Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
File:                     dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft (raw, json)
Hash identifier:          AnVkPYn3j+Npk3CKRSKCTI/brB8PqD9vbXGQouyAX80=
Subject key identifier:   7C:0A:B1:12:71:53:E1:FC:1D:B1:14:C0:E2:16:53:3C:D6:CE:DE:86
Authority key identifier: 76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35
Certificate issuer:       /CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635
Certificate serial:       019776E596BCB403B22FA5FB9E70A212C37F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
Manifest number:          0979
Signing time:             Mon 16 Jun 2025 04:00:47 +0000
Manifest this update:     Mon 16 Jun 2025 04:00:47 +0000
Manifest next update:     Tue 17 Jun 2025 04:00:47 +0000
Files and hashes:         1: dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl (hash: xChLBm09wcZSc7YRvqqouY63RBt78l3X8SwoduPOJ2w=)
                          2: uTA8mSJ_3Pm9uHRtbBQGox8CCms.roa (hash: JKMyKU4R0Hs07ETR6QJe5cFRF5p9HW1pjj1e0SHJl68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:e5:96:bc:b4:03:b2:2f:a5:fb:9e:70:a2:12:c3:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635
        Validity
            Not Before: Jun 16 04:00:47 2025 GMT
            Not After : Jun 17 04:00:47 2025 GMT
        Subject: CN=7c0ab1127153e1fc1db114c0e216533cd6cede86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8a:5a:02:a0:6c:f5:e5:10:de:8e:85:25:2b:
                    ac:77:99:9b:df:b0:6e:22:f4:f9:b6:14:7b:dd:e5:
                    7a:94:60:1d:33:7a:55:20:20:0d:1f:f7:97:49:1c:
                    70:bf:86:1b:0f:db:2c:6d:c0:96:d6:29:7a:e7:35:
                    7a:92:17:70:f4:34:65:da:e5:33:73:1d:c4:a3:da:
                    a6:48:f4:b5:e5:05:23:d7:0a:01:8b:f7:10:a7:db:
                    e5:c5:3a:80:3f:b7:6b:0f:cd:71:16:bb:a7:54:b4:
                    a2:b9:ba:b2:45:fe:62:49:00:ba:26:e0:7d:d3:0f:
                    d3:d9:b5:52:a5:60:7f:c5:cc:9a:dd:8e:4d:20:b5:
                    f0:5a:6a:5b:ca:64:48:c8:48:8e:b3:7e:0b:bd:4f:
                    39:d6:67:0d:11:ab:cf:26:ab:6b:24:f7:01:d0:28:
                    b6:55:f6:e8:19:76:71:d4:e1:a9:c4:ee:3b:3b:e8:
                    94:b9:6c:95:93:50:96:81:6b:3a:15:04:d4:52:d5:
                    44:b8:56:78:87:01:da:e6:be:7c:1a:d5:7d:f1:76:
                    2a:12:c7:02:80:90:ab:ff:86:d6:01:bf:b5:92:bf:
                    b5:bd:19:43:0a:a5:1e:60:b5:ed:58:48:a1:af:a1:
                    19:93:e7:ca:67:c3:01:4f:9e:43:45:74:f7:eb:b2:
                    6b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0A:B1:12:71:53:E1:FC:1D:B1:14:C0:E2:16:53:3C:D6:CE:DE:86
            X509v3 Authority Key Identifier:
                keyid:76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:08:ee:d4:a4:bb:58:30:25:7b:dd:b9:04:68:4b:5f:f8:2b:
         58:b7:ae:ef:d7:05:76:53:4b:b4:13:ce:58:d3:32:80:5f:2b:
         f0:89:a1:da:2e:2f:9c:ac:5a:43:46:b8:a9:a1:95:3c:e5:e2:
         73:af:a0:18:24:e8:c9:58:b0:53:e3:b9:e1:76:ef:bd:c7:75:
         87:51:88:2a:91:e1:76:af:9c:dd:b2:99:2f:c7:f2:e2:08:04:
         e2:90:1e:b6:dc:d7:b6:09:41:d9:fc:36:88:21:10:2c:4a:fd:
         c8:9c:d7:13:31:3f:ee:0d:38:37:46:3b:d8:38:de:6c:9a:9d:
         c9:0d:c1:61:c2:e6:18:d2:66:30:50:ba:69:9c:a3:15:78:c4:
         60:fa:65:dc:89:69:d5:92:fb:a8:9a:cf:e9:84:1b:47:e1:36:
         b7:a9:1c:53:31:69:20:8a:43:2c:7d:12:00:de:2c:de:0c:23:
         06:4f:06:d9:36:a8:25:29:b7:b1:aa:59:70:54:49:5c:3d:5f:
         75:d3:6d:85:71:07:d4:e8:87:d0:cd:26:64:26:c0:e2:1a:f7:
         65:3e:de:31:7a:54:92:3c:d3:8a:18:21:91:7c:21:c2:25:d2:
         2e:8a:31:6e:96:fb:15:9d:6c:55:b0:f1:0c:a0:07:d7:d8:98:
         64:c5:4c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:51:08 2025 by rpki-client