Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
File:                     3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json)
Hash identifier:          Mojl2YV+96GGXxDl3/D1HYVR5qkSVZOHEzaOFM1deLI=
Subject key identifier:   87:73:50:F5:5F:65:0D:F8:11:32:3D:4B:92:5B:E1:7B:9D:A8:91:C9
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Certificate issuer:       /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial:       0197722D28CFBCCCFDC05CDAC44F3D1F8FEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
Manifest number:          09FB
Signing time:             Sun 15 Jun 2025 06:00:51 +0000
Manifest this update:     Sun 15 Jun 2025 06:00:51 +0000
Manifest next update:     Mon 16 Jun 2025 06:00:51 +0000
Files and hashes:         1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: rpL39kg9TF8rx+Lwo12y6TfQJgnqOPFqMFeRJeA98/k=)
                          2: dKbYijsCo6cz-c8VDyBQbX6KvIQ.roa (hash: s+UDqFCEg39f4gk9fs9ZUXaGmiKaVpMOQ/J8CYcOuY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:2d:28:cf:bc:cc:fd:c0:5c:da:c4:4f:3d:1f:8f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
        Validity
            Not Before: Jun 15 06:00:51 2025 GMT
            Not After : Jun 16 06:00:51 2025 GMT
        Subject: CN=877350f55f650df811323d4b925be17b9da891c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b2:5b:76:8b:a0:b5:fa:ab:2f:a4:86:48:79:
                    68:b7:0c:bd:0b:31:35:61:6e:32:43:12:18:0e:c4:
                    00:63:76:08:69:4c:42:a9:99:c5:82:0e:8a:cf:cf:
                    49:d7:5a:cb:6a:c4:3d:54:ac:aa:96:90:c1:d9:e4:
                    48:fb:3a:5d:8c:4d:b6:4c:b9:e3:a5:55:82:c3:f2:
                    3a:1a:03:4c:b9:98:19:5b:34:2b:81:90:9f:26:a7:
                    5e:19:eb:ca:66:ca:f7:0a:9f:1a:54:69:c6:25:b6:
                    c3:6a:36:50:bd:e5:33:b3:b2:3e:a5:b7:4e:8d:47:
                    de:ec:a2:17:5e:4d:7e:f6:ad:26:6f:9f:f1:9a:d2:
                    22:5d:60:22:2b:09:09:c7:dd:bb:35:96:36:48:bc:
                    ae:58:eb:3e:f8:77:8b:ff:7a:d3:0f:06:89:43:d6:
                    9d:21:a0:e3:d5:79:aa:7b:a9:3c:38:0a:06:23:21:
                    90:80:39:c5:aa:f9:3e:78:fe:8a:cd:11:3b:22:bc:
                    d6:89:0c:bb:f2:e9:30:1f:29:45:71:23:3d:88:12:
                    08:46:51:89:55:48:95:64:47:34:75:64:61:c4:ca:
                    67:5c:f4:90:fe:6e:ef:bd:e3:eb:a6:f8:df:33:8e:
                    0d:3b:16:79:4c:d8:30:c4:c0:06:58:2e:b1:4b:e8:
                    a2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:73:50:F5:5F:65:0D:F8:11:32:3D:4B:92:5B:E1:7B:9D:A8:91:C9
            X509v3 Authority Key Identifier:
                keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:7c:de:3f:9a:4a:7a:07:48:5a:fb:35:61:5b:6a:43:35:83:
         8c:cc:15:63:b4:8f:93:fb:dd:8f:e1:c4:53:89:47:45:3c:f2:
         62:e0:d8:df:43:e1:7c:ea:58:7d:39:d2:c2:37:c0:b5:47:9f:
         22:82:64:6d:c8:05:bd:7e:10:6e:6c:73:39:b9:1d:e7:2f:aa:
         83:17:e3:a8:45:4f:87:d2:fb:99:12:85:b6:78:2a:e4:05:ff:
         2a:08:14:63:4d:fb:df:19:9c:75:45:f7:d1:6a:b0:d6:cd:31:
         35:f7:2a:d4:47:6a:0b:0c:6c:5f:c3:d3:94:c4:48:61:32:01:
         72:30:fb:26:ea:61:ea:52:51:ba:fc:80:10:5e:4e:fa:3e:23:
         f6:ca:76:69:8a:6a:0a:43:ae:ce:07:85:69:a1:2d:5e:8d:10:
         68:86:d1:f4:a8:f9:5f:e6:ea:a4:c3:5a:de:a6:92:4b:a4:aa:
         ec:15:36:2c:f5:30:2d:1d:ad:f4:cd:99:25:6c:9e:d8:1b:f8:
         83:7d:ce:f7:ad:d8:9a:ad:62:39:8a:f4:5b:bc:26:b8:78:a9:
         9e:10:84:e8:03:99:ee:f5:1f:8e:c9:9d:90:de:ab:91:9c:39:
         3b:47:f7:71:70:78:10:32:40:a8:e8:27:9f:04:e0:cc:97:88:
         98:56:75:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:06:54 2025 by rpki-client