Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
File:                     DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft (raw, json)
Hash identifier:          8BERsMHqJKX1XP8PVm82xhGmucpIzkjf5IYmveAGwa4=
Subject key identifier:   1F:8A:78:84:8E:FB:85:69:7A:4B:5C:5D:E2:67:80:36:16:66:C4:F5
Authority key identifier: 0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76
Certificate issuer:       /CN=0ea54639316f5cd5287f841d7f8cff16521d0576
Certificate serial:       0197458B6CA4A3AD994A47BC95BE0F583BA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
Manifest number:          02AE
Signing time:             Fri 06 Jun 2025 14:00:54 +0000
Manifest this update:     Fri 06 Jun 2025 14:00:54 +0000
Manifest next update:     Sat 07 Jun 2025 14:00:54 +0000
Files and hashes:         1: DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl (hash: dUIepJ+Z2MaUXYfHIt+rzqU7+30gFvKPjtiqo0CdMnA=)
                          2: abGEnkiRCC-QdoOIOJ74wLOfNK4.roa (hash: xQuRCd3BN/tXelIZ1CEEcNjDIYPDQbZRMsaEZajsFYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:8b:6c:a4:a3:ad:99:4a:47:bc:95:be:0f:58:3b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ea54639316f5cd5287f841d7f8cff16521d0576
        Validity
            Not Before: Jun  6 14:00:54 2025 GMT
            Not After : Jun  7 14:00:54 2025 GMT
        Subject: CN=1f8a78848efb85697a4b5c5de26780361666c4f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:65:6a:aa:76:cd:69:1c:5a:d2:54:8c:d1:ab:
                    4f:d4:ab:7c:0e:92:de:24:27:8b:7d:eb:ff:cc:76:
                    a7:42:6c:88:be:eb:c5:2f:ef:26:1a:35:c0:cf:aa:
                    81:b5:4b:ce:0f:6f:56:dd:20:6b:c7:d9:45:62:c3:
                    27:ab:65:c1:ef:35:9c:41:c9:7d:f6:47:6d:ad:91:
                    60:08:3a:69:f0:be:79:16:5f:9d:64:55:88:b3:5e:
                    8a:50:2c:9d:f0:72:72:a0:49:20:dc:72:11:32:2b:
                    bc:b3:0b:4c:77:f1:ee:eb:9d:75:dd:40:eb:91:ff:
                    9f:22:48:51:bc:bc:00:d3:f9:d4:a0:c7:1a:ec:14:
                    5e:bf:2a:58:14:51:6d:ac:94:40:62:91:6b:f9:73:
                    cb:4c:c4:73:ac:ff:74:0e:4d:16:22:3d:14:45:31:
                    78:87:10:15:67:a2:86:b2:d6:d9:ba:69:b0:50:7e:
                    bb:13:af:2f:21:c2:b9:5f:e4:d4:aa:15:0e:3f:86:
                    4a:85:2e:9f:87:01:19:85:98:e1:38:48:5e:88:de:
                    c6:a5:86:10:ac:ab:55:29:0c:18:9d:a4:48:8a:fb:
                    ab:dd:bc:f6:09:ce:51:e8:fc:68:70:05:87:08:91:
                    f3:f8:1a:e9:c5:a3:31:91:2b:67:04:6b:7d:32:1c:
                    27:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8A:78:84:8E:FB:85:69:7A:4B:5C:5D:E2:67:80:36:16:66:C4:F5
            X509v3 Authority Key Identifier:
                keyid:0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f1:ab:46:3b:e8:16:ba:d0:98:f4:c6:77:d7:be:1c:e9:83:
         96:03:a5:5e:3e:da:4f:2d:87:ee:af:51:9d:a6:79:41:37:6c:
         52:ec:11:bb:ee:44:41:a1:bb:a9:9c:a6:1a:89:fd:3b:f3:44:
         5b:ec:b3:2b:ac:93:10:8a:ab:08:55:7d:8d:74:c5:53:c3:11:
         fd:d3:4d:1c:86:40:20:0e:d5:15:92:6f:d6:39:60:9f:43:a0:
         ff:68:89:82:15:ec:a2:6f:ce:b8:27:2e:6c:b9:0c:eb:e4:47:
         b5:a3:07:07:67:2d:6e:9b:2b:6e:c5:49:55:15:2c:23:b8:b0:
         2a:a4:f8:38:43:bc:3f:67:3d:32:35:5e:e2:c9:b8:99:fb:5c:
         66:0a:fc:b3:93:e6:5a:dd:fa:08:65:03:13:48:07:e1:d0:52:
         03:94:78:df:8c:a2:df:f6:e9:41:20:8d:3b:4a:09:ed:24:24:
         d7:fb:9b:e8:9e:65:4c:e7:25:e4:50:60:9c:38:92:ba:85:99:
         31:9b:5c:be:35:07:f0:6c:4d:a3:9f:9f:55:f0:e8:6b:9c:d8:
         cd:41:91:d3:fd:9b:ea:b8:83:e0:6f:de:c8:49:fa:f3:94:c9:
         5e:02:ad:6a:98:a9:75:b4:f0:3b:fd:16:b1:0c:40:73:73:be:
         7c:b6:1d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:35 2025 by rpki-client