Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
File:                     dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json)
Hash identifier:          5FMuFPrnOyDHUxZEPXvippIv5Nh1Hr/0KMRFfkUXtLE=
Subject key identifier:   E9:7F:CF:5D:81:27:F6:47:FF:3A:D8:D5:63:C1:88:A9:9D:5E:8F:AD
Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
Certificate issuer:       /CN=750ac67c5776835df091998310960e83c23d9dc6
Certificate serial:       019765F232C48C1B44C64B279690BE3D086F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
Manifest number:          0976
Signing time:             Thu 12 Jun 2025 21:01:00 +0000
Manifest this update:     Thu 12 Jun 2025 21:01:00 +0000
Manifest next update:     Fri 13 Jun 2025 21:01:00 +0000
Files and hashes:         1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: HRbLdyi66tTSXxLSxGgQHP5Ah9XJEB4O6LZsN0e7cVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 15:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:f2:32:c4:8c:1b:44:c6:4b:27:96:90:be:3d:08:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6
        Validity
            Not Before: Jun 12 21:01:00 2025 GMT
            Not After : Jun 13 21:01:00 2025 GMT
        Subject: CN=e97fcf5d8127f647ff3ad8d563c188a99d5e8fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:37:4c:f1:ec:d5:11:16:6e:18:c8:d8:fb:42:
                    56:f3:f3:39:c1:da:52:fc:90:d1:08:ec:64:d0:a6:
                    17:02:11:48:de:84:24:29:37:a8:d1:f5:b1:d3:33:
                    0d:27:44:da:65:11:84:44:1d:59:3c:46:cb:53:22:
                    d4:38:ed:c0:07:cd:5a:ad:b4:40:5b:f5:e4:73:25:
                    5a:2c:34:fa:b2:92:1f:69:5a:56:12:1b:c5:6c:66:
                    63:eb:b3:56:94:59:60:33:77:f5:8c:c8:14:d1:8e:
                    b3:13:47:25:41:d9:c8:e5:36:b7:0f:b4:bb:57:f8:
                    4d:37:22:87:23:4b:41:59:b4:ee:2a:79:70:31:4e:
                    7e:24:46:dd:79:a6:c1:30:de:96:cb:2a:01:0c:ee:
                    39:cb:0e:ec:0a:bb:8c:47:1e:0d:cf:02:eb:fb:bf:
                    82:4a:08:4f:d5:c3:ce:7c:2e:92:44:30:fc:15:c0:
                    aa:d9:8f:a5:d1:9e:a8:70:4f:1b:ee:44:11:b0:fc:
                    bd:72:86:f3:58:84:96:1b:b2:3a:28:2e:aa:b5:48:
                    3f:d7:8a:ae:ec:a3:81:ec:74:15:be:de:1a:c1:34:
                    d4:92:98:0c:16:f2:64:4f:6f:76:ab:3b:fa:12:34:
                    cd:9a:75:3b:81:bc:8a:c3:44:f6:c3:99:6a:53:ae:
                    92:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7F:CF:5D:81:27:F6:47:FF:3A:D8:D5:63:C1:88:A9:9D:5E:8F:AD
            X509v3 Authority Key Identifier:
                keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a6:84:7d:cc:74:40:27:b9:43:5b:b0:ee:af:e8:93:e0:b3:
         3d:6c:9f:3c:b8:73:3d:17:dc:57:f8:8a:f8:b5:2d:95:a5:6d:
         9f:7d:af:98:a4:7a:e6:b2:6b:18:f6:6b:73:b7:87:c6:88:a1:
         0a:2e:0d:e8:00:98:17:df:47:9a:be:45:96:fd:20:04:54:cd:
         a0:49:3b:49:ef:22:07:11:f7:3c:fb:81:59:b1:ce:36:4e:40:
         1c:c8:f2:7b:dc:6a:e0:9d:96:c7:5a:58:f2:70:fb:da:02:db:
         39:0e:f3:3b:5f:32:9f:9c:12:c9:89:c9:68:5f:4a:71:01:f3:
         8f:5e:d9:16:51:96:b5:82:52:78:f0:07:41:1d:c0:28:6c:19:
         42:4c:7e:7f:02:89:1d:1a:21:78:66:5e:23:b6:5b:b2:38:18:
         31:3c:54:02:4c:df:c2:3d:de:54:46:02:eb:09:83:6e:3f:79:
         5e:22:36:ac:82:e1:43:07:f7:d7:21:95:45:82:bc:c3:b4:de:
         51:c8:11:7e:5e:48:2d:b3:c9:f4:90:8f:c5:e3:f4:0d:8a:39:
         e6:00:ce:4e:4b:7d:07:7c:1a:11:d6:70:24:77:6e:3c:8a:36:
         0c:21:60:50:51:c2:40:84:7b:09:92:0d:52:b4:23:3a:59:87:
         cb:51:63:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 00:59:45 2025 by rpki-client