Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
File:                     C0U7QQ01hqYjepUe7zsD9MRBGPA.mft (raw, json)
Hash identifier:          ybNMi6GRSeLPoEaDkXpzx+VS2/bS4kk5dWRi+JcLrxw=
Subject key identifier:   B4:76:12:78:7B:B2:C5:1D:D4:4B:AC:02:08:BE:BC:73:92:2D:EA:C5
Authority key identifier: 0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
Certificate issuer:       /CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Certificate serial:       0197684E8C7CEB5685AE8030E873D34A9F88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
Manifest number:          08CF
Signing time:             Fri 13 Jun 2025 08:01:07 +0000
Manifest this update:     Fri 13 Jun 2025 08:01:07 +0000
Manifest next update:     Sat 14 Jun 2025 08:01:07 +0000
Files and hashes:         1: 6Nr2VmGKQ_jUJpF9yPeLEUnYhF4.roa (hash: /MpCkrj9yQfDhYflTljevFhsZA0Mv2nTgQM1DqiGD3A=)
                          2: C0U7QQ01hqYjepUe7zsD9MRBGPA.crl (hash: F7+T6XyoCIRZgM5H6uUNFz+KKiFaxzqG5v4wDN+w0gI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:8c:7c:eb:56:85:ae:80:30:e8:73:d3:4a:9f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b453b410d3586a6237a951eef3b03f4c44118f0
        Validity
            Not Before: Jun 13 08:01:07 2025 GMT
            Not After : Jun 14 08:01:07 2025 GMT
        Subject: CN=b47612787bb2c51dd44bac0208bebc73922deac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:fe:ee:f3:b8:5f:33:84:c9:a2:35:da:e9:
                    68:4b:f7:4f:cb:8f:11:6f:06:e9:8f:b7:85:97:68:
                    cd:26:87:d3:69:e7:04:ab:b0:01:bf:3b:b2:71:ca:
                    d9:37:07:a2:ca:21:d5:ea:68:cc:3d:a4:90:73:42:
                    e6:a3:e9:00:dc:79:b7:e2:a8:53:8a:73:fd:3d:ff:
                    90:97:c0:60:cc:94:0f:7e:a8:a8:1f:36:1c:4d:99:
                    18:2d:13:e0:3e:1e:8b:1e:3d:5d:da:39:4a:e2:3b:
                    3d:92:86:d5:cc:bc:db:65:20:05:0e:e2:dc:1c:10:
                    37:b2:9b:a1:d7:2f:f5:37:60:8e:e3:76:57:7a:f6:
                    ef:a7:8a:b2:8e:5d:83:75:10:58:67:f2:30:fa:28:
                    96:64:7f:3a:74:20:9c:a9:de:0a:92:8c:9e:ad:e5:
                    69:cc:00:aa:c0:13:7a:b9:56:cf:5e:f6:05:56:55:
                    95:a9:3e:00:f0:60:a6:1f:70:ba:12:b0:5f:b4:5d:
                    68:b8:f8:c4:28:e4:c3:62:ae:86:0b:07:c3:3e:86:
                    70:f4:e2:78:d6:9b:a8:7e:7b:83:3a:b7:19:a2:dc:
                    be:35:e1:2c:39:25:c8:fe:1a:21:46:db:70:89:c8:
                    47:9f:35:e0:6a:b3:20:af:27:fc:e8:ef:43:08:24:
                    95:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:76:12:78:7B:B2:C5:1D:D4:4B:AC:02:08:BE:BC:73:92:2D:EA:C5
            X509v3 Authority Key Identifier:
                keyid:0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:d5:7a:44:85:90:86:6f:96:d9:0b:a2:82:fe:68:b2:1f:9f:
         82:d9:83:68:94:74:06:08:bc:5f:86:30:71:83:2d:51:a9:1b:
         d2:11:06:b8:d0:a9:a9:aa:c6:0f:94:47:23:48:92:0b:20:e1:
         12:2e:1a:9a:31:3e:81:74:bc:9a:44:1a:16:54:45:8f:51:e4:
         ef:07:b2:86:3c:f3:98:eb:c3:47:50:eb:2d:cb:ed:24:86:80:
         8c:a8:32:00:b9:82:6e:d1:13:59:d5:ce:c0:ec:a4:ce:3d:44:
         c0:2a:99:08:0f:9f:0f:64:ad:20:67:9c:b3:fd:a1:03:ac:dc:
         38:56:b3:71:7c:78:fb:55:d4:48:02:80:52:88:a8:b6:af:f6:
         71:de:2e:9a:62:60:d3:36:6d:4f:7d:84:10:e1:13:8d:34:27:
         45:ee:7d:dc:a5:92:cd:98:28:c4:1c:eb:f6:70:92:4f:36:11:
         96:af:0c:ee:41:80:4a:c0:a0:8e:f8:37:b0:63:11:1c:3c:5d:
         ba:ca:06:5c:e9:d4:8b:57:17:7f:a5:a2:e8:5c:dd:4d:ce:0a:
         ff:e0:b9:ee:69:43:7e:d3:3f:b0:af:62:61:87:01:ef:ae:1f:
         88:42:26:d9:fe:23:6f:ab:6f:ba:02:01:8d:88:d9:dd:d8:4d:
         88:75:a2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:10 2025 by rpki-client