Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
File:                     0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json)
Hash identifier:          aVOPEl40iHmdywtcqBociy0HZ6ZRqjDhj19kvQfEIhA=
Subject key identifier:   06:D3:C8:CB:9F:E6:81:C0:E7:C6:75:2F:5D:B6:54:1B:C0:5D:21:32
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Certificate issuer:       /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial:       01976DAB9DBD334E0F3E4963D749739B5AB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
Manifest number:          09F0
Signing time:             Sat 14 Jun 2025 09:00:52 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:52 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:52 +0000
Files and hashes:         1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: kYPwOS7kLnRMaPag73ucmI3vPCm5m3WlSKE2VAK7fdY=)
                          2: my3o3dT-eplM7qhNIqgkY-xUMAU.roa (hash: FEhLISLzUVk+az2cUSg9otpj4LY6SNS67CMNyG2sJTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 09:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:9d:bd:33:4e:0f:3e:49:63:d7:49:73:9b:5a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
        Validity
            Not Before: Jun 14 09:00:52 2025 GMT
            Not After : Jun 15 09:00:52 2025 GMT
        Subject: CN=06d3c8cb9fe681c0e7c6752f5db6541bc05d2132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:19:4e:08:7a:68:97:a5:4b:2d:c8:98:bf:
                    ed:7b:85:37:bb:b5:d3:33:6c:2d:c4:90:0a:b3:18:
                    a6:60:f4:17:85:af:b0:c7:d7:30:37:15:54:94:38:
                    43:62:d5:14:64:68:1f:6c:d3:91:31:89:06:21:22:
                    34:eb:0f:c2:88:6f:b1:24:e0:2f:c9:86:86:47:ff:
                    f8:93:80:ff:17:d1:8f:f0:af:03:99:a4:85:a5:bf:
                    2b:1b:6f:b9:f7:ab:1f:09:33:69:9c:b6:91:04:fe:
                    e7:98:18:83:4b:15:26:48:97:f4:e1:dd:9b:7b:a3:
                    c6:73:8d:96:2b:01:76:c0:eb:24:98:7d:29:c8:be:
                    32:9f:78:e4:3c:38:ba:e6:26:11:ff:5f:43:a2:75:
                    48:07:81:6d:06:23:0b:8b:52:be:f8:c6:ad:73:3a:
                    8d:74:cf:42:67:f7:2f:af:8e:8d:f5:0e:31:bf:7e:
                    ae:5a:b0:c4:03:8a:a5:6d:ad:bd:6d:2f:62:ea:84:
                    53:7f:d5:bf:3a:d9:ef:41:d1:80:69:f1:06:82:5b:
                    ed:c6:ef:28:f0:5d:7c:70:9a:c2:81:07:52:f7:29:
                    75:0e:52:d8:34:b7:85:d4:fe:90:87:60:98:c4:13:
                    48:b9:c6:d2:f5:d9:ee:ab:f9:71:1d:bd:43:11:cf:
                    02:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D3:C8:CB:9F:E6:81:C0:E7:C6:75:2F:5D:B6:54:1B:C0:5D:21:32
            X509v3 Authority Key Identifier:
                keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:30:74:59:4a:ed:6a:58:e0:de:41:e2:9e:42:00:74:99:94:
         9a:db:44:43:4c:e4:f2:19:81:fe:93:35:47:4d:58:36:ce:62:
         bd:2b:39:a7:75:f2:c3:ac:49:72:99:18:21:b3:d0:25:0f:49:
         c7:e8:48:7d:67:5e:6b:a5:57:cd:8e:fc:12:4c:e4:b6:78:7a:
         39:d5:04:71:1e:0e:fe:5c:61:42:e1:65:fe:c2:95:63:ac:4e:
         73:ba:8b:a6:2b:f1:1b:ad:6a:52:0e:d8:e6:0a:c8:f3:10:31:
         b6:7c:9d:97:85:06:c3:10:86:df:f2:25:fc:95:a9:9d:c1:ca:
         2f:09:97:c0:e2:bc:9f:2f:10:3f:51:05:e8:69:7d:85:9e:88:
         a5:88:43:f5:5f:ff:d3:ad:c4:a6:04:e8:e9:b0:a5:8a:2a:47:
         03:ad:de:00:30:65:1f:a2:f6:65:b5:5c:e2:30:f2:6c:d7:2c:
         bd:1b:ec:db:00:3b:61:a0:4f:86:5f:94:fd:dc:1c:16:a7:1c:
         82:ae:38:9f:d4:da:18:a4:6f:db:d6:f6:6b:26:32:ce:d2:b8:
         de:b1:df:5a:b2:a1:4f:90:8a:41:a2:b7:a9:12:08:fb:48:46:
         9f:04:56:cf:0c:5c:40:32:5e:96:0c:fb:76:03:26:4d:0a:80:
         4b:24:ea:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:44:59 2025 by rpki-client