Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
File:                     36vRQuiUFoiDzkUicxf5-lAiGU8.mft (raw, json)
Hash identifier:          760JQLmBBNB5T5l71LeVv3dia+GSZbJlCnXHlsMcvbY=
Subject key identifier:   8D:46:5A:22:C9:4D:36:E0:E9:FC:F2:43:EB:3D:D0:5E:B8:AB:7A:EB
Authority key identifier: DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
Certificate issuer:       /CN=dfabd142e894168883ce45227317f9fa5022194f
Certificate serial:       019755356F30FE0300FDCA3CD62C92524E3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
Manifest number:          0B7E
Signing time:             Mon 09 Jun 2025 15:00:54 +0000
Manifest this update:     Mon 09 Jun 2025 15:00:54 +0000
Manifest next update:     Tue 10 Jun 2025 15:00:54 +0000
Files and hashes:         1: 36vRQuiUFoiDzkUicxf5-lAiGU8.crl (hash: SHiXxyL8vW4qVgJkMMrPOYvelb52ymwIF9a3NLqM3Qo=)
                          2: q9fcvPSCGF87XIMkqAi6UV4OZNg.roa (hash: tkmW6OPW8Rw8o76e0nZ8YOnHGwglb96QyBZechqQT9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 11:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:55:35:6f:30:fe:03:00:fd:ca:3c:d6:2c:92:52:4e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfabd142e894168883ce45227317f9fa5022194f
        Validity
            Not Before: Jun  9 15:00:54 2025 GMT
            Not After : Jun 10 15:00:54 2025 GMT
        Subject: CN=8d465a22c94d36e0e9fcf243eb3dd05eb8ab7aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:89:7f:c7:b3:95:3e:f3:6e:ea:ad:88:c5:92:
                    a5:1d:3a:5e:71:fe:46:e2:8a:28:08:f8:38:d5:d9:
                    04:af:0b:0c:3a:e4:60:0f:9e:e6:9c:d0:a6:9c:87:
                    97:0b:01:24:80:c2:c0:9a:60:54:0d:9a:90:04:6b:
                    3e:e7:67:0b:6a:b6:85:8d:a4:3d:d2:97:fc:3b:c3:
                    51:5e:2f:cf:de:fa:4a:62:57:2c:f2:f4:44:db:1e:
                    24:35:fc:35:df:36:31:f5:f2:b8:54:a1:ce:f3:1a:
                    2b:40:c3:79:dd:b1:9d:9b:9f:b0:e7:81:84:a0:23:
                    23:01:bb:7b:75:8e:4a:37:f3:26:10:64:1e:9a:15:
                    8c:64:97:91:8c:c5:c5:f3:5d:63:83:e5:f5:00:94:
                    34:53:46:b6:2d:58:e4:17:30:3b:4d:6d:7a:86:84:
                    55:e0:28:21:e0:b7:05:c0:3a:7b:e0:b4:8b:1f:74:
                    7d:67:cb:2a:79:78:27:5d:5a:dc:81:de:42:c2:50:
                    8b:25:90:05:59:3d:e9:e2:b1:f7:9a:40:33:9d:28:
                    34:20:1f:fe:c3:68:cc:dd:39:92:33:0f:9a:6e:f3:
                    e4:b1:7c:38:f8:d5:2f:0d:32:e6:c4:27:7d:53:66:
                    20:5f:6d:2b:52:78:67:61:30:f5:90:be:dc:37:7b:
                    f6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:46:5A:22:C9:4D:36:E0:E9:FC:F2:43:EB:3D:D0:5E:B8:AB:7A:EB
            X509v3 Authority Key Identifier:
                keyid:DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:3b:c0:ba:9f:75:6e:89:a0:9f:39:f8:97:c0:e0:ac:01:bc:
         e9:c5:07:b7:08:8f:d6:18:8f:10:b3:a2:88:fc:4e:96:16:df:
         b2:10:0e:87:f4:ff:7f:9a:56:c8:86:e6:c0:c8:3e:43:27:c1:
         c0:f5:44:17:fd:39:7e:04:a6:0f:c9:38:53:23:b5:c9:e2:21:
         15:69:7a:05:04:ca:24:4a:3a:c0:87:26:cb:aa:41:a3:e7:2c:
         ed:93:e7:91:86:66:83:3d:b9:80:79:af:e3:f1:cb:b0:06:2d:
         a6:e1:3d:8a:d3:0d:29:14:59:16:24:2e:95:52:58:32:53:1c:
         95:84:de:e3:4f:98:15:f1:5b:b6:db:83:45:34:a2:0e:29:23:
         bb:48:64:54:8e:a5:ec:85:77:b7:3a:99:fd:07:7d:ba:77:99:
         e2:20:d5:7f:07:78:16:07:a3:d8:9a:a1:d0:27:39:ab:2d:0a:
         07:77:d0:5f:73:a3:58:4a:7d:23:b4:47:9f:11:c4:01:2f:4e:
         81:07:25:fd:cb:f6:39:c8:97:44:e0:b1:5d:71:62:53:fb:71:
         82:03:b9:5f:ef:37:24:c3:d1:e8:85:8b:24:46:f4:95:c0:52:
         59:a0:dc:07:93:b2:b7:93:dc:75:02:64:7d:a9:8d:33:fc:9f:
         7f:50:5e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:38:32 2025 by rpki-client