Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
File:                     CR2q09J9vPlNMAb7-6fh3dXSnxY.mft (raw, json)
Hash identifier:          U5l52q0O5eBu/N4GXYiGPzuZZVqwcxKxLFI3gNJpuhE=
Subject key identifier:   CE:55:4D:F3:48:08:12:18:3A:92:74:E7:5F:A0:A7:1A:B5:0B:03:02
Authority key identifier: 09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
Certificate issuer:       /CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Certificate serial:       019769CF1DA1FC4407B3B2C02F930D5DBE80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
Manifest number:          064B
Signing time:             Fri 13 Jun 2025 15:01:10 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:10 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:10 +0000
Files and hashes:         1: Bd7FcffIWEfbujnp9WS-BYRh8lY.roa (hash: 1aqbGtOUu0Pm7rzIGfOGmwYKjDdAbGNYXLp563xVUt0=)
                          2: CR2q09J9vPlNMAb7-6fh3dXSnxY.crl (hash: CmHI2lTy1Uxx0may7pkiw+MTY/UePJtCctDjVB4eQMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:cf:1d:a1:fc:44:07:b3:b2:c0:2f:93:0d:5d:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
        Validity
            Not Before: Jun 13 15:01:10 2025 GMT
            Not After : Jun 14 15:01:10 2025 GMT
        Subject: CN=ce554df3480812183a9274e75fa0a71ab50b0302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f5:e5:18:89:c0:20:3e:42:f4:14:34:5a:87:
                    e9:0c:38:48:ac:61:05:37:1d:a8:86:96:56:1f:c1:
                    fb:c2:28:f8:58:50:9c:72:11:62:c3:dd:83:8b:a6:
                    48:2b:9e:f8:ea:0e:8e:7e:d4:d4:cd:4d:75:bf:35:
                    bc:bc:a2:12:c7:6d:7f:8f:0e:a4:46:c6:6e:1f:60:
                    fc:b5:8d:79:4a:30:a9:01:df:e4:43:78:e0:02:af:
                    8c:3d:20:e7:73:4e:da:8d:48:eb:66:92:8d:71:7c:
                    a8:ae:84:13:8b:06:c0:84:e4:5d:a2:28:b1:8f:1d:
                    1a:da:51:41:65:c4:2f:e7:2b:14:ee:7b:f9:b1:a8:
                    59:6c:9f:46:8e:34:6c:45:7e:af:2a:d4:76:c2:cf:
                    2c:d1:dd:4a:aa:e0:4a:ae:52:1c:a8:d6:95:95:c6:
                    fc:6f:b5:8b:ac:77:01:ac:3c:b7:0b:be:20:5e:03:
                    78:96:99:04:3f:ed:63:29:5d:f8:02:27:97:f5:56:
                    1d:36:5d:4a:b7:02:64:8f:51:3e:fb:fa:a3:b0:8b:
                    05:94:67:4b:dd:99:4f:9b:a9:c0:cd:83:da:d4:3e:
                    60:2a:58:b1:e3:db:8c:06:35:56:17:5c:4a:ec:e3:
                    75:b7:3b:06:be:8b:55:d1:59:b0:89:57:ab:55:2a:
                    db:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:55:4D:F3:48:08:12:18:3A:92:74:E7:5F:A0:A7:1A:B5:0B:03:02
            X509v3 Authority Key Identifier:
                keyid:09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:5d:9b:e1:30:92:38:b5:e8:2a:ab:00:04:9c:07:1f:2f:db:
         f6:15:a5:db:42:ee:9d:8b:31:78:52:7a:8e:ac:d5:38:21:32:
         1c:62:d0:dc:3f:d0:b0:d6:72:10:7f:a4:c5:01:92:26:c9:44:
         b6:5c:c0:a8:30:34:6d:e4:43:57:27:5e:f5:6b:0c:08:6f:00:
         c6:b4:c7:9a:60:ad:c5:8e:f4:7e:05:42:f9:1e:19:a3:33:8c:
         1a:eb:d4:ce:52:37:84:88:7c:5a:85:44:4b:2a:13:86:08:ed:
         1b:24:27:52:35:3b:25:44:40:b0:d1:32:05:73:fe:8b:59:91:
         32:94:1a:34:aa:75:c8:8d:d6:83:00:dd:af:9d:85:9e:33:33:
         74:e0:21:94:47:a5:01:bb:83:0a:bc:33:47:8b:39:f7:04:b1:
         b2:f3:a6:53:e5:b5:4a:60:af:9c:49:0b:39:02:37:b2:30:75:
         26:91:42:32:d7:6e:d4:40:e3:fd:e4:fd:2f:7e:7a:c6:c3:de:
         42:40:0a:45:4b:f7:ed:c2:7a:53:66:04:cf:a2:18:30:82:85:
         33:f8:62:e0:45:6d:58:31:31:79:5c:45:ac:b7:46:a5:c1:eb:
         0f:35:76:42:c2:6a:4e:fb:2c:aa:88:bb:ac:dd:30:4a:df:64:
         ed:83:11:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:15:40 2025 by rpki-client