Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
File:                     MCaAamuNrGjCoytlhJIpUk_DPac.mft (raw, json)
Hash identifier:          UXK0S/nJgP3jKPVx3HCnM6sbb6t1iib2+MxQEUxdv+A=
Subject key identifier:   91:A8:3B:D6:B6:30:DE:31:FB:AE:EF:C4:4C:21:55:1B:3E:E8:49:E1
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Certificate issuer:       /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial:       01977DFA571F0CEBF9FAE506AB6B9719892F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
Manifest number:          0D5C
Signing time:             Tue 17 Jun 2025 13:00:47 +0000
Manifest this update:     Tue 17 Jun 2025 13:00:47 +0000
Manifest next update:     Wed 18 Jun 2025 13:00:47 +0000
Files and hashes:         1: HqEtipzQowxTqcDrA6YD2PAM22k.roa (hash: +TySDtYTZSAF4An5pdiKoQwn0LwGdYxQZAyZ18GrAFU=)
                          2: MCaAamuNrGjCoytlhJIpUk_DPac.crl (hash: ucy85SiNBYE+A39EUmLCT3taKQ2NVduKKARXeytGDVs=)
                          3: N-IkqmIl8KlWw01vFtAZ-uos0pY.roa (hash: YeMMYzZTCS8ByuvcJi0c6d7AtfKEEZ2nt+xBnMZjmqQ=)
                          4: SXPqMjJIqIiiKMiICnz-R2huK7A.roa (hash: VBPweWvhbagfxdIj/U/h3DiF8G4gGJiOVx2OPYGVAl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7d:fa:57:1f:0c:eb:f9:fa:e5:06:ab:6b:97:19:89:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
        Validity
            Not Before: Jun 17 13:00:47 2025 GMT
            Not After : Jun 18 13:00:47 2025 GMT
        Subject: CN=91a83bd6b630de31fbaeefc44c21551b3ee849e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0b:17:05:a8:3b:c8:42:82:29:84:95:51:f5:
                    f5:95:f5:66:68:5d:1e:7a:28:0e:fe:16:e8:b9:97:
                    85:9d:b8:8f:fd:5f:d2:bc:80:09:e6:9d:21:aa:b3:
                    07:f5:5f:91:03:6c:c1:e0:e7:64:ff:f8:85:a4:52:
                    aa:32:56:bf:e7:18:45:35:6d:85:80:74:4b:a3:60:
                    a3:63:15:ae:ee:a7:74:ef:0e:19:dd:ae:77:8c:03:
                    a6:20:b7:b6:14:16:28:6c:c1:85:e0:83:7a:46:24:
                    37:89:9c:c8:2b:2c:a5:48:a7:8e:9b:72:20:41:43:
                    4e:c4:5a:02:50:dd:1e:b2:61:be:8c:c3:67:43:0d:
                    ba:d8:43:3c:a0:ee:11:48:5e:50:29:79:02:58:ba:
                    5e:53:8f:af:98:9b:47:20:0a:8d:c7:ca:07:2d:53:
                    27:e5:9c:3a:c2:62:2a:b7:dc:fa:88:e6:c5:f9:cc:
                    0c:eb:ac:87:22:b7:04:b2:bb:9d:12:17:9a:95:83:
                    ec:28:f5:70:57:8d:d2:a6:0a:e5:0f:a1:f4:57:64:
                    35:dd:23:4a:9c:5c:60:22:b9:52:9a:3f:98:4e:bc:
                    55:9e:a6:33:df:21:31:fd:1e:a0:8f:96:a4:9b:5b:
                    ee:24:89:f6:bb:36:55:d3:6d:fb:92:c5:97:3c:a3:
                    53:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A8:3B:D6:B6:30:DE:31:FB:AE:EF:C4:4C:21:55:1B:3E:E8:49:E1
            X509v3 Authority Key Identifier:
                keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:4a:48:46:67:d0:1c:23:c1:ef:40:61:d6:67:df:ef:9b:97:
         bd:a8:7f:92:36:c2:c1:2f:31:56:af:d9:1e:ee:c9:7a:aa:c4:
         2f:0e:a6:43:86:66:fe:69:e5:9b:4d:a6:d6:53:d1:74:94:41:
         82:41:77:e0:a1:7a:3b:24:48:45:52:54:be:d4:0c:ba:57:96:
         e4:a6:2a:8b:25:64:f3:a8:94:b5:57:26:85:10:f1:e2:4b:de:
         aa:3d:85:1a:0a:ff:5f:fe:b6:a5:0c:43:66:61:67:1c:6e:a7:
         c2:1a:35:66:18:1c:19:53:83:91:ff:14:9a:8b:81:ac:24:7f:
         8a:fb:8d:42:ea:87:d7:96:d0:97:91:64:ee:f0:2e:69:d8:a7:
         d6:6c:1a:c7:59:b5:48:45:e6:03:b4:41:dc:aa:b0:b0:24:0d:
         59:0e:e8:64:46:6b:56:25:32:a4:88:21:d6:d9:5e:d6:47:a4:
         02:f6:c0:23:71:3c:1b:97:29:4b:ab:41:45:7c:05:bc:ce:48:
         93:98:6f:40:e5:b2:f1:cb:c7:de:ce:3a:94:e2:6d:3e:d3:af:
         2e:e6:99:01:0a:84:39:fd:8d:2c:79:04:46:e4:b5:6b:23:ad:
         9c:66:d0:c1:62:b5:9e:2b:53:0e:5c:56:b8:7c:45:30:62:5b:
         31:83:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:22:42 2025 by rpki-client