Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
File:                     dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft (raw, json)
Hash identifier:          pK5ADlZjnfSJ5CYUhkcDm/t3Pvwms5W66JoTQASMM3I=
Subject key identifier:   9C:99:40:7F:B8:CA:DC:A8:20:AE:CF:4D:23:FE:B6:74:07:C5:FA:0A
Authority key identifier: 75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC
Certificate issuer:       /CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
Certificate serial:       01976C2AD89967423A8E16862A1C16330674
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
Manifest number:          0223
Signing time:             Sat 14 Jun 2025 02:00:36 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:36 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:36 +0000
Files and hashes:         1: 6zamDTUBwAsnOFkspEkx8jbI6wY.roa (hash: dvRTh/kPMauvkj5ufzVensqKmDYCodFR0kOnwH7zmxk=)
                          2: dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl (hash: TIl6pQ7dIqk5k2p3QghtMrwUoOcgWQoo1yAa+QJVBAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:d8:99:67:42:3a:8e:16:86:2a:1c:16:33:06:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
        Validity
            Not Before: Jun 14 02:00:36 2025 GMT
            Not After : Jun 15 02:00:36 2025 GMT
        Subject: CN=9c99407fb8cadca820aecf4d23feb67407c5fa0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:d3:53:47:61:13:f9:87:b2:b9:8f:35:c2:
                    ab:70:d6:65:05:e4:27:e3:1c:f3:57:35:eb:d2:c0:
                    34:c8:12:eb:ed:5c:e3:91:cf:9d:f1:e2:a8:2e:db:
                    12:4e:fc:d7:89:8f:33:08:63:75:fa:39:80:7f:e8:
                    79:aa:a7:1d:31:ca:49:d6:b0:cb:78:6b:ee:c6:ec:
                    68:36:a2:2f:27:28:6f:ae:ab:a0:78:22:0b:0b:03:
                    25:b6:9a:a1:72:fc:1e:4d:84:21:8e:16:13:43:b3:
                    7a:b1:a7:c4:be:cd:a3:fe:f1:85:25:3f:94:e7:8a:
                    eb:6e:55:51:e3:66:54:8d:7c:18:33:56:b3:ea:38:
                    7d:c7:61:dd:14:37:47:c8:c8:59:7d:b5:41:e5:26:
                    0a:c6:8b:fb:f5:a0:55:ac:ef:1a:d8:e7:b0:8c:aa:
                    f0:e1:eb:11:11:d4:4c:9d:73:cd:d2:cf:60:4a:56:
                    a3:3c:8c:21:29:51:78:58:14:69:e3:20:0d:a6:84:
                    ba:87:08:0c:d9:31:91:19:83:dd:a2:7f:03:7a:47:
                    03:72:58:85:96:88:9f:de:ca:9d:d4:d2:3b:4e:c3:
                    b8:10:b2:dc:2d:ef:fc:96:7e:dd:54:12:90:f5:76:
                    6b:49:9a:48:9e:10:48:0d:5f:c3:f6:5d:5e:9d:7e:
                    10:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:99:40:7F:B8:CA:DC:A8:20:AE:CF:4D:23:FE:B6:74:07:C5:FA:0A
            X509v3 Authority Key Identifier:
                keyid:75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:41:2e:73:18:bc:fa:40:92:77:a4:b2:d0:66:e9:aa:e2:6d:
         be:58:9c:25:78:3e:6c:3c:96:97:cb:6d:7f:d7:63:9d:54:c8:
         dc:33:43:f3:7c:10:f2:99:88:f2:5f:8b:d2:04:fc:3a:1d:74:
         04:f8:9b:af:5f:b8:b5:6c:94:a6:70:42:e6:1b:de:b2:22:e9:
         b5:6d:ea:6b:e7:a7:f9:d4:15:23:10:38:55:8b:7e:3f:7e:c0:
         36:46:01:cc:77:89:78:21:8b:e7:e0:3c:89:c7:2c:04:e5:28:
         70:cc:98:15:ee:2e:02:7c:2c:b8:4d:c2:db:c3:0a:2e:ec:68:
         3b:76:1c:a2:69:49:73:c5:40:65:64:82:ee:7c:88:fa:fb:5b:
         8c:37:71:d0:02:2f:73:8f:81:a3:a3:df:71:2a:a3:fa:7e:3d:
         4f:b6:d8:49:a5:9f:a1:6d:60:84:5d:ae:93:83:ed:c7:c6:89:
         61:02:37:92:2f:66:c1:cd:01:8d:50:98:2b:26:5d:e8:8b:24:
         58:dc:8b:23:b6:63:c3:cd:6a:9b:fa:b5:1b:b2:ae:08:2b:b7:
         27:a7:b9:eb:2c:3b:1d:24:78:33:6c:57:7b:0d:20:e7:4f:5c:
         8c:d4:70:85:24:e7:94:14:d2:a1:e9:ec:73:53:ad:bf:9c:f6:
         67:f9:00:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:52:49 2025 by rpki-client