Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
File:                     fU--VZRwf9z5QCXqFVcaaMJNqas.mft (raw, json)
Hash identifier:          lOIg1OAOSH/G7+JWq3LTYIk5dtw9iJkQulEZRjkuUtA=
Subject key identifier:   07:B3:73:30:F4:00:0E:D0:C2:BF:B3:7F:5C:F4:B6:B5:BF:C3:21:7C
Authority key identifier: 7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
Certificate issuer:       /CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Certificate serial:       01976D3E271E2B313600C0ACB52F5A5421FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
Manifest number:          075C
Signing time:             Sat 14 Jun 2025 07:01:19 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:19 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:19 +0000
Files and hashes:         1: fU--VZRwf9z5QCXqFVcaaMJNqas.crl (hash: wFe5WLKrjxQhkh6GFyHXbyGegroC8QYyA11yCZMXSkU=)
                          2: uJcxOoPayTtpIImr51o6Grvnwh4.roa (hash: HgfbCb24sxq0O5vUUAY2XVFtTmqaW+l9dpOtt2vq4Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:27:1e:2b:31:36:00:c0:ac:b5:2f:5a:54:21:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
        Validity
            Not Before: Jun 14 07:01:19 2025 GMT
            Not After : Jun 15 07:01:19 2025 GMT
        Subject: CN=07b37330f4000ed0c2bfb37f5cf4b6b5bfc3217c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c9:e1:14:04:cf:41:21:59:07:e3:d7:cc:f6:
                    2b:16:41:52:c1:03:46:d4:35:98:b3:65:f3:aa:83:
                    6e:d9:c0:35:ec:64:6f:9b:8e:ea:b4:97:e9:75:32:
                    95:9e:82:ef:5a:82:b9:0f:b4:aa:7f:47:97:92:a8:
                    e9:d8:6e:70:f5:ea:97:13:81:e2:03:43:37:03:ee:
                    77:5c:b9:e6:33:e1:4a:63:dd:32:cc:63:48:bd:d8:
                    33:df:5a:09:2a:60:07:e3:f7:48:12:9a:76:da:20:
                    ce:9e:ef:e0:4e:bb:f4:61:98:14:a9:55:11:e4:26:
                    26:27:86:8b:31:c9:b6:ef:98:9b:08:5f:c1:25:76:
                    6c:ba:83:65:38:e3:d7:c1:25:14:24:0d:f0:6c:eb:
                    dc:58:fc:69:89:07:28:17:4b:31:eb:43:04:b7:f4:
                    69:b2:f9:20:e6:cc:7b:17:35:c4:a5:5f:1b:29:4a:
                    56:85:9d:1a:cb:41:ab:82:67:d4:f6:9a:86:e4:38:
                    f7:60:33:e0:1c:ed:08:ff:18:9b:c6:c4:9c:3c:45:
                    4e:8e:5a:ed:ca:c4:83:01:c9:e0:89:89:46:bd:2f:
                    5f:25:c1:28:22:e5:f7:9a:9f:5e:98:a2:3e:19:53:
                    92:b7:b7:db:0c:4c:24:8d:1c:ca:c8:f2:7f:17:95:
                    b4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B3:73:30:F4:00:0E:D0:C2:BF:B3:7F:5C:F4:B6:B5:BF:C3:21:7C
            X509v3 Authority Key Identifier:
                keyid:7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:85:93:95:f0:6b:89:1e:b5:f5:9a:cc:70:72:a2:40:24:e6:
         d7:e5:8b:8f:47:cf:78:7e:fb:2a:4c:e8:1a:84:a5:a7:0d:c5:
         0d:08:61:39:91:46:fb:98:a2:dc:01:dc:5f:2a:c9:9d:ac:6f:
         79:59:5e:d9:1d:1e:96:e8:c1:19:49:b5:eb:aa:21:c6:9b:41:
         cd:9a:fc:b2:3b:c3:ac:bc:08:8f:9d:28:15:87:8f:6d:49:3c:
         32:9b:89:ef:91:0a:6f:f8:78:ed:b7:12:df:1e:0b:59:77:a5:
         a7:ca:23:ee:68:dd:1e:2d:ca:35:42:fe:08:31:2d:9c:9c:b5:
         28:c9:55:84:bd:b3:c1:76:cf:11:2c:ba:e2:29:96:7f:85:59:
         72:d6:eb:bd:52:f7:d3:d8:dd:38:0f:a9:cd:76:70:2a:3f:82:
         9a:a3:6b:62:db:0e:38:b7:2e:c0:47:16:cd:9d:53:f0:01:7f:
         96:70:ff:0c:3e:c2:85:2a:d5:03:2d:63:46:a2:e0:7d:c4:67:
         89:6a:ab:06:f6:99:22:ef:94:58:46:33:03:d7:0a:1e:ab:aa:
         4d:b8:ae:5c:53:9d:48:c2:87:a2:93:ff:f4:0e:bf:52:b7:06:
         f2:f2:ee:d5:12:19:37:e3:bf:30:a3:45:24:90:43:87:a2:c3:
         d7:49:b6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:45:54 2025 by rpki-client