Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
File:                     0-2n3wX226CeOefUvex7rg7_urA.mft (raw, json)
Hash identifier:          Zlb9ILcimeewXvCShP/s7hYhU+zrRxGUZH+7uzx8Lvk=
Subject key identifier:   CC:A2:BF:16:0B:4C:17:1E:6B:F2:13:BB:8E:15:96:9E:AE:DE:30:C6
Authority key identifier: D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
Certificate issuer:       /CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Certificate serial:       01976C2B5F3C80DA56F7AB5E5FBD0AA45F0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
Manifest number:          0297
Signing time:             Sat 14 Jun 2025 02:01:11 +0000
Manifest this update:     Sat 14 Jun 2025 02:01:11 +0000
Manifest next update:     Sun 15 Jun 2025 02:01:11 +0000
Files and hashes:         1: 0-2n3wX226CeOefUvex7rg7_urA.crl (hash: YnambNaDcN1DuZNsKPBdPjPgGjA5plT7gMKlJufrcUM=)
                          2: mFUkKUV2j8Fct1DGbVQJTzcA0ig.roa (hash: bNr/zF64vk+SVTrKPbIdCfqu6Sowa5lS9V4LG/Ns2g0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:5f:3c:80:da:56:f7:ab:5e:5f:bd:0a:a4:5f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
        Validity
            Not Before: Jun 14 02:01:11 2025 GMT
            Not After : Jun 15 02:01:11 2025 GMT
        Subject: CN=cca2bf160b4c171e6bf213bb8e15969eaede30c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:70:10:46:a8:66:e6:2a:e9:08:82:8a:b7:ca:
                    7d:d1:67:e8:65:86:ae:e9:bb:63:d5:e1:b2:a0:be:
                    51:c5:a3:9f:f8:15:35:e7:53:eb:2b:a0:f6:d6:f5:
                    27:24:a8:3c:a2:6d:48:78:03:22:66:e5:6f:3c:12:
                    17:36:68:fa:00:c0:d7:7d:c8:ec:86:ca:ed:ec:eb:
                    f4:55:23:57:11:5d:b5:71:3c:c1:88:11:21:f2:3a:
                    03:dc:c4:c6:a7:53:60:e4:c0:82:11:66:9f:43:6c:
                    e3:16:bd:fc:36:4a:82:70:96:5b:bc:06:4d:62:08:
                    b6:33:1e:26:5e:fb:2f:d1:e1:c5:fd:01:84:0e:42:
                    a0:a0:f1:18:21:f6:e5:0d:50:c7:e5:5b:75:86:e0:
                    84:3e:45:59:4e:40:34:2e:03:25:71:13:36:af:b3:
                    07:56:9a:1f:e9:61:91:c5:a3:9c:a3:61:c3:03:48:
                    d4:9f:26:c8:3d:44:0a:ba:83:ec:2f:ed:8a:d7:c2:
                    bd:a7:0a:55:95:c6:96:92:80:66:15:53:c6:13:54:
                    23:06:8c:a2:31:1b:dc:bd:ae:2e:7f:8e:0e:dc:dd:
                    2f:05:e9:8a:b7:bf:dd:09:3f:10:50:31:28:d5:65:
                    6d:23:d0:0a:7f:fd:b2:ff:ae:7c:7f:7b:45:a7:7a:
                    87:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A2:BF:16:0B:4C:17:1E:6B:F2:13:BB:8E:15:96:9E:AE:DE:30:C6
            X509v3 Authority Key Identifier:
                keyid:D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:1d:f0:7c:e9:e1:aa:83:70:33:bf:8a:b4:63:98:c2:cc:b1:
         e4:a4:48:8f:01:47:97:99:4d:b1:0b:14:8f:34:de:6b:bb:35:
         89:b8:64:aa:14:6b:83:a1:b4:96:a0:95:9f:84:0b:1a:4b:6e:
         12:60:ab:40:a8:40:30:32:05:fc:20:9a:70:d5:9f:72:11:58:
         37:dc:ac:7d:d8:6a:c3:16:68:f5:ed:4d:5d:03:2f:97:cd:75:
         92:16:4a:54:1e:d1:54:c4:fc:b2:4e:3a:51:dd:1c:9f:39:6d:
         74:29:b2:ab:e3:6a:64:fc:30:27:70:4a:e9:d4:40:fe:b3:23:
         e9:b8:3d:41:05:cb:05:70:25:67:82:88:ec:fe:ee:0c:66:5a:
         db:28:28:ce:25:e1:d4:c4:8b:6f:14:1d:01:9b:dc:dd:0b:17:
         0a:bd:f0:d6:12:d2:d0:63:e0:c2:22:f7:59:33:75:10:f2:c9:
         50:e1:75:f3:74:5d:7b:6f:61:08:08:60:0d:7c:e8:85:34:4a:
         0d:00:f7:72:3e:e5:18:ce:f3:1c:46:62:3e:72:33:00:4f:f1:
         27:b9:a7:79:6f:79:de:8d:70:a7:cf:50:15:cf:1b:de:01:88:
         a0:3b:b7:2e:4b:ab:0c:36:ad:5b:a3:8d:7e:d7:3c:56:a1:8e:
         b1:7f:84:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:51:53 2025 by rpki-client