Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
File:                     B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json)
Hash identifier:          wlusTuYbkvfeOS78M2Tw8uh7g7aCfYoFrDQk6flinuw=
Subject key identifier:   FA:A7:9E:D0:38:46:43:7B:6B:26:81:01:55:DC:CC:84:B8:73:FC:3C
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Certificate issuer:       /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial:       01974B8D5818AC8AA07345A43D59747B2B5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
Manifest number:          1453
Signing time:             Sat 07 Jun 2025 18:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 18:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 18:00:43 +0000
Files and hashes:         1: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: 1bwJ7J0+YkObLc3Qr2R7Jvy0LjUzDmZrxMg8fYo+/3I=)
                          2: ymgejZXQAFGY4W5XJssEnhi7B6U.roa (hash: 6jBjJYjwNGCZyUd70W3B/Q80kGLCgiNFZzX5URwj3Fo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:58:18:ac:8a:a0:73:45:a4:3d:59:74:7b:2b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
        Validity
            Not Before: Jun  7 18:00:43 2025 GMT
            Not After : Jun  8 18:00:43 2025 GMT
        Subject: CN=faa79ed03846437b6b26810155dccc84b873fc3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f0:7e:88:39:1f:25:e7:6c:2f:a8:16:4f:5f:
                    d0:3e:a4:f0:fc:46:0d:d1:93:44:e6:4b:bd:03:b4:
                    a8:da:35:c8:03:b5:9e:7e:a3:d8:e0:32:a5:ef:90:
                    97:9a:09:8d:48:75:db:86:37:2f:5c:ed:2a:e0:fe:
                    5e:9c:45:c7:ce:01:93:a2:fe:92:51:6b:e4:51:d6:
                    3c:39:72:89:dd:7e:89:6c:50:3b:3e:06:c3:b4:04:
                    d2:0c:ec:b1:9a:a6:78:04:6d:f5:1b:e8:fe:f8:11:
                    f1:42:6c:37:cb:78:dd:52:45:af:ac:9a:92:df:3f:
                    09:51:4c:90:f6:b1:74:b1:da:db:0e:18:54:77:33:
                    f7:f8:7f:24:7d:ae:eb:bb:b7:29:29:33:de:39:b3:
                    35:53:07:e5:14:1a:21:3f:28:43:58:2b:ea:e5:02:
                    2c:0b:32:dd:96:ae:9f:a0:75:86:71:a1:b6:4b:8a:
                    0f:da:04:c7:dd:61:87:4b:22:aa:6e:10:69:70:58:
                    dc:fc:38:30:c5:7a:f7:7c:23:67:c3:11:8b:33:06:
                    88:a3:05:5c:de:16:15:34:80:26:c0:49:96:64:e3:
                    9a:f7:d8:66:e9:18:7a:82:97:58:88:95:7e:4a:ae:
                    25:71:8b:c1:4d:73:01:5c:72:0a:ae:94:4e:bc:2e:
                    68:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A7:9E:D0:38:46:43:7B:6B:26:81:01:55:DC:CC:84:B8:73:FC:3C
            X509v3 Authority Key Identifier:
                keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:63:a0:3b:d1:d1:da:b8:62:2a:ae:a1:ea:15:85:f8:67:5c:
         64:d4:e1:cf:d9:24:7c:3f:73:9b:f1:6b:b2:5e:4d:61:0b:23:
         ed:2e:dd:81:79:65:f8:ae:2a:ac:ad:83:72:32:ad:55:4c:75:
         68:46:b8:35:b2:16:4b:b8:44:16:b9:ef:98:f1:97:5d:a6:d0:
         76:35:42:b9:98:c5:d8:8d:13:f9:55:8f:b0:7f:38:80:af:e2:
         58:41:89:81:e4:2c:8c:fe:b8:eb:5d:d0:f5:e0:5f:84:59:38:
         c3:f6:b4:f1:f0:d5:c7:02:af:d3:a9:6e:78:49:92:ef:87:7e:
         e5:00:20:17:e3:bc:58:10:6b:75:36:e6:95:9b:20:6b:6e:ef:
         91:75:e7:34:00:ba:b4:57:52:3b:1e:8d:5d:69:03:f1:61:99:
         8b:4b:bd:51:32:7f:fc:b8:02:16:88:cf:3b:58:a0:fa:ee:ca:
         3c:8d:ef:06:51:2e:ad:45:4c:b4:1a:c8:56:b4:57:e3:65:35:
         d5:1e:66:35:09:e5:7c:22:d5:27:9e:32:86:53:87:0c:ba:68:
         f6:6c:89:78:50:35:e8:22:16:41:aa:16:18:13:5a:f9:06:09:
         d0:45:ad:56:31:d1:c4:76:7b:e3:af:c7:23:e9:9d:1d:3f:f2:
         9f:5b:08:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:19:42 2025 by rpki-client