Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
File:                     dFYQDLNjsOFKnzhOeowc-aO4W_M.mft (raw, json)
Hash identifier:          1GodyiD/R0/LghqCUG12Hsv0RBlqLuMVR8XMN/ZRgJk=
Subject key identifier:   7F:B8:95:58:F1:6D:51:F3:71:7C:24:6F:88:CC:0C:CD:47:55:D0:31
Authority key identifier: 74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3
Certificate issuer:       /CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
Certificate serial:       019749D5922B3F39D720EC1713ECB1ED6342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
Manifest number:          0E9C
Signing time:             Sat 07 Jun 2025 10:00:22 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:22 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:22 +0000
Files and hashes:         1: 6APrd79kmuyNwpex626uNLGMIX0.roa (hash: 7Zm/lOFTt+AfdsIxcjvvrXgteW7mXkxvg9D1ZZh9It8=)
                          2: dFYQDLNjsOFKnzhOeowc-aO4W_M.crl (hash: qX8gppHsG5PjGAgjElQdQLUxJ8sx7gJOvFHKImMPNTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:92:2b:3f:39:d7:20:ec:17:13:ec:b1:ed:63:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
        Validity
            Not Before: Jun  7 10:00:22 2025 GMT
            Not After : Jun  8 10:00:22 2025 GMT
        Subject: CN=7fb89558f16d51f3717c246f88cc0ccd4755d031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:85:3f:e8:84:dc:a5:41:34:57:8b:9d:c7:f3:
                    a7:6d:f4:18:a9:c5:be:3a:99:82:b6:f2:7e:bd:c5:
                    77:87:39:5a:86:25:26:f5:ec:99:0e:04:fd:3d:0a:
                    b8:ff:c4:b7:f9:64:a3:e1:d3:1e:b4:d1:17:48:e6:
                    ff:ec:dc:c9:dd:c8:96:62:b6:3f:19:f3:9f:0c:d9:
                    ae:fc:97:48:30:bf:4e:e8:9e:fe:76:0f:e8:91:e7:
                    a7:3f:48:11:a1:45:18:d9:18:d5:74:e3:2f:51:af:
                    cc:18:82:da:02:ce:d4:f6:16:f4:58:e8:4a:94:ea:
                    b2:5f:ac:2a:73:1b:99:4d:55:97:c5:65:75:3c:f2:
                    fc:f7:0d:a5:94:15:69:34:d7:d9:60:94:ec:2d:28:
                    10:82:60:40:36:3f:95:e5:9a:26:b4:d1:58:27:ea:
                    4f:a3:d5:bd:40:e7:be:c8:29:c7:da:d7:3b:29:dc:
                    f0:15:d7:7a:74:74:2e:38:4c:43:a1:14:f2:a9:b3:
                    34:44:58:ac:0c:96:72:0f:d1:b4:77:38:f1:26:f5:
                    42:3b:4f:8d:0d:fe:32:04:00:3b:0d:44:79:1a:0b:
                    f1:95:c3:8b:df:b2:fd:1a:db:ac:d9:b7:54:96:f2:
                    21:7e:dd:da:3f:a2:67:2d:fa:c4:b6:d3:b6:78:73:
                    af:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B8:95:58:F1:6D:51:F3:71:7C:24:6F:88:CC:0C:CD:47:55:D0:31
            X509v3 Authority Key Identifier:
                keyid:74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c8:10:ed:65:21:6a:59:85:17:fc:97:93:4f:4e:7e:2b:ea:
         fb:5f:7c:91:7a:ab:1f:b1:ae:da:46:94:28:5b:4e:08:40:da:
         d3:d3:0b:32:21:af:30:a1:1a:f9:ad:1e:55:fa:42:7c:44:d5:
         7b:f2:75:73:4c:49:10:7e:42:db:65:75:2e:b9:e4:b8:87:67:
         2b:59:c8:aa:69:49:c5:2d:f6:d4:ea:7b:75:95:db:1d:d2:04:
         b1:f1:52:97:f0:b3:99:5d:2e:a7:47:20:d0:d7:cf:ca:a3:36:
         50:f0:76:5b:0f:ee:71:2c:24:a9:09:6c:19:57:1d:29:3e:87:
         82:d5:fa:f3:15:20:8e:e0:09:1b:3c:c6:d0:41:5f:e3:42:fb:
         9d:99:01:65:f0:cf:23:7d:ee:51:9a:1f:91:64:f2:86:30:a7:
         4f:45:6a:1b:b9:3d:b0:d5:ff:27:f2:2e:e6:9b:a0:c6:08:7d:
         82:a7:55:5b:55:30:6a:67:6b:2c:23:64:ea:78:fe:49:00:51:
         11:88:d5:9d:5a:f0:c9:c5:5e:8d:ea:bf:ae:d7:fd:a1:62:b3:
         2c:86:b2:2a:bd:29:ad:7b:eb:21:5d:12:75:19:e1:74:ba:0e:
         de:80:70:b7:b6:7a:6e:2d:c8:be:70:7f:9b:ee:e6:ba:b6:2a:
         cd:df:eb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:54:20 2025 by rpki-client