Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
File:                     da9OLDR4Dz2fUegKU7rDvm8yWUM.mft (raw, json)
Hash identifier:          /HU1q8lO4G5EV54hst7lY1ilDLmAYFBMubG3reDWQzc=
Subject key identifier:   FC:14:74:CA:A9:9F:9E:53:28:47:C2:AB:C0:51:55:93:E2:79:E1:41
Authority key identifier: 75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
Certificate issuer:       /CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Certificate serial:       019749D59961863745FDCFF582EB090F5C91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
Manifest number:          0E66
Signing time:             Sat 07 Jun 2025 10:00:24 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:24 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:24 +0000
Files and hashes:         1: 4FCKqar0XtnEKUi3gFfvOiKskUg.roa (hash: n0va6MokXLOyx5Mouds6xLFs3obz/ZHN/b5YuHxhU6k=)
                          2: da9OLDR4Dz2fUegKU7rDvm8yWUM.crl (hash: T1j1Ea+Z4iKPsd5DAkTC0hgsQbX7jdB4FU+SwF6ZJgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:99:61:86:37:45:fd:cf:f5:82:eb:09:0f:5c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
        Validity
            Not Before: Jun  7 10:00:24 2025 GMT
            Not After : Jun  8 10:00:24 2025 GMT
        Subject: CN=fc1474caa99f9e532847c2abc0515593e279e141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cb:3a:88:4b:45:75:a6:79:37:f0:d1:36:8b:
                    67:ca:5d:d2:97:e2:35:c8:27:46:da:68:37:97:eb:
                    5c:b9:1e:b0:88:02:4a:55:f1:59:d7:61:27:22:aa:
                    78:26:45:54:ad:7e:cc:47:e8:d0:27:c2:b0:51:a2:
                    f5:30:a3:d6:01:e3:ef:87:02:63:37:fd:c4:d3:ce:
                    73:99:f9:fc:3a:6f:55:0b:11:a4:02:2a:e4:33:49:
                    55:84:58:9c:50:14:84:01:20:48:38:53:f8:d1:dc:
                    45:17:f5:f8:e1:42:0a:94:eb:bf:d1:bc:87:8e:a6:
                    87:83:92:29:26:f4:ad:ca:c4:50:88:31:02:e2:72:
                    07:c6:a7:69:97:c0:92:36:c2:45:a6:79:89:aa:d6:
                    7a:e4:62:01:2e:cd:42:fc:d2:d9:22:bd:66:d0:06:
                    67:55:b0:da:58:7d:36:24:1e:bb:78:0b:ab:43:38:
                    ab:25:f9:21:98:12:f6:c6:c7:a5:d4:0c:cf:16:c0:
                    5d:9a:e1:f4:a4:0c:8f:e8:2b:57:b7:aa:f2:f4:bc:
                    d3:dd:cc:e8:68:91:23:cc:84:ff:cb:75:a2:f2:5d:
                    f7:db:9e:75:53:6d:3f:99:e3:c8:1e:8f:db:bf:ec:
                    c8:f2:21:f0:51:b0:49:cc:ba:7d:61:0b:9b:c2:5b:
                    f9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:14:74:CA:A9:9F:9E:53:28:47:C2:AB:C0:51:55:93:E2:79:E1:41
            X509v3 Authority Key Identifier:
                keyid:75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:83:9f:c6:23:da:40:b1:fb:4b:c9:8d:d6:ed:9f:ff:dd:d9:
         9c:31:a7:66:85:e4:18:d8:9b:33:85:0d:5f:0f:80:9e:26:56:
         8d:2c:8b:13:33:0d:13:56:fa:83:c1:a1:4c:4b:c6:52:16:50:
         19:33:43:c5:c8:94:1c:72:eb:18:e9:5d:85:84:90:72:61:1b:
         c5:e8:55:2c:8e:8f:5b:d4:66:37:7b:a7:42:d7:32:fa:7f:c5:
         00:28:ab:5c:67:e3:62:22:2e:3e:4c:fb:e3:a3:1c:3d:90:c2:
         bb:ca:70:90:a3:11:26:fb:f8:ff:02:63:08:c8:b2:7e:ce:0c:
         8c:07:81:02:79:b5:ac:2a:cd:52:c1:c9:7a:2c:aa:a4:d7:c7:
         5e:8e:c6:da:df:72:45:0e:d9:9a:90:9d:24:cc:ef:e1:06:9b:
         3d:8f:3c:60:1f:a9:25:c5:08:58:13:51:27:54:71:4b:6e:a2:
         d7:dc:a4:61:25:82:b1:c1:5c:56:03:df:09:c6:3b:47:4b:78:
         52:d0:b7:58:d3:da:1d:63:b3:85:08:40:76:f0:1a:05:a4:cf:
         0d:03:6c:24:13:b4:01:c4:b8:cb:58:db:de:66:15:3a:7e:09:
         61:88:03:bf:e1:1f:fc:58:b5:b9:c4:a1:ac:e2:29:7f:12:17:
         9e:d6:48:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:31:13 2025 by rpki-client