Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
File:                     M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json)
Hash identifier:          OFjeDH7JLcOwDxRp+bn6KICoOxWEsKbD0ntVFhGV8FQ=
Subject key identifier:   66:51:0F:B0:BA:8E:AC:EE:A9:E8:7C:44:F2:4D:6E:5A:C3:0E:C5:D4
Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
Certificate issuer:       /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Certificate serial:       01976C2AD1F6EB6426507816458429E323AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
Manifest number:          0BBD
Signing time:             Sat 14 Jun 2025 02:00:34 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:34 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:34 +0000
Files and hashes:         1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: j5q+x5ojJxcFdzfWGvUiLyjqp6e6lqVYX2rEBGs3x1I=)
                          2: NH9bJkmOLcBYnLsAYTfcsFMJkSM.roa (hash: sPNuwdbSLXSgaPh+BpoER3Hzbei/qqQBt4s/TVbjmVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:d1:f6:eb:64:26:50:78:16:45:84:29:e3:23:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
        Validity
            Not Before: Jun 14 02:00:34 2025 GMT
            Not After : Jun 15 02:00:34 2025 GMT
        Subject: CN=66510fb0ba8eaceea9e87c44f24d6e5ac30ec5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:f6:c6:47:42:71:68:54:85:80:19:37:c6:
                    2b:88:06:a4:62:4b:c5:c4:32:47:19:81:15:5e:bf:
                    e4:57:36:9b:3d:b1:8d:60:54:b4:ea:70:f3:98:79:
                    f0:de:fe:39:a3:ae:1b:3a:16:a4:43:76:01:0a:c9:
                    92:d7:16:1a:3c:25:a4:5e:93:5a:81:cb:60:d9:dc:
                    02:56:6f:0e:2b:3c:73:97:30:b0:14:4a:53:24:8f:
                    5e:5a:25:72:46:ef:6a:77:e1:6b:ec:73:2e:1a:e5:
                    1b:04:c6:81:d7:ca:17:46:4e:da:c3:f6:35:fc:ef:
                    4d:e1:ee:40:94:02:50:0f:8d:eb:e1:c8:1c:fb:e9:
                    20:d8:e0:1b:94:92:2e:94:8a:3a:e7:c6:80:24:9a:
                    79:7a:3d:da:9b:25:da:1f:f6:5e:97:a9:31:b4:6d:
                    77:19:54:4f:de:52:93:f7:be:88:b2:92:63:fe:47:
                    92:36:57:a1:5f:82:8e:fc:d4:ae:bd:82:b1:ea:4f:
                    fc:fb:90:bb:12:c3:93:b3:e8:da:7a:b4:09:e8:4c:
                    1b:05:b2:ad:38:1f:b9:4d:67:67:9b:52:61:89:a8:
                    3f:2e:92:72:62:72:45:2c:d2:08:b3:c3:2e:73:dd:
                    0f:60:c2:65:1f:d4:8f:f1:b5:eb:f6:f9:e8:60:3c:
                    57:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:51:0F:B0:BA:8E:AC:EE:A9:E8:7C:44:F2:4D:6E:5A:C3:0E:C5:D4
            X509v3 Authority Key Identifier:
                keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:59:d4:5a:a7:53:dd:c7:8e:db:dc:9d:c5:c4:57:50:79:75:
         2b:92:b7:a2:13:1e:8b:ba:64:73:da:07:e0:15:7d:12:10:e2:
         87:ad:a1:e1:f8:c4:4f:4b:92:82:74:47:ac:ef:3c:4b:9b:ca:
         d7:ca:f7:5c:7d:96:d1:1f:cd:65:84:8a:50:fe:b8:cf:1f:64:
         b6:a9:69:ba:f9:01:cb:5b:1a:18:cd:4a:c0:14:09:a1:b4:5a:
         af:69:df:ff:70:4b:03:80:64:63:f3:12:c5:41:d5:3e:5c:ad:
         a5:8c:44:70:24:35:5c:8f:14:b9:16:8b:ec:a0:86:a9:3a:79:
         25:85:79:d4:70:41:0c:56:a6:2e:8f:b5:03:ae:08:26:19:fc:
         b2:0c:ff:64:36:79:17:f3:1d:18:a7:bf:1f:fa:f8:24:e1:73:
         d3:ba:ef:a6:16:a3:c0:8b:65:ac:cb:b5:a0:22:af:b7:72:f9:
         70:96:34:cc:8a:56:3f:79:ab:cb:58:c0:e7:c2:e4:2d:cf:aa:
         6f:c6:64:cc:43:4d:6b:a5:07:49:37:a0:7f:6b:28:64:11:fc:
         36:d6:91:4f:d8:1d:72:f2:a6:e9:cb:de:57:44:d4:d9:6e:72:
         bc:bc:be:c8:2c:c0:6d:ad:67:1f:4d:d2:2e:ad:b5:43:7e:24:
         f7:ad:d7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:12:46 2025 by rpki-client