2E:49:D0:19:4C:E6:49:E4:52:60
Authority key identifier: FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE
Certificate issuer:       /CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be
Certificate serial:       0197470BC2119E321657BD3895B1487E64AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
Manifest number:          0F76
Signing time:             Fri 06 Jun 2025 21:00:42 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:42 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:42 +0000
Files and hashes:         1: _JYd_F9wvxt28F5Ep07QKTEl5L4.crl (hash: 1ecl7Eitt0XcmkRFkiS1v6IBOuGHeIJCI35VxOJZVvQ=)
                          2: hyHlTiMwzWbl8Nf4H5xHNXAVBxY.roa (hash: HU5uH/M7qdwsXDoyu+UBXkrcHBCx6l/8Z2W4bZISR9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:c2:11:9e:32:16:57:bd:38:95:b1:48:7e:64:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be
        Validity
            Not Before: Jun  6 21:00:42 2025 GMT
            Not After : Jun  7 21:00:42 2025 GMT
        Subject: CN=1dcfa9c9482ead50cf9a2e49d0194ce649e45260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2a:99:ce:95:d4:2d:ce:cf:7b:6a:5a:0d:ef:
                    fa:da:00:36:5d:e2:34:ab:3f:9f:75:ce:5f:07:81:
                    bf:d8:95:82:66:42:43:bd:93:fe:71:ac:51:7a:8b:
                    22:af:6b:d9:36:fc:8b:9e:ab:aa:e3:7e:f5:49:fd:
                    ce:1f:b8:15:97:ae:06:65:7a:6c:ba:ff:95:b5:41:
                    98:bc:f2:a3:8c:79:59:d8:d9:ee:18:62:17:15:65:
                    59:13:27:7f:1b:11:4e:1a:3a:ca:83:ed:87:e4:80:
                    31:59:65:c2:ce:aa:73:dc:6f:9a:20:18:2b:90:d0:
                    b1:b3:3d:5b:99:d5:43:01:00:48:23:dc:73:aa:4c:
                    1e:e9:a1:ee:c9:ea:65:7e:de:38:47:c5:bb:5f:81:
                    a7:ea:b5:cc:f9:ab:7a:d5:0b:f0:82:49:91:60:63:
                    79:e0:7d:50:e6:37:fe:57:73:3e:64:f7:2f:84:1b:
                    8f:22:9f:bc:91:0f:ac:d4:a6:ec:c4:60:a3:1a:08:
                    2c:fe:79:38:c0:03:21:8e:89:d2:2c:e5:d3:4a:50:
                    4d:c8:c8:38:b1:fe:4a:de:84:a9:8a:2d:26:dc:db:
                    9d:69:73:5b:19:9f:fe:3d:95:1f:39:23:b7:28:bb:
                    70:ba:40:8c:29:22:f1:ac:f2:d6:e5:26:4b:f5:2c:
                    bf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CF:A9:C9:48:2E:AD:50:CF:9A:2E:49:D0:19:4C:E6:49:E4:52:60
            X509v3 Authority Key Identifier:
                keyid:FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d4:49:e9:34:12:d6:7e:ce:58:47:73:66:5a:cb:22:d8:34:
         0d:d2:52:0d:19:24:13:d6:d9:29:bc:c3:26:80:5c:a9:9f:ea:
         44:a6:45:10:7b:87:06:fc:87:51:cd:ef:18:08:71:13:c3:2a:
         52:e2:1c:7b:7f:d4:19:fb:c6:01:5e:68:7a:5c:08:79:ab:b4:
         c9:00:69:bf:e3:b3:c0:05:cb:5c:2b:d5:8a:ee:a0:af:72:20:
         41:ce:f3:34:65:28:da:20:24:89:ad:7c:c3:ce:ef:66:82:5f:
         99:da:b1:2f:32:7c:b6:1b:79:d6:d4:0a:84:39:c5:f8:7c:2a:
         90:d7:12:38:91:0c:b6:7f:05:4a:3a:7e:da:f5:6d:cb:32:7d:
         be:7e:63:94:b3:1c:4d:0b:e4:f9:df:e2:56:0c:88:da:47:7a:
         03:2a:29:d4:56:8a:9f:0c:b4:29:01:9a:59:ff:16:27:79:5d:
         a9:8b:a8:c5:8e:fc:3d:c3:25:ef:02:79:f3:5a:de:3f:e2:40:
         fe:b3:d6:e4:1d:e9:08:c8:61:b8:be:db:fa:86:55:9c:e2:ca:
         ec:88:29:8a:04:ef:b7:36:98:0e:9f:75:6c:fb:25:33:9a:20:
         1b:ae:bc:b2:b4:eb:78:29:50:6c:2c:92:39:53:d2:1a:b1:a8:
         e1:3a:2e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:36:34 2025 by rpki-client