Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
File:                     dBjDbQQYIfhrONMiPUP-XNsgEaA.mft (raw, json)
Hash identifier:          fn8793+Sv2p7hJVBiYnS3+mtGoayewKfZNrGovT6xHI=
Subject key identifier:   D7:99:DC:78:2C:32:48:A2:5D:11:59:D4:44:E1:54:9C:07:92:C0:95
Authority key identifier: 74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
Certificate issuer:       /CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Certificate serial:       0197711B262A3592ACF93D3E821E61D0D952
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
Manifest number:          088D
Signing time:             Sun 15 Jun 2025 01:01:33 +0000
Manifest this update:     Sun 15 Jun 2025 01:01:33 +0000
Manifest next update:     Mon 16 Jun 2025 01:01:33 +0000
Files and hashes:         1: dBjDbQQYIfhrONMiPUP-XNsgEaA.crl (hash: nafx36/0LEiL6vOH0IQu5ORZkjFryi7PL7BgmYRBoRg=)
                          2: fckG1hreaQ8xP9aJJKEUiJVYbO4.roa (hash: H/fpzZgWfyhKP6Q91nDD52iN8W1nvip6ZLK/KybKJsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1b:26:2a:35:92:ac:f9:3d:3e:82:1e:61:d0:d9:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
        Validity
            Not Before: Jun 15 01:01:33 2025 GMT
            Not After : Jun 16 01:01:33 2025 GMT
        Subject: CN=d799dc782c3248a25d1159d444e1549c0792c095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7c:61:99:32:5b:41:b1:ce:56:01:1e:be:5a:
                    d9:d5:a3:8f:a3:03:76:ac:2c:45:13:17:06:df:87:
                    96:d4:7b:2b:98:0e:f6:9e:b5:f0:88:99:d2:63:06:
                    fc:7c:09:6b:a2:3d:d2:2f:05:eb:00:fb:bd:da:78:
                    2a:27:b2:36:4d:88:6f:bb:bd:77:6b:72:25:42:c6:
                    ee:f7:3f:90:32:bf:46:8c:93:27:20:97:37:3c:62:
                    6d:12:cc:dd:24:6b:df:bb:fd:51:76:6f:1c:c4:59:
                    95:aa:8b:d9:65:52:1f:75:cc:ac:5a:85:cd:90:40:
                    6e:68:64:ce:3f:b8:0a:ea:21:35:35:b8:e1:9c:c7:
                    f3:55:11:20:5c:44:9e:ee:ae:d2:a0:21:55:37:66:
                    3f:fc:29:ac:25:d9:79:5f:03:dd:39:3e:7a:b9:be:
                    48:9f:d7:45:d5:a4:6b:cd:2b:8b:fd:24:78:ee:98:
                    4c:93:55:d2:38:82:28:af:0c:65:c9:46:2e:08:4f:
                    96:25:c7:31:49:fb:91:72:a1:c6:bf:b4:cc:25:1e:
                    64:56:58:d7:76:b1:af:f8:19:c8:8e:6e:8a:ba:81:
                    9c:c9:e2:80:41:9b:ef:84:69:08:b6:7b:1b:e8:dc:
                    c8:67:77:80:ab:83:fe:e0:db:b7:4a:49:d3:dd:cb:
                    48:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:99:DC:78:2C:32:48:A2:5D:11:59:D4:44:E1:54:9C:07:92:C0:95
            X509v3 Authority Key Identifier:
                keyid:74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:58:3b:67:89:47:89:5b:36:57:84:d6:a1:3a:83:06:70:80:
         eb:77:de:aa:a0:c8:de:67:a4:b5:ff:3e:13:38:df:84:26:3f:
         ac:1f:bb:2a:cf:75:15:dc:29:a1:d2:09:3a:1a:34:b7:e1:9f:
         c8:e4:69:70:9e:a1:16:3f:e5:cd:32:f9:1e:08:19:0d:7e:b1:
         c3:b8:a2:0d:ec:ed:4e:83:67:0b:c5:8d:eb:99:d8:d7:98:c5:
         f0:9e:28:5b:bb:45:33:d6:32:01:8f:d2:2a:53:57:9a:94:13:
         89:82:63:90:d0:f2:65:7a:fd:b7:5a:43:27:9d:53:de:64:ce:
         a0:db:a4:47:16:67:34:55:1f:55:69:6c:ba:2c:be:77:69:41:
         bc:a4:d5:33:44:2f:2c:be:64:12:bc:02:1a:e3:8b:39:4a:88:
         64:a4:26:78:8e:1b:9b:69:0d:f3:e1:ad:e7:5a:c0:ca:24:a2:
         60:ea:8c:a1:30:2f:b8:fd:da:bd:ab:bf:2f:7e:61:ca:de:d7:
         1c:24:df:c9:f2:bf:8f:70:28:e2:17:f6:ea:3f:75:8c:87:37:
         34:69:63:5b:5b:0e:96:f6:6b:e3:ea:ae:0c:d8:0e:63:52:d0:
         a3:c7:16:9c:48:c0:69:d8:df:bb:b3:59:50:74:e0:72:aa:07:
         1a:d6:c8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:05:22 2025 by rpki-client