Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
File:                     D-v7_W-TfFrjnj446KuDhBB0IaY.mft (raw, json)
Hash identifier:          lebhfvxlltgDAgVw6pbxPx9KrWWDKXTB+bnH4hWMxSA=
Subject key identifier:   5A:C7:E3:69:80:B1:1E:0B:F4:54:B4:4E:27:B8:54:0C:2E:F1:06:C1
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Certificate issuer:       /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial:       01976696D9FFB0FA012BC2BAE44F4AED5822
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
Manifest number:          0CAF
Signing time:             Fri 13 Jun 2025 00:00:51 +0000
Manifest this update:     Fri 13 Jun 2025 00:00:51 +0000
Manifest next update:     Sat 14 Jun 2025 00:00:51 +0000
Files and hashes:         1: 1JEMNjhiS5VBAL1xd4gysijw3gs.roa (hash: qCF/O3HuRXFUKsJdCbxIv45bvCSutjHqIw1CozlbNjE=)
                          2: AIvDmhuj2ZpytkvOeVyoUY_STpw.roa (hash: 3QHwujw/c7ulg8cAPCbEFjBitp9OHT3bIbRqwJYJDPk=)
                          3: BOD3dcxTc2yY6D5t1Z9HjEwK_rU.roa (hash: GaifOabvqdT7+yzCu9A/2BB5BkajLIn0jWyTPBEgmVc=)
                          4: D-v7_W-TfFrjnj446KuDhBB0IaY.crl (hash: KZoxR+dNz5rAvcylh52lqFukbUD5kYu5LODicUSBVEg=)
                          5: evez1FLTQMGsXZwjHy5MZpX9Bto.roa (hash: O3jcqLGYofqRuZG7p6t5YvjvZHWcAdVOGjXDA+dpDpo=)
                          6: kp7dmjFBonBXqg5SUhwfgrpcPrk.roa (hash: 7Dsn4Eren5gH31G2BucmhdAuoTx/so0d2IUZRWLJoQI=)
                          7: xzhHaw1u4vyWJOy8wzv_GA0Hy8w.roa (hash: CWKK/bGUgV9l6R4l2jDK6+bx3tv6jjiAzLSyy1GKphs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:66:96:d9:ff:b0:fa:01:2b:c2:ba:e4:4f:4a:ed:58:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
        Validity
            Not Before: Jun 13 00:00:51 2025 GMT
            Not After : Jun 14 00:00:51 2025 GMT
        Subject: CN=5ac7e36980b11e0bf454b44e27b8540c2ef106c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cd:98:f4:a4:a5:72:93:1d:f2:80:de:95:d6:
                    ac:5d:c0:78:19:e1:0e:de:cf:fb:5d:f0:0b:45:0a:
                    e1:f2:4e:5f:8b:a8:db:58:95:c2:d6:65:26:9d:26:
                    f0:1a:a1:15:e4:0c:7f:69:7e:8d:fd:39:53:ed:c1:
                    7f:28:37:1d:72:8e:3f:b7:ba:ec:6b:8a:4a:f0:f3:
                    08:bf:80:6a:0c:94:1f:d2:7f:57:35:2e:c5:0f:bc:
                    e0:7b:d2:34:2e:31:54:8e:aa:e1:ef:31:7b:6a:f7:
                    76:ce:93:28:b3:23:90:7a:ea:80:83:6f:a3:a5:e5:
                    c0:32:85:dc:d1:c4:72:3b:2e:21:62:73:8e:04:6a:
                    a6:1e:ae:1a:0c:20:e3:a0:90:56:44:c6:b1:d8:2f:
                    c4:91:46:e0:45:a5:10:37:6f:d6:de:a1:b4:61:67:
                    ed:78:62:c8:00:0e:55:df:1c:aa:13:3f:35:64:e3:
                    1d:6e:ad:83:b3:23:3d:69:b0:0c:58:e5:41:64:b1:
                    5a:a3:3c:bf:62:35:93:8b:50:84:e2:93:e9:c2:46:
                    75:58:3a:0b:1c:aa:1d:cc:68:5c:42:4e:a1:5a:e0:
                    27:79:bf:62:d9:22:08:82:59:78:dc:46:fa:06:8d:
                    b4:ef:16:67:d7:27:d8:e2:7f:5d:20:c3:2e:ab:62:
                    0c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C7:E3:69:80:B1:1E:0B:F4:54:B4:4E:27:B8:54:0C:2E:F1:06:C1
            X509v3 Authority Key Identifier:
                keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:dd:ec:d1:31:36:58:5d:c1:bb:0b:8f:22:2b:be:0d:39:ba:
         d3:37:1a:44:84:b0:9f:c7:db:1c:5c:44:8f:62:d5:77:6e:91:
         42:43:07:b7:40:c2:1a:cb:05:90:99:de:e2:39:91:98:a0:8d:
         96:f6:49:c8:2a:75:8f:35:19:f3:56:0e:9d:1d:42:49:f2:34:
         9f:58:2c:62:89:41:f7:80:13:0a:cc:0f:d8:c4:14:3c:be:4b:
         8a:99:37:c4:19:97:9f:e0:f5:9f:4b:85:b5:59:97:d9:ac:cd:
         d6:71:e7:74:f0:d0:55:e3:6c:5c:06:a7:d5:db:5b:85:31:8f:
         6a:3b:a9:c8:5e:58:51:69:4d:b9:59:50:8a:59:5e:38:13:b5:
         58:e8:a5:5a:85:40:40:cf:c7:c7:92:e7:09:41:69:15:97:04:
         98:19:2b:39:1b:31:c9:a8:ad:38:4a:92:b4:ac:82:19:46:6b:
         23:4c:93:a9:22:e7:18:d9:93:f8:fe:d0:02:86:df:a8:68:23:
         4a:4e:0d:04:22:d1:13:9a:46:d8:e1:f0:81:84:57:d1:71:76:
         13:f6:b8:43:d1:d9:9f:21:47:d3:2c:59:dc:fd:c3:77:28:37:
         64:2b:5f:6d:ee:68:2c:42:9a:85:26:c7:cb:fe:96:d5:a1:f9:
         98:2c:c6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 03:26:39 2025 by rpki-client