Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
File:                     _otJRFUnf_UwAlzvLVHffquORRA.mft (raw, json)
Hash identifier:          FyGxABR/a2NtlhM5OLcZ/Hgzr3aw2CRWkVZxsHYkN5M=
Subject key identifier:   47:9E:D5:09:21:64:89:DE:C5:77:EC:D6:F2:D4:03:19:D3:A3:8C:A5
Authority key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
Certificate issuer:       /CN=fe8b494455277ff530025cef2d51df7eab8e4510
Certificate serial:       01976B85D4FD1F19F7F6467A7E20294C5F74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
Manifest number:          0975
Signing time:             Fri 13 Jun 2025 23:00:22 +0000
Manifest this update:     Fri 13 Jun 2025 23:00:22 +0000
Manifest next update:     Sat 14 Jun 2025 23:00:22 +0000
Files and hashes:         1: Oc5Exwy6ZGrRe3cJEpFcoAoZ8LY.roa (hash: GCIh2gF/E3yjQMebTbwaKQU3aGp4E0TQ+qUjMjQObt4=)
                          2: _otJRFUnf_UwAlzvLVHffquORRA.crl (hash: 6DZOj6atDV0kuF2yWNU9q0Spr80xkTcna2nH+0mKcIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 23:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:85:d4:fd:1f:19:f7:f6:46:7a:7e:20:29:4c:5f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe8b494455277ff530025cef2d51df7eab8e4510
        Validity
            Not Before: Jun 13 23:00:22 2025 GMT
            Not After : Jun 14 23:00:22 2025 GMT
        Subject: CN=479ed509216489dec577ecd6f2d40319d3a38ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cb:4a:d3:76:a7:75:1c:63:c2:91:42:07:ce:
                    f4:98:9a:4e:9f:b6:41:60:66:31:39:d4:b6:ef:6d:
                    d2:3d:07:c8:9e:de:66:39:ad:eb:68:7e:77:84:30:
                    b5:6b:8d:a7:fe:b8:dd:05:1a:b6:f1:1c:55:db:08:
                    d7:e7:39:6f:9a:cf:82:5f:e0:df:62:f1:0e:15:7a:
                    b3:e5:a6:90:84:39:3a:a8:0f:c4:36:78:f2:28:67:
                    58:42:63:32:43:77:51:33:ce:ab:b9:f9:b7:13:83:
                    46:2e:3d:e1:92:ff:64:8d:8b:45:0f:87:23:15:f1:
                    e8:de:fe:e8:28:72:5a:3d:2d:0b:18:ac:65:c3:68:
                    5b:f8:84:47:f2:5a:11:6f:b4:0a:66:04:98:0e:3b:
                    b7:d4:c6:32:e8:f9:3d:65:a1:45:c9:7c:b8:d2:37:
                    08:a0:5f:d1:66:88:c0:48:2f:e9:4b:d4:8f:38:7a:
                    93:0e:f6:63:fa:06:0b:0e:e9:a9:b5:65:45:93:67:
                    89:47:b5:76:7b:8f:43:7c:7a:23:71:84:f6:63:fd:
                    eb:4e:09:79:ae:75:7a:e2:1e:26:8a:33:b2:19:1b:
                    e4:83:7f:13:8b:a2:2f:65:58:a7:e2:64:03:c2:18:
                    e5:3c:13:1a:c4:8f:ff:9e:d5:73:a3:9b:f9:67:a0:
                    6c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9E:D5:09:21:64:89:DE:C5:77:EC:D6:F2:D4:03:19:D3:A3:8C:A5
            X509v3 Authority Key Identifier:
                keyid:FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:6e:02:59:dc:47:02:b2:29:ca:3c:07:29:0f:14:58:ca:e5:
         2c:69:f6:17:78:fc:d3:ac:9d:db:f7:f4:f1:73:4e:b2:8a:79:
         b4:d0:9c:75:2a:6f:b4:b1:0a:e6:5b:48:c0:fe:73:53:2d:b8:
         95:b3:49:6e:75:d2:39:c1:86:24:3b:9e:b4:9f:24:7e:b6:69:
         6a:4d:c1:b5:7d:c8:f6:b0:74:40:54:36:7c:66:7d:3f:92:49:
         5c:ec:2c:ca:2c:71:16:32:42:36:75:f0:e7:6b:47:6e:06:43:
         14:06:14:1e:78:5a:b4:fc:00:89:c3:25:93:fd:b5:3f:ee:96:
         53:2b:df:b2:3a:50:0e:f7:e5:d9:d2:fa:63:0a:b4:32:f6:f9:
         65:34:e9:dd:b4:6d:81:ce:7b:10:6a:2e:a7:ef:0b:bd:55:a2:
         21:01:cc:47:9a:ca:e4:e6:ef:a4:99:34:8e:e7:22:07:fe:9d:
         16:20:08:14:d8:be:25:f3:6e:69:b0:06:9b:77:a6:1e:04:67:
         2a:3a:64:59:23:44:dd:8a:30:28:24:36:00:60:31:71:88:91:
         d7:6a:88:c7:70:c4:64:15:4f:7c:19:47:a8:04:3c:99:d9:08:
         09:7e:ec:5d:c5:92:de:69:9d:95:14:71:3d:98:2a:28:0c:20:
         6f:28:e9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:26:21 2025 by rpki-client