Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
File:                     0fbkNwERz7-WhASFQie4CShRRQ0.mft (raw, json)
Hash identifier:          J3yzx3f8dfgdqGOtWpzV8xQaUTVagMeeRLS1WonVMtI=
Subject key identifier:   4D:6E:A5:6B:B3:B8:B1:9B:9F:EF:E6:00:3B:2D:AC:1B:60:CF:B6:0F
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Certificate issuer:       /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial:       019880C25DA4BC528A32BFCC6704931C88C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
Manifest number:          0E7F
Signing time:             Wed 06 Aug 2025 19:01:18 +0000
Manifest this update:     Wed 06 Aug 2025 19:01:18 +0000
Manifest next update:     Thu 07 Aug 2025 19:01:18 +0000
Files and hashes:         1: 0fbkNwERz7-WhASFQie4CShRRQ0.crl (hash: mwAVEomgRWgSZW7E95LUUUQNa+1M+84xTWETvAJwv1g=)
                          2: w9laCbfNTG9x8SgYBLM8cjfOdmA.roa (hash: WglJOtLwDI5HpNhEnz7a8Exzapc/0A4kuz517Fgs06A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c2:5d:a4:bc:52:8a:32:bf:cc:67:04:93:1c:88:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
        Validity
            Not Before: Aug  6 19:01:18 2025 GMT
            Not After : Aug  7 19:01:18 2025 GMT
        Subject: CN=4d6ea56bb3b8b19b9fefe6003b2dac1b60cfb60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:94:c5:cb:4f:cd:1c:1c:f0:ef:b0:a8:9b:12:
                    8c:3f:12:a6:e8:fa:fd:af:f0:1f:78:14:b1:3b:58:
                    8c:4b:26:2e:40:3a:0d:91:75:9c:5b:cf:e6:72:13:
                    c8:63:bb:ae:47:0b:7c:29:1e:f8:81:11:85:57:d8:
                    24:14:29:2e:c2:27:22:af:79:04:79:5d:1a:ac:57:
                    f3:e6:1d:fe:bb:c7:2f:aa:5c:b7:e9:fa:12:7c:c1:
                    c3:86:a4:21:95:4b:98:82:14:30:e9:2f:d6:98:f1:
                    d2:62:e1:94:5a:23:2b:85:00:5e:45:2d:90:b2:c1:
                    78:f6:f2:17:11:77:92:54:6b:25:ef:a8:13:19:9b:
                    00:f9:d3:34:eb:53:e4:bc:e6:62:51:9c:c1:e0:23:
                    27:4c:13:e9:eb:85:6e:0b:34:1a:e1:47:c1:0a:23:
                    9b:d8:d9:50:a8:80:34:56:ce:f2:31:15:1b:cd:cc:
                    19:92:77:e5:47:cc:dc:9f:24:d6:0c:76:33:a3:bb:
                    bf:6d:2f:aa:b1:dd:2e:03:d7:16:db:e1:31:36:1d:
                    ea:c9:d8:30:6b:3c:58:05:68:1f:55:fa:a7:a8:0b:
                    d9:49:7b:2c:e1:5f:a8:22:92:26:1f:69:c3:18:03:
                    ac:4b:d7:0d:06:b6:a9:49:59:a6:77:51:62:dc:2f:
                    49:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6E:A5:6B:B3:B8:B1:9B:9F:EF:E6:00:3B:2D:AC:1B:60:CF:B6:0F
            X509v3 Authority Key Identifier:
                keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:60:09:bb:6b:a9:79:f7:34:dc:a1:9c:1b:b6:3b:1d:0f:9b:
         64:fb:08:d4:95:e2:c7:1b:34:f0:5e:2b:93:9b:7a:a5:82:af:
         5c:0f:28:fd:8b:63:44:c0:3e:92:f6:58:a8:7a:1c:f8:7e:bd:
         33:43:7a:f9:b5:7e:d1:45:66:25:e1:64:16:6f:29:b3:2b:67:
         49:71:3f:8a:96:63:40:4b:c1:f0:a7:b4:0b:84:e2:b3:2a:6d:
         00:b1:57:89:aa:e1:02:99:8a:99:ad:ce:af:cd:6c:25:6f:65:
         bd:5a:f0:59:3f:a5:16:7a:95:f1:89:fb:3c:12:d6:4e:95:24:
         2c:a1:f3:08:27:e5:ed:f2:b4:54:69:9f:ca:46:51:ba:ea:e0:
         96:aa:09:b9:1f:3b:44:e6:c5:28:49:4b:dd:b7:25:89:cf:a7:
         96:91:00:24:6a:5e:ac:8f:eb:cd:76:33:73:b2:c0:88:92:62:
         18:58:f0:0e:67:cd:3d:9e:c4:66:82:85:bc:ca:c0:91:b5:c8:
         ea:a2:7c:0d:4b:e2:dd:f0:99:88:ec:3c:de:87:c1:58:f2:f3:
         64:91:17:83:7d:60:e0:4d:f2:0e:23:05:14:83:f7:5f:a3:87:
         1b:7c:58:06:f5:59:f6:4e:cf:b7:49:e0:c8:2c:5b:7a:58:c9:
         3a:ce:b9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:32:10 2025 by rpki-client