Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
File:                     o6mFw54-kRuYDpOgZkAVfp4FLSM.mft (raw, json)
Hash identifier:          f0uSENilnw71g+FWpg8S5QUCqYZumnMLyZRSKfsRiBg=
Subject key identifier:   FA:0B:E0:F6:BF:86:F8:90:AD:28:06:FF:DB:6F:5F:5C:7B:A8:58:15
Authority key identifier: A3:A9:85:C3:9E:3E:91:1B:98:0E:93:A0:66:40:15:7E:9E:05:2D:23
Certificate issuer:       /CN=a3a985c39e3e911b980e93a06640157e9e052d23
Certificate serial:       01974D7C13719C01BA55240D87392E45406A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
Manifest number:          10EA
Signing time:             Sun 08 Jun 2025 03:01:06 +0000
Manifest this update:     Sun 08 Jun 2025 03:01:06 +0000
Manifest next update:     Mon 09 Jun 2025 03:01:06 +0000
Files and hashes:         1: 3REEAprnZIBusO6q6WWrCX9P-HM.roa (hash: vH8qgeYWcERpU9E7qeOHsrxBazYwgyfC550mI+D0FkE=)
                          2: o6mFw54-kRuYDpOgZkAVfp4FLSM.crl (hash: ZK0miIJOohqZ0ODIpr26YJ8VroaVMXTXDq57DcRcWVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7c:13:71:9c:01:ba:55:24:0d:87:39:2e:45:40:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3a985c39e3e911b980e93a06640157e9e052d23
        Validity
            Not Before: Jun  8 03:01:06 2025 GMT
            Not After : Jun  9 03:01:06 2025 GMT
        Subject: CN=fa0be0f6bf86f890ad2806ffdb6f5f5c7ba85815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8b:24:3f:e3:95:97:dd:0b:00:1e:11:9c:6e:
                    b9:c2:90:fc:e7:51:a9:ed:c4:c2:34:49:38:20:1e:
                    0b:75:de:35:94:93:50:fe:87:fb:e8:64:79:df:5a:
                    42:37:08:61:c1:33:8a:86:0a:a4:54:ac:9c:5a:48:
                    40:ff:e6:0a:ec:f9:0c:4c:c9:df:da:42:58:e8:ad:
                    1b:f2:dd:41:d0:8c:1f:55:8e:d0:be:f7:e4:ed:18:
                    04:2b:09:df:12:94:c7:64:42:50:56:db:9a:e4:40:
                    96:7a:c8:e6:84:3f:c7:72:7c:7c:22:55:dc:24:7c:
                    9f:c6:2d:70:a8:89:04:fc:1a:fa:bd:d5:d9:e9:5d:
                    a6:df:42:3d:5f:10:1f:6d:47:ee:75:0f:0d:8c:81:
                    5b:9c:55:23:c6:85:a9:8c:c9:8e:bb:fc:92:57:03:
                    fb:d3:6b:59:f7:21:aa:10:66:85:8b:9f:7d:b1:71:
                    76:6e:80:9f:62:4b:7c:a0:45:b1:f7:7d:fd:fc:a4:
                    eb:8f:53:2d:6e:54:db:31:fa:df:0f:a3:e7:bd:96:
                    73:a2:d1:37:4d:9a:da:90:80:bb:46:0b:f3:72:50:
                    14:ed:c4:b5:58:b2:24:97:e5:92:83:06:79:fd:6d:
                    ad:47:3b:5d:0e:ab:3b:b2:91:ab:b1:9f:41:c5:38:
                    90:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0B:E0:F6:BF:86:F8:90:AD:28:06:FF:DB:6F:5F:5C:7B:A8:58:15
            X509v3 Authority Key Identifier:
                keyid:A3:A9:85:C3:9E:3E:91:1B:98:0E:93:A0:66:40:15:7E:9E:05:2D:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:0b:4d:3c:f7:66:c7:b7:b8:fd:04:2b:ec:64:b5:1c:99:8c:
         37:c0:d6:fc:4a:65:85:72:9b:3a:2f:62:87:bb:8f:7b:26:b7:
         fb:d9:ac:64:56:c1:7e:0b:a6:75:c1:86:65:89:7c:55:cc:c0:
         37:0c:8d:8c:18:03:74:4f:96:eb:a5:73:c7:24:80:96:e3:b9:
         8e:42:ff:5b:e9:a5:f7:25:0a:68:84:41:ea:d5:0f:51:c6:bf:
         e9:44:d5:57:cc:17:38:32:fa:68:c9:08:c4:d3:44:23:63:d9:
         a2:58:7c:d1:17:53:cf:7d:a9:b1:c6:37:6f:7d:78:ce:2a:29:
         9c:3b:1b:9e:c5:ee:d2:2f:a6:49:f9:7a:a9:4e:9c:34:e1:c7:
         d1:76:07:26:a8:60:57:36:b4:07:6f:30:64:57:7f:08:c0:3e:
         d7:86:b9:74:4f:44:a3:e3:91:af:25:ba:f3:ff:b5:8d:80:dd:
         6e:36:81:be:17:20:db:7d:ba:9e:ed:4e:1b:5b:6a:8e:4b:48:
         8f:f1:af:38:eb:f7:03:5d:93:95:bd:8b:26:6a:77:fa:b5:93:
         04:c7:5c:c6:84:1c:a5:e4:6f:ec:6f:0a:1e:f5:42:ee:ed:e6:
         e4:02:77:16:87:f7:d3:61:83:49:b1:a6:c6:db:19:2b:c2:1e:
         4f:62:44:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:35:30 2025 by rpki-client