Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft
File:                     fZZeprOcIq7CrS1NTAo6MT3x3vo.mft (raw, json)
Hash identifier:          +5lAPdPzctEsDsO3Z4e324Wdj2rWPUBXrgPC9/0EZ1c=
Subject key identifier:   16:A2:E9:81:4D:66:C9:2B:0B:53:70:58:4B:F0:10:75:91:71:81:22
Authority key identifier: 7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA
Certificate issuer:       /CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
Certificate serial:       01974A439ADD9A255C251DE1BD7A1E108687
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft
Manifest number:          097C
Signing time:             Sat 07 Jun 2025 12:00:33 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:33 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:33 +0000
Files and hashes:         1: 5jihEGuQ4yw7LrN-GxhKRXWzO7o.roa (hash: i+yfzR8jSMTDKBjs/TXoC5+0uTvIRes38f4P8v9dk/U=)
                          2: S0vegGpuiCercYtclM_VH2iVx7s.roa (hash: ei9rkB9FlPql94JwrTYWOFRSXcUG8H3/4pXhvmG/1Ts=)
                          3: fZZeprOcIq7CrS1NTAo6MT3x3vo.crl (hash: f2QEQc3eaAjLsi2Rk/ef7w3YVrdw2ZFUThd4uFJ8erI=)
                          4: gZAbXdKIIXZyGHDR512yiOhKrvc.roa (hash: 4+QF/lBUbocOIUtLLdqUYJCroIpokm/YAFfvzHG47+I=)
                          5: mj4UpOOYclM_JjTHAP2KswbbaQE.roa (hash: fAJCCsd04w67kSJn49D770vpfkErruO7UmQMEWCwKcE=)
                          6: z9wFFZP_zA_tDeAiN8JtnO6v01o.roa (hash: i8cRhIUjXH5IXxi+AFlUMsquHQWq5em4btklWiJYWAQ=)
                          7: zQfM-JDEyYtnlHUMMTArONbOmM8.roa (hash: BsV8fCwOGo+p3hz5+JexWR4GrgumAGIe4ztslYYq+fQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:9a:dd:9a:25:5c:25:1d:e1:bd:7a:1e:10:86:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
        Validity
            Not Before: Jun  7 12:00:33 2025 GMT
            Not After : Jun  8 12:00:33 2025 GMT
        Subject: CN=16a2e9814d66c92b0b5370584bf0107591718122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:91:eb:46:f2:3f:56:78:28:a9:58:15:f2:4d:
                    17:e7:f7:75:3a:ae:75:74:91:ad:71:d7:d3:3c:05:
                    d1:b1:26:eb:c9:92:77:71:1c:60:df:90:c1:62:b8:
                    5a:36:6e:19:5e:db:65:72:7b:43:1e:54:05:67:02:
                    1a:84:53:52:20:6d:cd:d4:88:c7:66:b5:e4:3e:73:
                    f7:a5:31:e6:f6:59:5b:68:54:04:49:7b:72:21:ff:
                    15:3f:1b:fc:66:f9:36:ce:a4:5e:03:94:3a:6b:bc:
                    0a:fe:77:d0:d6:c7:26:d9:a2:96:1f:95:c8:84:da:
                    28:28:1d:04:33:cb:c8:bd:92:75:a8:56:0b:42:e6:
                    bf:72:0c:54:52:12:67:60:4a:fe:e9:db:fe:81:1d:
                    16:54:d5:ea:49:be:b2:43:e5:3f:2c:40:c8:15:32:
                    91:4b:55:26:4f:92:7e:b6:b0:5e:a8:19:87:23:b4:
                    cb:cf:8a:bb:72:37:16:ea:52:98:1d:c7:08:c7:40:
                    92:8c:61:e5:60:c8:6b:cc:3c:dd:1d:72:07:9d:52:
                    2a:dd:49:95:d8:0c:4f:d6:0c:2e:ac:7b:d3:24:91:
                    ed:26:3c:9a:0b:a8:04:23:fd:32:eb:cb:76:30:14:
                    e3:b8:f8:40:5a:6e:a9:6e:d2:33:e1:aa:3b:86:36:
                    3e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A2:E9:81:4D:66:C9:2B:0B:53:70:58:4B:F0:10:75:91:71:81:22
            X509v3 Authority Key Identifier:
                keyid:7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:03:2d:18:4e:a2:13:78:39:c7:81:7e:44:8b:81:9d:d2:6d:
         d1:df:5e:35:ab:53:13:95:22:0b:cd:63:ae:e7:68:81:67:a4:
         a3:ff:62:4e:b7:15:63:0b:8a:53:3a:88:88:86:42:93:53:60:
         b6:67:1f:04:06:b6:b8:22:f3:23:9c:2a:2f:d0:64:74:a6:ba:
         3c:3d:43:ea:93:bc:e5:86:f8:64:74:50:de:6e:95:bb:76:69:
         5b:81:4d:3f:3f:d2:53:71:cf:00:28:51:c1:12:3f:f8:8b:a8:
         6c:30:5e:02:27:6d:b9:87:e7:b6:11:4b:94:bd:6b:2e:6e:d3:
         f8:27:02:0c:85:f5:15:cb:3c:a1:a6:7a:8b:d8:73:24:a0:d1:
         58:6e:2d:09:5d:58:41:21:10:bc:63:d3:ef:f9:7a:c2:1f:ea:
         27:39:f6:62:4c:f3:ac:19:0d:34:84:76:01:93:40:f8:6e:29:
         19:a9:13:41:6c:26:ae:eb:53:a4:35:b0:e6:fc:45:9d:90:47:
         47:33:e4:2e:d7:f7:46:75:da:7d:ba:86:00:c7:60:04:7c:dc:
         76:26:9c:51:5a:26:38:82:6d:bf:4f:c5:bb:b0:bf:76:92:8f:
         65:2b:14:09:bc:c4:71:db:b6:33:29:7c:fd:28:a0:0e:ad:f9:
         41:4c:06:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:21 2025 by rpki-client