Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File:                     D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier:          4iNVC9EY5hO3gmse5GTB6OJN40uuAlo21P2CdU+NMCM=
Subject key identifier:   17:0B:F1:E6:D6:62:A0:BE:64:8B:47:5C:16:CD:3D:9B:CE:80:06:DB
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer:       /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial:       01975EDD43A976A5BFA65AE9FCF993FEC1C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number:          13AA
Signing time:             Wed 11 Jun 2025 12:00:48 +0000
Manifest this update:     Wed 11 Jun 2025 12:00:48 +0000
Manifest next update:     Thu 12 Jun 2025 12:00:48 +0000
Files and hashes:         1: 8pH2Kj7JdTUDyNsQSflcyU8KfKg.roa (hash: zwDU/jKNnBFtGNt7tHJBjkfOSMvDNIS5NSTqFRpcGt0=)
                          2: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: dymtMI4CbsexYaUU2phm3UlEf+uRQ/HYAygMBiluwh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5e:dd:43:a9:76:a5:bf:a6:5a:e9:fc:f9:93:fe:c1:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
        Validity
            Not Before: Jun 11 12:00:48 2025 GMT
            Not After : Jun 12 12:00:48 2025 GMT
        Subject: CN=170bf1e6d662a0be648b475c16cd3d9bce8006db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:d1:c3:ea:da:05:ef:55:07:37:cf:27:39:
                    97:3f:ea:f8:d2:ef:55:c9:3d:a5:f7:8f:c9:36:e8:
                    ee:df:d5:70:96:f9:e3:44:79:2d:1a:6e:9a:43:60:
                    db:fb:f0:36:f7:88:0b:57:07:e2:96:08:78:45:88:
                    a1:c8:4f:4b:ad:f5:3d:02:b3:02:58:61:f4:61:9e:
                    6e:f7:d6:3e:e6:ac:5a:6f:c0:9d:a2:b1:6a:ff:91:
                    00:84:67:ad:19:e5:2d:8c:37:ff:6b:f6:d9:a4:4e:
                    69:6e:cf:5a:a5:d1:a9:4c:e2:36:77:0d:27:84:ce:
                    20:40:97:38:66:47:f1:64:90:1a:74:d6:ef:bc:c1:
                    c0:3a:82:44:e0:7d:ac:b6:bb:f9:2e:43:db:b3:ad:
                    83:36:d3:51:a0:41:dc:72:fd:37:59:15:18:41:1f:
                    f1:63:45:25:b7:7d:aa:da:70:84:9d:f2:4e:1d:3b:
                    29:df:66:3c:ae:39:34:5d:cb:e2:41:f0:fc:a4:df:
                    70:61:7b:ee:de:14:01:0f:4f:16:17:f7:49:a5:1f:
                    55:79:ff:a4:18:a8:e7:de:51:70:6b:c3:0c:1f:bf:
                    43:5b:57:94:75:fd:ee:e2:3c:23:a0:81:b6:93:2d:
                    f2:2a:f2:98:4f:14:9a:12:57:8b:99:e3:60:08:48:
                    0f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0B:F1:E6:D6:62:A0:BE:64:8B:47:5C:16:CD:3D:9B:CE:80:06:DB
            X509v3 Authority Key Identifier:
                keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e7:88:4a:15:91:32:44:a5:6c:63:1c:af:08:1a:94:3f:54:
         6c:7f:25:6d:5b:dc:69:90:ed:55:56:aa:97:bd:97:54:bf:c2:
         f2:30:3a:71:c4:a2:1b:22:60:12:ba:d1:8f:7d:ca:d0:af:c8:
         65:32:d3:2b:c0:e4:e7:23:e4:51:b2:cc:27:00:36:f4:61:83:
         18:7b:47:9f:17:f1:1c:71:7f:52:d6:de:48:4c:21:46:e2:d6:
         46:7c:cb:ed:9f:e5:53:bb:1f:61:0c:8c:76:6f:ef:91:86:f4:
         27:6f:e0:6c:2b:f5:60:4a:ec:54:75:a4:fd:09:1b:a1:09:03:
         c8:ce:51:53:70:b0:c9:6d:55:12:f1:cc:f3:64:4a:2f:9f:38:
         18:03:f7:3a:fa:8c:e7:a5:a9:dd:07:11:c9:ae:6f:8d:be:d0:
         10:26:d9:bf:fa:e6:27:0f:ef:0d:30:a2:1c:7f:2c:d8:af:a8:
         6e:cc:ff:c0:4f:a9:82:48:44:cd:b8:d2:2d:ff:cb:2a:43:f3:
         e0:ff:4a:4f:3d:14:dc:88:42:46:ce:c4:b6:8e:48:28:1b:40:
         75:2a:59:2d:06:04:3f:70:d7:0d:20:12:ce:32:b9:16:e0:12:
         6c:7d:55:30:3f:39:65:65:20:32:4f:93:41:d2:85:4c:d7:b0:
         5b:35:33:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:30:55 2025 by rpki-client