Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File:                     o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier:          lcS99tmjRs9oXRsYW/3I8fYjOoEtPh9JGShycB/KH7M=
Subject key identifier:   7A:0A:B6:E2:49:75:A6:DF:F5:06:83:EE:5C:D6:44:E1:05:71:09:C1
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer:       /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial:       01976BF423DB4DCDE93704C38004FCDA1840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number:          11D2
Signing time:             Sat 14 Jun 2025 01:00:51 +0000
Manifest this update:     Sat 14 Jun 2025 01:00:51 +0000
Manifest next update:     Sun 15 Jun 2025 01:00:51 +0000
Files and hashes:         1: 6qcJyLkGHGKYEWJcRiN4L6Z8qn8.roa (hash: 5OQd3tPQBKWKRhlqwep2BEZpe6x6xAIuVkUwGHnZJ7w=)
                          2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: mHuo3YWwi1cm3xvTtv22IVEsNCwx+WfAJAFEywRMono=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:23:db:4d:cd:e9:37:04:c3:80:04:fc:da:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
        Validity
            Not Before: Jun 14 01:00:51 2025 GMT
            Not After : Jun 15 01:00:51 2025 GMT
        Subject: CN=7a0ab6e24975a6dff50683ee5cd644e1057109c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9e:37:f1:81:d6:83:69:ea:71:6b:19:31:4f:
                    79:6a:40:95:ae:a9:93:ee:bc:96:1d:45:65:fd:9e:
                    90:2c:0f:2c:8e:34:d5:5e:90:9b:e5:c6:e4:20:11:
                    fb:83:6d:9f:e0:55:f2:3c:17:b2:e9:7f:37:87:90:
                    98:46:5f:03:6f:41:9b:b0:c6:c8:37:01:49:f4:50:
                    f6:85:2f:b0:ac:f5:9d:4d:32:d4:d5:dd:27:dc:84:
                    a4:36:e0:b2:5c:0a:c5:1f:15:34:ab:26:07:22:16:
                    fc:40:24:1b:58:b4:f0:84:f7:6f:53:af:00:07:4c:
                    c9:06:39:1f:5a:ba:0a:48:ad:38:29:66:cd:66:67:
                    71:ea:72:e0:e8:f8:74:60:3a:81:61:f4:cf:92:ea:
                    29:99:d1:e8:0d:b5:5b:01:7d:85:b1:2b:81:f6:2f:
                    6a:3c:18:79:c7:dd:af:16:11:51:b1:c2:4a:af:79:
                    15:03:18:08:7d:6c:78:f7:ff:ec:ef:12:07:a3:11:
                    a4:9d:39:b4:78:37:7f:29:85:6c:6f:e8:12:3e:90:
                    70:fc:16:bc:7f:c0:d1:7c:ea:1c:d5:cd:fe:2b:32:
                    36:f6:82:59:ca:2c:a9:52:1f:12:82:00:e3:31:60:
                    d5:56:0e:35:4e:78:4e:55:ab:81:d9:83:00:52:6a:
                    ee:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0A:B6:E2:49:75:A6:DF:F5:06:83:EE:5C:D6:44:E1:05:71:09:C1
            X509v3 Authority Key Identifier:
                keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c4:7f:82:9d:4f:cd:25:97:1b:1f:c4:1b:06:59:51:6b:51:
         a5:78:f7:c5:5c:da:76:34:cb:d9:2b:30:1e:06:f1:71:19:f4:
         77:c2:ba:b5:58:a5:76:ee:37:32:12:9c:f5:b3:ca:f0:e3:99:
         51:3d:fd:22:21:af:28:6b:ca:22:6f:25:2e:4e:00:2e:85:a3:
         4a:5d:43:b0:05:2b:44:fd:bd:18:38:6e:bc:4b:7f:03:20:ef:
         83:b7:11:79:38:ae:7a:83:c7:c1:8c:3f:5a:da:db:bd:41:c7:
         4a:f0:ca:5a:01:26:27:ee:fb:e4:5c:0b:66:5d:7d:9d:c9:07:
         f5:fb:8f:5b:dd:8a:4c:c5:2c:d9:f4:92:26:9e:e3:12:20:cd:
         2b:46:4b:31:e4:b2:0a:dd:22:af:57:a0:1f:f6:d2:9f:8d:f6:
         f2:f9:80:12:c3:12:4d:28:b0:1a:02:88:a1:39:95:93:fe:a3:
         ee:8f:cc:f3:7b:91:48:b6:cf:3b:a4:64:6a:57:44:94:78:0b:
         75:60:5d:cd:51:94:0c:5c:e5:27:f9:cd:f1:84:8f:21:8b:21:
         7c:91:16:df:89:cb:93:cc:8e:9c:cf:39:7a:2d:3e:4f:df:2a:
         c8:95:da:c6:7e:7f:e0:21:4e:71:56:67:5c:c1:ce:1e:36:02:
         f3:b5:e3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:33:26 2025 by rpki-client