Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
File:                     D-v7_W-TfFrjnj446KuDhBB0IaY.mft (raw, json)
Hash identifier:          ricz9Iz5nPZbV49M/PBGTGRkuvomO3+EbmbEnFJkybg=
Subject key identifier:   E9:5E:DA:D8:DA:D5:1A:59:50:C1:4A:74:E8:AC:89:9F:39:6F:F0:9F
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Certificate issuer:       /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial:       019762BA03ADB729195EF7BCFF19C923F17F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
Manifest number:          0CAD
Signing time:             Thu 12 Jun 2025 06:00:47 +0000
Manifest this update:     Thu 12 Jun 2025 06:00:47 +0000
Manifest next update:     Fri 13 Jun 2025 06:00:47 +0000
Files and hashes:         1: 1JEMNjhiS5VBAL1xd4gysijw3gs.roa (hash: qCF/O3HuRXFUKsJdCbxIv45bvCSutjHqIw1CozlbNjE=)
                          2: AIvDmhuj2ZpytkvOeVyoUY_STpw.roa (hash: 3QHwujw/c7ulg8cAPCbEFjBitp9OHT3bIbRqwJYJDPk=)
                          3: BOD3dcxTc2yY6D5t1Z9HjEwK_rU.roa (hash: GaifOabvqdT7+yzCu9A/2BB5BkajLIn0jWyTPBEgmVc=)
                          4: D-v7_W-TfFrjnj446KuDhBB0IaY.crl (hash: r2s43tLUPpGo9fRTQLH0FGYjO8sHO7jX6QMDVGf3GD8=)
                          5: evez1FLTQMGsXZwjHy5MZpX9Bto.roa (hash: O3jcqLGYofqRuZG7p6t5YvjvZHWcAdVOGjXDA+dpDpo=)
                          6: kp7dmjFBonBXqg5SUhwfgrpcPrk.roa (hash: 7Dsn4Eren5gH31G2BucmhdAuoTx/so0d2IUZRWLJoQI=)
                          7: xzhHaw1u4vyWJOy8wzv_GA0Hy8w.roa (hash: CWKK/bGUgV9l6R4l2jDK6+bx3tv6jjiAzLSyy1GKphs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 06:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:ba:03:ad:b7:29:19:5e:f7:bc:ff:19:c9:23:f1:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
        Validity
            Not Before: Jun 12 06:00:47 2025 GMT
            Not After : Jun 13 06:00:47 2025 GMT
        Subject: CN=e95edad8dad51a5950c14a74e8ac899f396ff09f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1a:55:0a:45:24:aa:0f:ea:06:bc:4e:96:2e:
                    9d:ac:a4:8d:04:2f:a8:9c:58:9a:c5:4e:d4:38:3f:
                    ae:2e:86:9e:d9:d6:d2:06:9d:18:d9:37:94:11:3d:
                    ff:04:d8:dc:b4:fd:f5:99:0f:45:05:8e:fa:2f:96:
                    2b:32:d6:4a:f9:91:48:ea:af:87:f1:bf:3c:f6:60:
                    9b:d5:17:60:b7:e4:ca:05:82:b0:44:d0:91:16:6e:
                    4d:88:19:3d:64:09:af:db:e5:03:67:96:93:ac:07:
                    b9:dc:15:e4:97:20:ff:29:e1:0c:3a:f8:be:79:f9:
                    bf:58:86:3f:68:a7:0a:49:ce:ba:94:c3:e8:52:41:
                    63:3b:64:65:ae:9c:1c:ab:1c:9d:fe:54:82:e6:45:
                    90:cf:72:15:4d:35:49:10:b1:17:ff:74:86:a7:7e:
                    e0:da:a0:bf:55:a2:93:b5:f3:5b:11:21:0b:62:c4:
                    07:bc:1f:0e:d9:d5:38:21:9f:5a:c7:7a:1e:08:89:
                    f1:da:54:c3:c7:06:60:9d:c9:d2:f5:2c:2b:ca:b5:
                    e4:58:17:53:30:2d:70:6e:e4:72:e3:08:41:62:bc:
                    f3:99:67:46:a5:27:1c:ff:f6:70:95:8d:63:ad:a9:
                    a8:1c:71:3c:2a:5e:d7:33:1d:9f:34:2b:5b:f1:6c:
                    3c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5E:DA:D8:DA:D5:1A:59:50:C1:4A:74:E8:AC:89:9F:39:6F:F0:9F
            X509v3 Authority Key Identifier:
                keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:b2:a1:20:31:e1:eb:c4:e2:0e:5f:94:e2:66:48:ca:b1:67:
         70:57:e1:b3:b0:4a:1f:d6:ec:1c:cb:43:0b:39:98:dd:b0:84:
         55:a9:01:7d:bb:d8:11:0b:77:cb:de:a7:12:e6:5c:a8:f9:50:
         12:c2:18:67:6e:15:d5:db:d3:60:f4:e5:ce:c8:a4:d3:50:97:
         b2:b6:e2:37:8f:b2:b9:37:53:85:9e:58:8b:2a:73:0b:15:60:
         b0:31:f7:56:eb:d5:30:bc:77:5d:cf:a2:4b:0c:0d:fa:4f:84:
         56:94:1f:8f:4e:f6:7e:c6:2e:09:37:b9:84:e7:e7:28:34:3f:
         fd:24:4e:27:f4:45:45:79:c7:7a:7c:9a:80:9d:d1:82:26:db:
         57:d4:db:22:f5:d9:53:aa:93:a3:7d:ac:bc:03:5f:2e:82:87:
         02:ca:fa:3a:22:d0:69:d1:36:0f:18:a7:ef:ed:53:96:aa:e2:
         f0:b6:ac:59:ff:75:cb:1f:81:e3:36:d2:63:c8:c4:10:3c:8c:
         71:4d:61:60:ae:50:fe:9f:aa:87:1f:b8:dc:25:b2:ce:1f:c4:
         b2:ff:ba:26:c8:4d:92:89:fa:25:a9:98:0c:b8:a0:a4:cc:c4:
         02:6f:42:3d:09:75:e3:45:37:6a:97:ed:c3:ef:45:81:0f:4a:
         15:13:87:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:47:34 2025 by rpki-client