Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
File:                     OEypWHqC_DdH9GngCUXZ1VhaNbI.mft (raw, json)
Hash identifier:          HqSHxfRyYJ/7t2Ip5yt5gwln3I2sWD7lyBmqsjCcs3w=
Subject key identifier:   F1:E3:C1:CD:E8:BA:FA:B7:89:F7:71:71:01:EF:F3:B5:72:8B:AA:8C
Authority key identifier: 38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
Certificate issuer:       /CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Certificate serial:       01974CD7942516185F3C9F6EB980E1B3BB08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
Manifest number:          01BB
Signing time:             Sun 08 Jun 2025 00:01:25 +0000
Manifest this update:     Sun 08 Jun 2025 00:01:25 +0000
Manifest next update:     Mon 09 Jun 2025 00:01:25 +0000
Files and hashes:         1: OEypWHqC_DdH9GngCUXZ1VhaNbI.crl (hash: DltONdIZ7oUFprKgzeY8+WDt/l34tCYgK29bKVfHr6g=)
                          2: jI7_nEj5zlq6z4OVYNSKuGo62t4.roa (hash: i7/oTU3XFkI0q3JhGCgkgLONW91UlNaDNMBJ9HMnxlo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d7:94:25:16:18:5f:3c:9f:6e:b9:80:e1:b3:bb:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=384ca9587a82fc3747f469e00945d9d5585a35b2
        Validity
            Not Before: Jun  8 00:01:25 2025 GMT
            Not After : Jun  9 00:01:25 2025 GMT
        Subject: CN=f1e3c1cde8bafab789f7717101eff3b5728baa8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:12:42:4e:42:55:26:eb:db:47:87:29:72:95:
                    1e:87:8d:81:a3:d4:b2:20:ef:f8:03:6c:74:65:c8:
                    8f:25:2a:cc:c2:59:cc:0a:e9:96:12:4b:2c:80:1f:
                    f2:8d:99:5e:fc:e8:5f:25:79:9e:8d:84:65:10:68:
                    aa:57:dd:e1:e0:1e:aa:c7:b4:07:dc:a0:64:58:2b:
                    0d:84:61:3a:5c:34:81:c7:35:30:50:72:4d:78:60:
                    70:7d:6b:10:e1:09:cd:ba:22:ff:b1:09:c1:e8:49:
                    3d:e0:a1:70:cd:95:18:96:fe:91:74:4f:8c:d8:a5:
                    b7:56:79:9a:04:b3:2d:4f:3e:18:d7:5f:ea:fb:33:
                    b5:02:f7:e2:00:57:94:8d:25:54:b5:43:e8:db:fa:
                    4f:d2:ab:4d:ff:85:60:19:ee:03:7f:b4:61:f1:c1:
                    ca:b5:3f:72:56:eb:d2:79:03:94:a0:7d:9a:ae:da:
                    ef:3c:85:2c:e9:23:ac:ac:cc:3c:25:52:e7:f4:e3:
                    95:44:63:83:50:f1:95:42:ef:0b:b4:bd:c4:52:ca:
                    c8:25:52:21:30:1b:64:d4:4f:fd:96:5b:8d:49:e4:
                    db:36:ce:b1:1b:c3:8a:d9:ca:3f:ad:b2:fc:21:47:
                    58:a8:de:5b:85:17:91:11:be:fc:39:1b:75:ba:b4:
                    7e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E3:C1:CD:E8:BA:FA:B7:89:F7:71:71:01:EF:F3:B5:72:8B:AA:8C
            X509v3 Authority Key Identifier:
                keyid:38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d6:b2:57:b0:2c:e3:62:80:ce:7d:d5:43:e1:31:66:d5:ab:
         72:6d:bb:32:11:29:a3:d9:4b:3b:cb:46:c5:56:dc:5c:eb:ce:
         bb:87:0d:d6:52:11:16:12:6e:ab:75:87:2a:f9:43:50:20:5a:
         20:a1:44:f5:f9:c6:5d:e0:22:75:61:8e:13:8b:28:ca:65:2b:
         02:c6:42:54:14:f5:12:59:22:2d:68:b8:93:d1:eb:ae:bd:8a:
         13:fc:30:73:59:59:75:dc:a8:77:5e:68:f6:78:e5:ea:6c:d6:
         88:b1:28:a4:6c:b4:66:19:31:a5:b6:ee:a2:4b:0e:62:b6:0e:
         be:72:05:e3:b9:bb:b2:fe:88:6b:4b:a2:8a:ad:36:48:74:db:
         a2:73:8d:07:6a:a8:a0:00:45:e1:ce:de:ab:ad:de:24:72:e6:
         7b:1e:f2:ac:86:8a:3c:13:07:06:e8:90:b5:71:f8:bb:c3:cc:
         b6:9b:04:12:bf:23:93:25:be:9a:bc:58:d2:0a:65:93:f7:73:
         ae:02:71:7f:69:c8:f8:f6:2e:25:29:10:ec:67:f2:51:ed:31:
         bb:f8:d0:20:2b:da:74:cf:24:99:b6:ec:ba:4f:f3:f2:9b:35:
         59:5a:79:37:eb:ed:ec:64:28:6c:2e:b3:17:30:00:57:df:bc:
         99:6b:72:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:24:12 2025 by rpki-client