Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
File:                     2783kJzhe6U62QqGMjd6XZOHQ-U.mft (raw, json)
Hash identifier:          D0t6lD8bbuKag4HoEeJbiPTefwnMh5Ff6/rezOc8/3k=
Subject key identifier:   42:04:9A:F1:70:10:8B:48:3C:AD:54:44:D7:36:A9:5A:4F:BF:F1:4F
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Certificate issuer:       /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial:       01974FD8224D14D4B26C07C94B6A9E3AB513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
Manifest number:          0B43
Signing time:             Sun 08 Jun 2025 14:00:53 +0000
Manifest this update:     Sun 08 Jun 2025 14:00:53 +0000
Manifest next update:     Mon 09 Jun 2025 14:00:53 +0000
Files and hashes:         1: 2783kJzhe6U62QqGMjd6XZOHQ-U.crl (hash: 1n+2l4U3GR2jsVq99GhPxVzvI51EqjEccz5BN7iIq6k=)
                          2: 49OmEENKn2pggkZrla5_tvJAS5g.roa (hash: y2VOplSKaFK6l6b//Hy/89Z9on3Nk836w0LqiWTCSxQ=)
                          3: 98r0bNxXEDMvZ7j6PltFu8qJeJg.roa (hash: EU18mwS21+icltyLGLTMkrjH38LD7S0gNFf/o4/z9BM=)
                          4: lZqh98v1p7SMdnTevU2ohDFVTYU.roa (hash: O0iB20pJ4bqjR3GQawrzp1OwygFy4onsg0mr0/s03uQ=)
                          5: xOL_ByJQJZQBMqDAvRuOKjD76Yk.roa (hash: oV4k7YTonHST8wxb9nEmyy0EnbuDv3hYSGZBk73gZvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:d8:22:4d:14:d4:b2:6c:07:c9:4b:6a:9e:3a:b5:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
        Validity
            Not Before: Jun  8 14:00:53 2025 GMT
            Not After : Jun  9 14:00:53 2025 GMT
        Subject: CN=42049af170108b483cad5444d736a95a4fbff14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:f1:f5:0d:61:e2:fe:e1:0f:d9:4a:77:bf:
                    7d:82:a6:3b:47:1c:06:77:da:42:cb:19:5e:5d:16:
                    68:62:81:7a:66:a1:6c:34:72:6e:d6:90:c3:e3:a5:
                    fd:3f:e1:00:ab:41:81:ed:34:d8:27:5e:cb:5a:e3:
                    ca:04:ff:52:a0:1d:5b:c4:57:79:8f:05:59:f8:99:
                    a1:ed:d4:6b:5f:91:7d:43:ea:c0:ad:bd:51:36:87:
                    59:64:b7:b8:83:b3:25:59:a2:f0:88:8a:9f:1a:22:
                    1b:b2:22:42:d3:ea:7a:03:89:26:1a:d3:10:89:37:
                    38:e9:39:24:be:56:be:47:3b:db:82:a3:dc:52:38:
                    7f:50:a8:15:b3:2e:96:22:4f:56:0d:49:b0:66:f5:
                    a1:3e:ac:a2:5c:d8:a1:8b:5a:af:2a:85:4f:3d:fa:
                    dc:d1:fb:46:6a:59:52:50:d1:f4:05:23:36:82:a8:
                    a3:ea:2f:c4:29:fd:4a:bf:36:d5:9a:92:4f:bc:c7:
                    13:69:07:4f:b5:a6:95:c5:4f:47:52:08:3a:2a:92:
                    eb:ce:b0:4d:fa:5b:e1:44:66:05:b2:9e:c2:a9:bf:
                    c1:80:b1:6c:bb:f7:cf:0c:6b:e5:5e:5d:b8:4c:03:
                    34:db:a9:91:0b:f1:65:ac:2d:24:56:9c:ce:e0:7b:
                    b8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:04:9A:F1:70:10:8B:48:3C:AD:54:44:D7:36:A9:5A:4F:BF:F1:4F
            X509v3 Authority Key Identifier:
                keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:81:47:2c:16:49:d4:3d:59:27:aa:08:cd:20:71:f6:28:fd:
         af:fc:44:4f:4f:80:58:ff:cd:4e:6e:98:27:31:5e:82:e9:ae:
         c8:18:03:5f:ff:30:b1:aa:d0:4b:ed:dc:0c:9d:be:b4:d4:08:
         a2:7b:f9:eb:2d:af:9c:92:97:cb:84:fb:ba:1e:d1:c2:12:f2:
         27:ec:21:17:df:eb:6d:4f:28:8e:a8:a6:6b:07:02:09:56:db:
         bc:90:07:dc:d6:89:92:34:99:5a:ab:fd:70:a2:0e:3d:8b:63:
         a4:f5:f7:59:38:c1:bc:b4:d9:40:47:75:3f:00:ed:87:d1:a3:
         e5:3f:cd:6b:8b:36:ce:de:c7:9f:c7:63:f0:7d:f5:6d:cb:1d:
         e6:20:38:09:c3:0d:a1:33:7b:34:3b:19:91:8b:9b:40:cc:8a:
         a4:7a:fd:f5:65:32:14:5a:93:a1:5a:b5:93:b2:09:db:a7:f4:
         96:6e:09:44:c4:2a:c7:5e:15:50:14:84:f4:27:92:1a:e0:4b:
         78:5d:58:96:67:83:db:ac:0f:d6:4e:84:2b:61:be:4a:60:80:
         24:48:cf:6b:44:ed:e3:c8:f7:b8:48:97:b6:50:14:1f:a0:21:
         28:1e:4d:64:28:33:71:b6:fd:56:87:10:05:92:f3:51:bd:f2:
         47:f1:c1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:18:37 2025 by rpki-client