Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
File:                     C0U7QQ01hqYjepUe7zsD9MRBGPA.mft (raw, json)
Hash identifier:          j2zaXaDz6x9kK/U9iFX32dVb24hc46dc8KjAp/qiqb4=
Subject key identifier:   FF:21:37:A4:A7:23:FC:4A:5A:77:8E:C3:99:F1:54:C2:74:9C:17:F8
Authority key identifier: 0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
Certificate issuer:       /CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Certificate serial:       01974967B262FB5DA44961C6AF11A6FA88E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
Manifest number:          08BF
Signing time:             Sat 07 Jun 2025 08:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:21 +0000
Files and hashes:         1: 6Nr2VmGKQ_jUJpF9yPeLEUnYhF4.roa (hash: /MpCkrj9yQfDhYflTljevFhsZA0Mv2nTgQM1DqiGD3A=)
                          2: C0U7QQ01hqYjepUe7zsD9MRBGPA.crl (hash: zKcgtygoASmNVghT4lSoj4pWMQzKWz13kBoF0Ra7j6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:b2:62:fb:5d:a4:49:61:c6:af:11:a6:fa:88:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b453b410d3586a6237a951eef3b03f4c44118f0
        Validity
            Not Before: Jun  7 08:00:21 2025 GMT
            Not After : Jun  8 08:00:21 2025 GMT
        Subject: CN=ff2137a4a723fc4a5a778ec399f154c2749c17f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3f:21:2d:9c:db:ee:14:b6:c2:83:19:a0:78:
                    33:5c:ec:09:4d:16:87:74:77:70:bc:ae:11:b5:00:
                    c3:5f:65:0c:36:4c:ee:c7:bb:67:aa:1f:04:dd:7e:
                    a9:26:f0:84:b8:d5:53:cd:97:07:11:bf:7a:c8:b9:
                    c1:fb:0b:d7:27:9f:32:45:f1:49:30:a8:99:4f:13:
                    3d:fe:95:78:f7:68:2a:42:41:97:37:9b:a1:e2:d0:
                    8b:9f:40:42:23:d2:a7:13:af:8d:56:0f:f4:78:ec:
                    f2:1d:99:02:f4:6c:7d:44:89:af:b1:85:a8:9a:9f:
                    a0:95:cd:66:90:4e:4e:ae:b7:0a:35:fa:09:49:ae:
                    d1:6f:e8:fa:8d:b5:a5:92:71:dc:97:4f:ac:90:13:
                    8c:b5:e4:f0:ec:10:53:96:17:36:5b:2f:3c:32:b4:
                    a6:39:a7:d4:18:d5:68:29:d0:91:00:cd:20:dd:0c:
                    96:07:fb:ee:ce:f2:6b:cf:e5:6e:54:11:b1:ec:f2:
                    35:69:75:da:b0:4d:b1:e1:d9:a5:31:cf:cf:b0:8b:
                    4e:70:0c:a8:80:62:b1:55:82:82:3f:05:05:b4:1d:
                    7a:00:1c:f0:4a:51:31:6f:56:a8:d9:cf:2c:48:db:
                    a1:de:b5:4e:c2:79:e8:56:4b:d4:01:eb:12:13:e3:
                    cb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:21:37:A4:A7:23:FC:4A:5A:77:8E:C3:99:F1:54:C2:74:9C:17:F8
            X509v3 Authority Key Identifier:
                keyid:0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:da:55:b5:0c:1f:a0:50:9d:46:c6:09:fc:13:07:25:e6:d7:
         c2:51:58:8e:68:50:27:cc:69:28:e2:f7:b0:0f:e2:e3:e0:84:
         be:7b:ed:cc:cd:fa:01:f4:21:e1:22:59:a8:bb:c8:f3:24:63:
         61:5d:c7:96:c0:dd:04:be:76:75:c6:af:7f:7d:aa:02:0a:07:
         57:e2:4e:9c:bf:f5:92:5c:57:21:33:93:2c:35:22:f9:27:78:
         ce:9a:0d:c7:93:ea:5d:5f:08:1d:15:a4:e5:48:c4:fc:03:b3:
         42:66:e1:f8:0c:b6:cc:3f:4a:8f:b2:45:4e:13:88:14:ec:c2:
         d3:45:8b:94:36:76:2b:b4:c6:74:4b:bd:84:c0:d2:ed:a2:12:
         3d:ec:92:cd:e8:ec:f6:b6:1e:0e:14:d2:ad:eb:7b:c3:52:9a:
         e8:62:e1:bc:5f:16:d7:eb:98:11:78:5a:28:0c:51:b2:1a:c5:
         05:60:d7:4f:e3:18:5b:a1:19:4a:b1:58:4f:d1:21:02:48:52:
         a2:e2:ff:2f:87:ff:0b:28:05:98:30:0a:94:b6:e9:41:7a:4d:
         b6:31:57:f4:22:74:17:17:57:85:a6:7b:d5:c2:d0:58:10:a6:
         ba:42:f1:24:bb:cc:89:7d:03:52:0a:4c:82:92:86:0f:be:f5:
         21:23:84:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:37:49 2025 by rpki-client