Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
File:                     B2OUhFMlCEu573jU9xf8S1Rfp-0.mft (raw, json)
Hash identifier:          s5KUdcgdbpOUSKl3O+5fi/ycFcCfrF2TijgHk8hwscA=
Subject key identifier:   64:79:36:66:58:24:E0:A7:06:7D:06:67:5C:1F:07:C9:28:24:82:CC
Authority key identifier: 07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED
Certificate issuer:       /CN=076394845325084bb9ef78d4f717fc4b545fa7ed
Certificate serial:       01976F62B09669116A9219EDD859A6FB57A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
Manifest number:          097D
Signing time:             Sat 14 Jun 2025 17:00:28 +0000
Manifest this update:     Sat 14 Jun 2025 17:00:28 +0000
Manifest next update:     Sun 15 Jun 2025 17:00:28 +0000
Files and hashes:         1: B2OUhFMlCEu573jU9xf8S1Rfp-0.crl (hash: tXVL5wY5KhMj+6+7HFDfP+GXDJdB0bXwgGga7F3pQmA=)
                          2: XpdAC2CuEGkYk1z1zkOTjlju-Rg.roa (hash: 1El56OSjhFHRSJhlBb4c0HE0W+XJGN0QCFbnBM5w1i8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 17:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:62:b0:96:69:11:6a:92:19:ed:d8:59:a6:fb:57:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076394845325084bb9ef78d4f717fc4b545fa7ed
        Validity
            Not Before: Jun 14 17:00:28 2025 GMT
            Not After : Jun 15 17:00:28 2025 GMT
        Subject: CN=647936665824e0a7067d06675c1f07c9282482cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:1f:8e:69:f8:31:e5:74:f8:c0:5c:20:b3:
                    a4:7d:d1:d1:86:46:fa:ab:ce:be:0c:6b:0a:2a:d2:
                    80:1e:39:3d:e6:f4:b3:24:90:78:e0:29:0c:20:ea:
                    63:ab:f5:d5:40:bd:6e:31:85:94:df:cd:54:9f:01:
                    bb:68:d9:73:26:4f:9c:87:de:fb:26:4c:d3:1a:b4:
                    7e:6b:7e:47:c8:d0:51:52:78:92:82:c0:d7:26:6b:
                    9d:31:86:95:cf:f5:17:92:45:21:ca:4e:e4:80:e0:
                    95:ad:a5:a0:7f:8a:ce:8f:c1:ab:4e:eb:d8:58:99:
                    92:a6:8f:72:1d:ae:41:c7:a9:b8:d7:ce:18:07:6e:
                    a5:c7:1e:b2:ec:54:80:64:76:3a:80:76:20:14:a5:
                    dd:4f:e1:62:c0:71:df:a2:97:b2:c7:b9:43:54:45:
                    d3:93:29:b1:50:3a:fe:61:49:06:bd:02:31:d1:b8:
                    18:74:fc:94:16:bc:1d:3c:8e:62:13:63:5b:4b:e9:
                    ea:c1:cd:58:08:ee:62:59:80:19:df:55:42:17:07:
                    a2:2f:0a:ab:03:2d:65:10:bc:66:05:a9:d6:f6:dc:
                    de:c8:cc:23:80:ef:80:b3:2a:01:55:fe:bb:8c:51:
                    82:10:d5:c5:8e:41:8b:ac:75:94:6f:76:35:c3:6a:
                    4d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:79:36:66:58:24:E0:A7:06:7D:06:67:5C:1F:07:C9:28:24:82:CC
            X509v3 Authority Key Identifier:
                keyid:07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5b:bc:7a:e3:98:ba:10:4b:4b:60:c1:74:c4:24:0b:75:2b:
         37:7b:78:64:c1:ab:5b:9b:00:b4:71:69:c9:1a:1f:d4:97:cc:
         d3:2e:a8:32:a2:79:d6:c7:e3:ba:72:46:6f:d6:f4:0c:30:c3:
         bc:a9:aa:ee:9c:30:1b:8b:dc:23:7f:c7:0a:61:20:1b:b9:40:
         32:90:6e:f2:54:c1:46:ee:d2:9b:ef:ae:e5:c2:97:4b:ea:da:
         04:58:d8:7c:25:85:2e:0b:10:b9:a0:89:d3:fb:26:49:82:e4:
         8c:51:67:06:0f:25:b9:d9:01:13:e4:c9:13:5c:e0:3c:5a:35:
         1c:f4:cb:6b:eb:ca:5a:86:d7:d3:ff:dc:e4:a2:9e:d5:f2:c3:
         10:00:c6:37:16:f6:9b:d0:82:49:fe:80:32:c4:22:ae:86:e1:
         48:02:95:19:fd:f2:16:9a:d1:2b:e1:4e:1b:7d:74:c4:a0:8c:
         04:d4:8d:c7:66:d5:ed:3c:ab:05:c4:9c:fc:1a:3d:85:4c:50:
         51:21:35:cd:a3:2f:d6:1b:80:b2:ff:12:ab:c2:ca:e5:52:7f:
         e1:11:f5:7c:c8:ac:46:b0:20:e7:13:11:b0:c1:1e:05:5a:3b:
         99:ca:00:81:d9:6f:fd:b0:44:ec:44:b3:24:db:0c:a9:2a:04:
         d9:06:fd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:27:54 2025 by rpki-client