Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
File:                     bBt3vE7dikuDdEdqc0dxm2drdV4.mft (raw, json)
Hash identifier:          0iGQySoGeHXfudOG3ChBLmuihpUifgPKVBMmcebaEsI=
Subject key identifier:   DE:63:E8:C7:1F:15:74:A9:27:CD:E2:32:91:54:71:A2:36:F6:73:62
Authority key identifier: 6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E
Certificate issuer:       /CN=6c1b77bc4edd8a4b8374476a7347719b676b755e
Certificate serial:       01976E501C75E12457241807B14513627AFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
Manifest number:          0725
Signing time:             Sat 14 Jun 2025 12:00:33 +0000
Manifest this update:     Sat 14 Jun 2025 12:00:33 +0000
Manifest next update:     Sun 15 Jun 2025 12:00:33 +0000
Files and hashes:         1: O2px1aU6bIAARpFepBVuBuziiJg.roa (hash: YWn9Xv+EiDSxX317xosj76y38TuR6qoVCsWMWeoaRA8=)
                          2: bBt3vE7dikuDdEdqc0dxm2drdV4.crl (hash: jsAA8vIgXuRV5KzaJstXKkTYGu79y/vjg8xURZ/jTWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:50:1c:75:e1:24:57:24:18:07:b1:45:13:62:7a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c1b77bc4edd8a4b8374476a7347719b676b755e
        Validity
            Not Before: Jun 14 12:00:33 2025 GMT
            Not After : Jun 15 12:00:33 2025 GMT
        Subject: CN=de63e8c71f1574a927cde232915471a236f67362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6c:6f:f2:38:72:b6:14:61:fa:69:fa:a4:89:
                    fa:88:95:0f:fe:b1:a6:a9:6c:44:e9:8d:a9:ef:9c:
                    f0:82:fd:29:3f:cc:8c:73:0f:ba:b5:22:52:af:90:
                    8d:96:d6:7e:54:fa:5e:09:28:6f:97:1b:2e:3c:ec:
                    a5:8d:dc:30:9b:95:e7:43:0b:c0:cc:d0:a2:4c:06:
                    bd:40:46:ba:38:f8:04:d3:e4:eb:ae:ee:f4:d1:d6:
                    e9:68:39:dc:68:67:d7:91:47:fa:cd:56:e4:d0:5b:
                    cb:90:d1:3d:f3:53:b5:1e:6c:e9:48:99:38:7c:40:
                    43:f0:21:1c:75:9f:b5:de:05:88:28:dc:99:a3:df:
                    3d:2f:77:3c:26:61:62:dc:28:b5:19:f3:82:ac:82:
                    03:67:1a:67:20:ec:84:d0:16:a4:24:80:18:6f:c1:
                    3b:64:da:dc:20:82:d3:94:99:cc:43:db:08:1a:5a:
                    eb:48:f6:49:ac:33:e1:49:59:94:82:d4:e2:dd:0e:
                    41:af:dd:a9:be:2e:ff:cd:03:cd:09:98:6b:d8:89:
                    dd:4c:b2:56:35:50:6b:a4:c8:d7:28:f4:94:da:74:
                    e3:e6:81:bb:3b:f8:94:9e:2b:30:f0:d1:f0:a1:19:
                    ee:c4:4c:64:4f:f8:7b:da:f6:f2:fe:85:ca:19:6b:
                    56:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:63:E8:C7:1F:15:74:A9:27:CD:E2:32:91:54:71:A2:36:F6:73:62
            X509v3 Authority Key Identifier:
                keyid:6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:15:c7:a0:52:fb:42:b0:36:d3:23:54:02:8a:7b:61:3f:a5:
         b1:e9:bf:3d:eb:c9:fa:bf:15:1d:58:db:5a:5e:e4:55:f9:9f:
         3b:19:bb:29:33:1e:97:b7:87:57:c0:c3:8c:3c:8e:9a:85:d8:
         98:88:e9:bf:fb:58:0d:14:ed:b5:f4:f1:f5:52:47:35:22:1e:
         22:ab:6c:57:51:b7:ff:a2:de:6f:46:f7:51:3c:8d:ef:03:22:
         ae:20:45:4a:56:90:f8:44:95:46:38:f9:fa:db:73:25:3b:f2:
         a5:a0:dc:83:ab:d5:20:07:f7:d1:0b:ce:77:5a:f5:fb:97:c9:
         39:e7:b3:3a:3e:c2:d3:b7:63:04:24:ca:5b:52:fa:93:a1:9c:
         1c:ca:5b:a5:d4:e4:af:b5:c4:7a:1a:0d:51:a0:ab:25:40:08:
         43:45:b9:d7:69:cb:df:84:65:db:b2:2e:97:fe:02:21:05:1b:
         f8:c0:02:5f:b6:92:90:5f:d2:5b:b5:3c:60:fa:be:c3:4b:76:
         5e:87:47:a2:95:61:22:3d:9e:1c:20:7c:52:ea:d7:f7:70:0b:
         3e:ec:7c:62:c9:7b:0d:a6:7f:d0:1b:1c:04:f4:10:ac:a5:7f:
         9a:20:32:eb:41:45:23:20:02:e4:16:fc:e3:ae:ed:cf:25:e0:
         51:7a:50:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:23:34 2025 by rpki-client