Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
File:                     1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft (raw, json)
Hash identifier:          s71NDD4j07wnm4TGyC0PTzDKuCqc+3WRE2Vx1Wt24GY=
Subject key identifier:   F7:E8:CE:DF:E8:F5:03:45:72:00:06:22:03:55:FB:38:ED:8E:BF:CC
Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
Certificate issuer:       /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Certificate serial:       01974BC4121D16BF4B0EB7D08AD7C4D18EFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
Manifest number:          0E0F
Signing time:             Sat 07 Jun 2025 19:00:30 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:30 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:30 +0000
Files and hashes:         1: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl (hash: GzQpKdD81h7MhXvu/IJDeJnOjnwUcEdOl03DziGdKww=)
                          2: cOp1cqfBELUzDJ5OCVCcFEeZSnw.roa (hash: TeUirEuTA43EYVzOUWEt62Nw9bA/6GjvRc1N3Wwsl64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:12:1d:16:bf:4b:0e:b7:d0:8a:d7:c4:d1:8e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
        Validity
            Not Before: Jun  7 19:00:30 2025 GMT
            Not After : Jun  8 19:00:30 2025 GMT
        Subject: CN=f7e8cedfe8f50345720006220355fb38ed8ebfcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5f:b0:db:c0:e9:75:03:2c:96:5f:b8:6f:46:
                    b8:7a:39:ae:26:ac:73:21:e3:71:e0:75:fa:4a:31:
                    3c:88:02:1c:e6:a6:9d:a5:1a:ca:c6:03:b9:a5:7a:
                    21:d3:78:e9:0a:25:82:7c:b1:13:59:b3:f9:d9:03:
                    87:39:f1:59:77:73:c7:f8:d1:dd:24:08:9c:7c:58:
                    17:df:fd:9c:ae:71:ea:6f:ce:3b:87:98:81:e9:0c:
                    0e:01:16:dd:b9:03:c0:8a:e3:46:f2:16:f5:dd:2d:
                    55:b1:71:fb:8a:e7:ee:18:59:6d:8f:f3:4b:59:e3:
                    db:c0:46:ba:df:ea:79:8d:6a:1c:1c:ed:3a:ab:9c:
                    b7:4e:50:2e:6f:76:da:22:e1:1a:8d:c4:0e:e0:14:
                    5e:09:a1:b1:55:62:9b:c9:11:5a:e4:dd:37:f2:b9:
                    23:de:f7:54:1e:0d:81:32:5d:94:59:4f:19:db:6c:
                    23:2e:a3:38:cb:35:f4:d0:f5:08:69:aa:d7:06:9e:
                    ba:9b:c8:17:79:04:c2:c0:84:97:6d:0c:6e:18:61:
                    16:49:0d:eb:d8:ed:38:9b:14:b9:4d:e9:30:b0:3e:
                    64:21:bb:0f:e4:16:f2:f6:54:68:df:75:e9:c1:84:
                    93:d3:69:5c:62:49:ff:7a:2b:fc:0f:f8:99:67:e9:
                    7c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E8:CE:DF:E8:F5:03:45:72:00:06:22:03:55:FB:38:ED:8E:BF:CC
            X509v3 Authority Key Identifier:
                keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:53:19:c3:a2:79:d0:f0:e6:4e:96:00:0e:77:20:7d:bc:7d:
         e5:97:b5:ad:ee:1a:35:95:da:1e:65:9a:d1:51:2b:81:0d:e2:
         95:3d:cb:54:09:4e:1f:a2:7c:fe:ac:e9:2c:c2:02:27:41:e0:
         7d:40:d4:a5:44:2a:7e:e0:11:d0:9e:5f:8e:75:0b:02:d7:90:
         2a:2e:4b:24:51:5e:d4:12:88:8f:d7:62:ca:9a:e3:fa:7f:c8:
         60:c7:09:01:51:bf:23:3d:22:6d:fc:2c:91:1e:ba:9e:87:dc:
         57:96:04:b9:d5:b2:a3:9f:17:65:11:e8:50:da:f7:85:2e:eb:
         f0:6c:ea:a3:b9:6a:94:fb:12:45:bd:12:b5:e6:bb:a2:51:02:
         fa:f2:0a:fe:64:5f:f5:f4:f1:1f:83:c6:97:eb:44:3c:76:d5:
         39:0e:7b:76:44:bd:f0:a0:e8:e5:90:8e:f6:04:e6:e7:0c:dc:
         8b:7a:54:19:54:ee:57:df:0b:b2:d4:68:a0:52:18:74:27:98:
         2d:df:76:d6:81:b1:c6:48:a7:8a:cc:4c:3b:c9:03:8b:95:25:
         5d:72:19:8c:7e:b9:1f:8a:6d:5b:8b:42:30:5e:0f:57:d2:53:
         01:64:cf:71:1a:cf:48:eb:7b:67:7b:0a:3b:5d:fc:7b:7f:f2:
         9f:4b:50:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:56:37 2025 by rpki-client