Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
File:                     KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json)
Hash identifier:          +w6entqnlom8+7P55ufx1l0pJyY9g5znSbi1XZqIf8o=
Subject key identifier:   A3:C3:49:CF:B8:B9:77:FE:A5:D1:46:9B:3F:AC:17:52:9C:FF:CA:63
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Certificate issuer:       /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial:       01975E39077D1E4FFF6B4DF161719BFEEB40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
Manifest number:          075D
Signing time:             Wed 11 Jun 2025 09:01:25 +0000
Manifest this update:     Wed 11 Jun 2025 09:01:25 +0000
Manifest next update:     Thu 12 Jun 2025 09:01:25 +0000
Files and hashes:         1: 5v35qWKD8NjR5CYJwsa3ZCJmcaE.roa (hash: 8EnKiqZmxqaxCmZk9qwGpftXBFsMv4XGXaWZ2Oqridk=)
                          2: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: UrVkd4oXmOpJCiye/JL/NTeVN+cB/1xUtluoe1wINMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5e:39:07:7d:1e:4f:ff:6b:4d:f1:61:71:9b:fe:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
        Validity
            Not Before: Jun 11 09:01:25 2025 GMT
            Not After : Jun 12 09:01:25 2025 GMT
        Subject: CN=a3c349cfb8b977fea5d1469b3fac17529cffca63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8b:e0:7e:3b:b9:7b:56:25:cb:90:fb:45:7a:
                    d7:66:f2:2e:8a:e9:49:56:10:fa:01:69:d1:4a:dc:
                    0b:0e:17:e5:32:ff:8f:a0:90:1d:4d:15:06:01:50:
                    0f:e7:5f:4a:41:62:27:6f:a6:bd:ac:d3:92:63:f3:
                    8a:b7:67:80:4c:dc:3e:a8:5d:61:9f:0e:9a:7c:ad:
                    75:e7:9a:e8:60:aa:fa:9e:76:92:e5:62:44:e4:05:
                    5d:79:54:6f:31:5f:57:e8:f6:18:6f:a0:b9:8f:bc:
                    99:ac:af:3e:7b:23:cc:23:b9:db:af:77:6f:d7:a3:
                    49:d6:15:30:c5:ae:bd:11:e4:d1:89:7f:bc:bd:0e:
                    b0:19:1d:9b:90:6a:11:e3:6f:79:f7:b0:9f:95:07:
                    f8:46:e0:9b:d7:df:ec:d8:6d:b9:22:f9:29:8b:9c:
                    27:4d:53:48:7b:67:8a:e6:04:8c:19:d2:98:39:ac:
                    f1:de:ef:bd:d9:aa:b1:56:06:52:9b:65:cc:34:ed:
                    8d:11:d4:54:47:73:5b:1c:eb:0f:3b:dd:dd:6a:8a:
                    43:60:cb:f0:7a:4c:a9:4b:7c:a0:a8:8d:6b:fd:dd:
                    be:95:08:54:a7:91:e6:6f:7d:11:65:84:75:a0:01:
                    ae:87:f3:be:96:02:c2:be:38:6e:24:c6:d6:e8:25:
                    21:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C3:49:CF:B8:B9:77:FE:A5:D1:46:9B:3F:AC:17:52:9C:FF:CA:63
            X509v3 Authority Key Identifier:
                keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:4a:ad:ee:bc:26:60:ae:3d:89:18:c0:e4:23:f4:4d:76:15:
         9c:2e:e0:54:dd:9b:75:9d:5f:be:a7:ef:72:47:96:c2:36:6b:
         17:48:5f:32:0f:9f:80:71:36:25:05:97:b1:8e:a1:12:0a:ea:
         bf:ee:7e:41:80:37:17:3c:2a:ac:de:4b:33:5c:c3:92:43:f4:
         a3:56:34:45:59:ce:26:c8:7f:29:d1:36:b9:34:50:d2:dd:25:
         e9:c4:77:3e:0f:9c:17:4c:7a:a3:16:c2:c9:f5:42:93:fc:03:
         a9:b1:1f:54:06:da:0f:17:4e:ec:12:b7:c7:30:b7:7e:13:f0:
         e4:a7:c0:df:30:dd:15:66:86:ed:43:56:79:f5:15:c6:e2:72:
         9a:d2:db:7a:b6:50:72:0b:bf:9a:87:4a:72:32:3c:ff:f0:fe:
         f2:32:d0:f0:16:88:d0:05:f5:f9:a4:4a:cb:98:ea:ec:6d:c7:
         44:03:e7:59:ed:18:50:22:1f:0a:fe:fa:34:52:5f:e9:3d:b9:
         90:27:f0:69:aa:19:4c:4d:6c:cb:e3:8f:97:4e:b7:07:6e:eb:
         18:f5:8b:73:ea:12:3e:9e:15:8e:ed:af:57:05:06:4c:74:83:
         3e:ef:b8:88:60:fd:84:1a:36:5c:17:81:89:69:a7:8f:0e:33:
         e6:09:8e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:58:22 2025 by rpki-client