Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
File:                     fusK7GOUn0ElxzqmF36gtyHVJ7s.mft (raw, json)
Hash identifier:          FahAMjL2wChHJfJICJbBDYoQxNDP+fhnDeaI/vS/3IE=
Subject key identifier:   9C:D1:2C:07:B2:65:2D:7D:74:3F:A7:21:80:92:DE:0B:21:62:17:62
Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
Certificate issuer:       /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Certificate serial:       0197759BD53F8414280CC87028EA4B1F5191
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
Manifest number:          0CEF
Signing time:             Sun 15 Jun 2025 22:00:36 +0000
Manifest this update:     Sun 15 Jun 2025 22:00:36 +0000
Manifest next update:     Mon 16 Jun 2025 22:00:36 +0000
Files and hashes:         1: WBWNPZAIG5TxeFXlAVS083RLBkk.roa (hash: qjzS4SOpKRY0Euyn5aPWAnwBT2wsSH59WxJEL/JtBjg=)
                          2: fusK7GOUn0ElxzqmF36gtyHVJ7s.crl (hash: eBeF1eAzpFXUwvrToY3bpHrFILsycwDb05AxOO2YOpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:75:9b:d5:3f:84:14:28:0c:c8:70:28:ea:4b:1f:51:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
        Validity
            Not Before: Jun 15 22:00:36 2025 GMT
            Not After : Jun 16 22:00:36 2025 GMT
        Subject: CN=9cd12c07b2652d7d743fa7218092de0b21621762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:3f:56:e9:65:02:8a:55:6c:38:91:6a:61:
                    8b:57:6f:a4:76:8f:78:ec:ad:0a:67:9f:b8:55:a2:
                    77:04:c9:a1:e2:ba:4f:77:6c:32:f4:16:ab:4f:35:
                    c7:63:f9:33:38:cd:f8:f8:8c:2d:7b:e2:36:c0:04:
                    63:5f:01:bb:b3:5b:a8:ef:c7:40:83:e1:0f:f7:fc:
                    58:0d:6b:62:0b:39:c6:63:9b:fc:20:1d:6a:27:2d:
                    cc:30:9b:10:2e:6e:09:2d:86:9c:73:58:56:02:63:
                    86:06:24:91:79:9a:8b:51:50:68:7f:c4:87:9a:0b:
                    1f:95:88:b6:fb:4b:30:3b:f0:76:2c:52:4a:27:14:
                    74:16:e7:e8:fb:b3:fe:2a:55:29:88:b0:6b:1e:00:
                    c1:30:ed:70:33:78:89:7b:88:11:0f:a4:92:4e:04:
                    e2:14:9c:f6:3e:ef:10:f1:d2:b0:27:98:ce:dd:2e:
                    a5:c3:77:dc:74:fb:b8:60:4d:3c:bc:f0:ab:34:fd:
                    62:dc:6c:07:72:dd:a2:66:fc:53:2a:6d:75:b4:ae:
                    1a:6e:65:3f:58:4d:cd:de:10:73:d7:74:c3:e4:02:
                    5a:e7:aa:51:d1:e8:5e:3e:b9:6e:72:ef:a4:89:5c:
                    16:73:9b:04:0f:26:ea:2d:96:91:fc:c2:bf:ed:40:
                    3d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D1:2C:07:B2:65:2D:7D:74:3F:A7:21:80:92:DE:0B:21:62:17:62
            X509v3 Authority Key Identifier:
                keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:49:08:a8:a6:bf:c7:22:ad:fc:e4:4a:b7:71:ef:40:90:f9:
         6e:68:cc:90:a2:02:ec:4f:75:4f:fe:e4:ab:b4:27:2e:5b:b4:
         c1:bf:89:5f:24:43:b2:b1:9f:08:33:a0:1f:d8:8f:07:ba:ef:
         43:e4:a0:d6:a5:08:e3:21:4c:01:a4:e6:b4:a9:a5:e0:06:f9:
         e5:9b:87:22:cd:f6:3a:df:3d:93:3f:11:36:d6:b5:11:69:6c:
         55:07:10:7b:ae:e1:e5:51:36:0c:e6:25:d7:21:53:8d:4d:54:
         b6:1c:ce:7c:ff:63:58:5c:82:d2:61:aa:c1:cc:06:19:d0:bc:
         97:3a:37:ba:85:31:bd:7a:e3:d3:92:d1:27:48:78:82:ea:b4:
         af:68:d9:7c:ce:d1:7a:a3:61:be:7f:63:55:e0:60:8b:a2:0a:
         91:b6:76:0b:48:b2:f9:bb:52:29:10:e5:5a:3d:9a:8f:c0:4d:
         47:9b:82:02:5f:6f:8f:9d:ec:64:5e:28:e0:ed:fc:64:37:bc:
         65:53:e3:7e:00:42:91:12:c7:79:e3:21:66:14:be:c7:74:40:
         bd:cc:4f:c6:00:f8:11:5b:5e:94:a6:db:9d:84:97:f5:74:64:
         05:7d:ea:31:d6:75:63:ca:49:b3:c4:f6:3b:a4:c8:01:25:5f:
         bd:e1:07:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:14:34 2025 by rpki-client