Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
File:                     sDQCUfGCY0f06WRfaCTTuT9H5d4.mft (raw, json)
Hash identifier:          2vJS+RHZG1B5DmkhsPsjlNWsH+PF1NDl040KAs+0Rpk=
Subject key identifier:   4F:19:6E:77:9A:B3:C4:BD:6A:79:5C:2C:D8:EB:B9:FD:98:39:0A:B4
Authority key identifier: B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
Certificate issuer:       /CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Certificate serial:       01976DE2DCE725A05F858EABE8A48540EA39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
Manifest number:          0B93
Signing time:             Sat 14 Jun 2025 10:01:13 +0000
Manifest this update:     Sat 14 Jun 2025 10:01:13 +0000
Manifest next update:     Sun 15 Jun 2025 10:01:13 +0000
Files and hashes:         1: qrqtK-ZhNnqsmvUdjEvFxU-EYdM.roa (hash: w1CKR1mGTdMnfdWKUqyIUV2nyHBupF+j5wpw/8wUJ44=)
                          2: sDQCUfGCY0f06WRfaCTTuT9H5d4.crl (hash: xD/PPpjlYYhExJccj9ZN1A5H6MFU2hpLiL7l0B1IfdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:e2:dc:e7:25:a0:5f:85:8e:ab:e8:a4:85:40:ea:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0340251f1826347f4e9645f6824d3b93f47e5de
        Validity
            Not Before: Jun 14 10:01:13 2025 GMT
            Not After : Jun 15 10:01:13 2025 GMT
        Subject: CN=4f196e779ab3c4bd6a795c2cd8ebb9fd98390ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fa:6e:ad:1a:ff:f9:22:82:38:d4:22:c5:be:
                    23:b6:b7:85:1b:4c:be:56:d8:7b:ba:6b:90:91:fd:
                    1c:cb:1b:76:7a:fd:72:07:a6:0b:a4:8b:04:80:1b:
                    e6:1f:cc:77:36:69:d1:53:e7:ba:72:14:eb:04:72:
                    8a:00:b1:99:c7:f6:06:6c:37:dc:6a:6c:ea:36:cf:
                    29:d7:05:ee:a3:82:c0:55:fc:48:cb:3e:3a:1a:3e:
                    76:c7:a7:4c:5a:0b:39:47:5d:48:fc:01:5a:27:ec:
                    fa:7a:36:80:8c:ed:37:e2:5f:aa:14:f4:e0:e3:bb:
                    cc:0d:74:75:67:b4:f9:a8:87:1c:40:a7:33:00:71:
                    17:b6:af:8c:7f:2e:08:42:92:ad:5c:4e:e3:c8:0a:
                    91:79:da:99:6b:7c:24:57:96:ed:c9:de:4a:00:ee:
                    ca:4f:92:6f:3a:67:7e:9b:d5:c6:4e:4b:d7:be:49:
                    0e:f7:c6:a8:88:9d:c3:29:d6:04:94:c9:73:9b:b0:
                    f0:bf:6e:8a:00:a8:7c:ce:b8:81:bd:5c:31:cb:ce:
                    cf:6c:05:63:2d:80:01:bd:44:82:6c:a5:34:c4:35:
                    5c:57:ad:84:77:0b:b8:2b:1f:fd:2e:97:49:59:ae:
                    9d:24:41:7a:50:5a:58:0a:89:53:97:80:0b:28:ac:
                    57:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:19:6E:77:9A:B3:C4:BD:6A:79:5C:2C:D8:EB:B9:FD:98:39:0A:B4
            X509v3 Authority Key Identifier:
                keyid:B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:3c:b5:ba:16:0b:79:48:47:fc:49:c8:f5:75:e1:e1:4b:15:
         51:b2:38:f0:70:f8:a5:56:36:e0:01:c4:b7:8c:95:4e:47:f4:
         75:23:91:fb:71:6c:31:a4:4f:fd:2f:7d:32:e5:77:4a:7d:bc:
         13:1d:29:55:77:7c:f8:af:fb:37:4e:99:05:cb:c7:b6:53:5e:
         41:d2:75:83:39:08:e4:cf:3f:e9:97:4f:da:83:a9:3a:94:7f:
         ad:07:4c:3a:b2:94:e6:f8:00:9f:c2:96:aa:43:4d:0c:42:67:
         43:16:0b:1b:77:8e:48:ec:45:35:83:0b:07:31:d8:eb:7b:83:
         1d:05:8e:8e:ec:08:b5:18:66:52:3a:73:80:65:f1:da:95:ae:
         7d:6f:89:77:1a:4a:48:00:85:68:c4:78:23:34:ed:3d:b0:e0:
         05:32:db:df:12:79:d2:48:bd:3d:a6:8a:06:f9:5f:25:39:bc:
         46:4a:c8:35:1f:fb:53:75:da:2c:cc:7d:8e:31:89:96:83:90:
         0f:ba:d0:8f:fc:bd:5f:2e:01:9a:e3:f5:6a:81:0f:35:f2:55:
         d6:c1:08:51:de:9c:6e:81:56:52:18:e3:b9:99:23:6e:d4:c8:
         53:b7:da:b8:7f:94:45:ee:97:c8:28:f9:77:56:a0:86:16:98:
         d4:3b:3e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:15:55 2025 by rpki-client