Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
File:                     D97nlErE2jERKV2B4p3roAwWOpY.mft (raw, json)
Hash identifier:          T3gkSsdObTKH64PfjTwrDz/VMitOsu3029FOz55/AY0=
Subject key identifier:   94:93:2B:53:A9:84:74:CD:46:05:A6:DE:90:C4:88:F2:79:12:02:0A
Authority key identifier: 0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
Certificate issuer:       /CN=0fdee7944ac4da3111295d81e29deba00c163a96
Certificate serial:       019750B38D88914618420FB636B4E4E9AFB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
Manifest number:          0F7B
Signing time:             Sun 08 Jun 2025 18:00:33 +0000
Manifest this update:     Sun 08 Jun 2025 18:00:33 +0000
Manifest next update:     Mon 09 Jun 2025 18:00:33 +0000
Files and hashes:         1: D97nlErE2jERKV2B4p3roAwWOpY.crl (hash: m8oBlDDi7YydO7idvtX6yqXliblykWsAGXJK198lko8=)
                          2: Fe73gwKx3TfChZQCePRdIEAemH0.roa (hash: qBzf7ILpA60OZzhZbHEoimpJXoZWWGpm51oGlU43AdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:b3:8d:88:91:46:18:42:0f:b6:36:b4:e4:e9:af:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fdee7944ac4da3111295d81e29deba00c163a96
        Validity
            Not Before: Jun  8 18:00:33 2025 GMT
            Not After : Jun  9 18:00:33 2025 GMT
        Subject: CN=94932b53a98474cd4605a6de90c488f27912020a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8f:7e:da:34:23:18:72:f5:49:d1:38:c4:23:
                    60:14:7a:f1:d4:36:c1:df:21:78:4b:25:b6:b1:3a:
                    d1:8c:65:e3:dc:29:22:a1:fd:2a:01:07:be:e5:13:
                    09:76:3f:4b:ef:35:1b:97:79:7e:84:2a:6b:58:88:
                    7b:a1:29:68:a0:9e:d8:39:a1:f4:ae:20:18:07:3a:
                    c4:bb:9c:f3:14:3f:37:9c:20:35:d5:42:b6:42:53:
                    20:9b:98:26:aa:29:2e:05:56:6c:a8:23:36:7e:dd:
                    98:ed:52:2a:88:53:cf:ab:54:67:a1:22:da:df:a6:
                    cf:62:ec:6a:9b:a9:1b:d8:c7:2b:35:2f:cc:db:1d:
                    ad:dd:83:a7:80:a5:e1:b6:c9:9c:83:07:05:51:4e:
                    e9:f7:32:72:ca:ae:4a:6b:56:de:9e:43:eb:ce:11:
                    fd:87:f5:3f:99:a1:f4:22:21:9f:ca:3d:7c:f5:72:
                    49:84:c2:b4:c5:5d:43:a3:cd:c6:d4:bd:31:d2:0b:
                    db:01:13:8d:eb:fe:be:32:fa:21:b8:36:c5:07:ae:
                    4e:74:f0:95:15:40:3f:7e:1c:38:b8:63:f9:85:78:
                    de:d0:83:a3:97:d5:0e:69:09:34:86:25:46:d9:71:
                    56:c5:99:f7:05:ac:2d:aa:ac:1e:54:79:a5:9d:e8:
                    65:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:93:2B:53:A9:84:74:CD:46:05:A6:DE:90:C4:88:F2:79:12:02:0A
            X509v3 Authority Key Identifier:
                keyid:0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:52:7f:3e:88:9e:33:3b:12:b0:6c:26:a8:65:e7:df:00:4e:
         07:96:b4:6c:ea:5f:8f:7c:33:c7:f2:9b:ae:68:ee:8d:63:99:
         d6:0e:a1:41:02:1c:86:82:af:38:9e:f7:9a:b4:48:8d:cd:aa:
         41:bd:06:4a:59:2e:46:8c:46:e7:f2:ce:d5:e7:a0:0c:e4:ea:
         a0:65:59:ba:1d:98:85:62:48:cf:ea:c5:26:d3:1f:a9:46:a3:
         a9:48:5e:31:96:51:e4:c9:3e:82:56:76:39:fd:92:36:db:0f:
         42:af:70:fa:d9:b4:09:ec:57:97:f0:17:8c:86:24:2d:10:27:
         eb:ee:7b:45:69:70:b2:24:47:e1:72:b6:f2:a0:eb:27:1a:c5:
         52:71:63:97:a5:6a:f1:e5:78:47:6d:0b:4d:c3:4b:3c:cc:25:
         8b:c6:48:5c:9a:97:da:9c:67:b7:34:72:d9:ba:4d:48:0d:eb:
         79:6d:72:e1:09:ab:2d:73:e7:1d:09:74:8b:6d:8d:c6:ec:29:
         e5:32:4c:44:c4:4c:cf:02:25:11:2b:77:ec:94:55:21:00:c5:
         dc:65:2e:d1:6a:1f:2c:fd:da:5a:f7:a1:db:c8:cf:30:88:f5:
         29:06:b0:88:c5:ee:74:95:e9:3b:d1:7b:9c:0b:f2:0b:eb:d6:
         82:f7:59:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:40:22 2025 by rpki-client