Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
File:                     AdKI5UcwsQk69JmTgDQvhdgZjQo.mft (raw, json)
Hash identifier:          pgjFPRwULBPR1PJpBrjo5K9fV036zcR1lgHo27MP7bI=
Subject key identifier:   14:5E:75:FD:29:46:11:B9:7A:68:2E:64:EC:8C:24:73:E3:E2:63:48
Authority key identifier: 01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A
Certificate issuer:       /CN=01d288e54730b1093af4999380342f85d8198d0a
Certificate serial:       01976F99B2CA2701A72F7BDAC2F14583B79A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
Manifest number:          07CA
Signing time:             Sat 14 Jun 2025 18:00:33 +0000
Manifest this update:     Sat 14 Jun 2025 18:00:33 +0000
Manifest next update:     Sun 15 Jun 2025 18:00:33 +0000
Files and hashes:         1: AdKI5UcwsQk69JmTgDQvhdgZjQo.crl (hash: 7c4o0WdahhehPqxnZob+eubD6tEAclPLfhz4Y3k7gio=)
                          2: ZAHBHHaAw7FsCrpLUbPA7Y_af1E.roa (hash: BHI7TthhK/CKdv2M5Vzp/LT9A37tVvweSFfs+BtDAtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:99:b2:ca:27:01:a7:2f:7b:da:c2:f1:45:83:b7:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d288e54730b1093af4999380342f85d8198d0a
        Validity
            Not Before: Jun 14 18:00:33 2025 GMT
            Not After : Jun 15 18:00:33 2025 GMT
        Subject: CN=145e75fd294611b97a682e64ec8c2473e3e26348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d6:18:56:6e:08:89:44:a3:63:f9:95:dd:a9:
                    b1:2b:55:bf:88:f0:3b:35:6f:c8:d1:3f:8a:f7:e4:
                    fc:bf:8f:ba:82:03:cf:e5:36:50:b1:f7:21:d1:ca:
                    ec:d1:56:ea:a3:b4:fb:3d:6f:32:de:c1:74:3c:63:
                    88:67:3f:69:41:ec:95:5c:29:97:e5:b2:72:35:b1:
                    49:f8:5d:1e:65:df:ed:9f:dc:63:9c:37:a2:7d:59:
                    59:99:20:37:a7:1b:81:73:d8:46:80:94:22:73:7a:
                    8f:90:96:ce:1d:9f:63:db:32:c2:6c:f8:85:88:d4:
                    aa:b2:29:17:6f:65:81:0b:c3:c5:ca:34:37:99:24:
                    e8:b1:5b:14:c7:f3:39:31:6c:65:7b:a0:43:1b:bf:
                    14:11:10:8b:eb:2e:d6:3c:38:f4:8e:56:9d:b1:ff:
                    7c:fe:57:b8:10:5d:33:4e:1c:37:06:f1:06:b5:17:
                    e3:e5:70:bc:6b:20:c3:ce:72:53:81:d5:90:7d:9d:
                    1e:e3:61:3c:c9:e5:8c:3c:a9:81:66:d9:7a:d6:82:
                    e7:6c:58:0e:59:b0:7c:78:51:ea:33:50:78:75:a2:
                    5a:3a:1d:be:43:e3:8c:93:05:fe:d6:d4:78:14:a6:
                    88:d9:39:cc:01:5a:ca:9c:4a:32:d1:40:b4:9a:ba:
                    3a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5E:75:FD:29:46:11:B9:7A:68:2E:64:EC:8C:24:73:E3:E2:63:48
            X509v3 Authority Key Identifier:
                keyid:01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:3e:c2:b2:77:e0:27:db:17:89:f2:9f:89:e0:d1:9a:55:bc:
         7e:e6:bc:af:1b:11:8d:42:60:a0:00:7b:cc:31:d9:3f:5c:f5:
         ac:c4:f9:93:fa:b6:10:44:7e:68:18:16:1b:97:b1:28:c8:c6:
         a2:6b:3c:8c:86:68:6f:25:51:8b:9a:ea:72:0d:77:ac:94:c8:
         cd:05:1e:d2:48:d0:b2:c5:d8:66:56:8c:83:bc:54:f2:4a:8d:
         bb:3e:8c:26:3a:46:54:8f:7a:b4:a7:00:91:30:07:53:4a:44:
         61:9b:02:b3:28:9f:56:50:10:34:9b:a9:f9:13:55:70:12:7f:
         22:dc:0a:34:70:4d:5f:3e:db:68:66:88:ba:05:03:cc:05:32:
         4f:8c:06:63:26:3b:d7:b5:cb:9f:d8:74:d6:e8:be:42:06:af:
         5a:f3:26:5f:70:96:c3:33:12:48:9e:b3:ca:d0:65:60:6e:a9:
         0b:eb:e1:8d:72:12:76:fa:72:d9:83:2a:83:85:b0:22:b6:18:
         f6:f5:64:47:79:18:b3:17:65:16:60:86:65:76:6c:ea:cc:bc:
         00:8d:1b:8b:1e:fd:98:9f:e7:92:e9:b9:1b:9c:41:59:90:5c:
         0b:66:a3:77:31:d5:73:76:95:69:46:e7:6b:df:23:fe:5a:7b:
         e5:67:ad:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:18:01 2025 by rpki-client