Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
File:                     CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json)
Hash identifier:          BCGFwIQZyHvy8s9jv8V7V2dnBbyYy+RrknRKPhYdUcQ=
Subject key identifier:   FF:47:CB:EB:12:B6:6A:8E:A9:66:3A:24:8B:74:4B:0F:7C:A7:29:E0
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Certificate issuer:       /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial:       01976F9A335ABA8EEF0B1EC8D14977C1BDC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
Manifest number:          1151
Signing time:             Sat 14 Jun 2025 18:01:05 +0000
Manifest this update:     Sat 14 Jun 2025 18:01:05 +0000
Manifest next update:     Sun 15 Jun 2025 18:01:05 +0000
Files and hashes:         1: 5TdpsvGEzHHc2DVMKGITS46zP8M.roa (hash: NtR3z7rxkvkkgqfCc2bT1z0ch/WfYD2HGcwqrNfMm/k=)
                          2: 6rcNFpA9OUIHOHJZd3RQ4Nq4JOQ.roa (hash: 8DalHmkqlYHfZ/UiruC9ySCew9dMOULJFQbWBLs8o00=)
                          3: A0RJOA3D0QS8jyOdklsxwozEZks.roa (hash: sW0q/KPoEvaj+bjphgSA1v3RGwifbXQZawO4nY7ko3U=)
                          4: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: xf3O9OPGx+3vzrPc7jxmhxpryilwmrkyytmGsGHI22I=)
                          5: J_GNQPWHaTopYauZz-X71VDCD30.roa (hash: mYWNHSJ/8l+aWGMPXqK6gzDUsBDut0UQO9etVhI8z0E=)
                          6: ivrBGL0q_NF31wGnb6OsQlrkSGo.roa (hash: OcT5ce9nz2OZqGwJctdjZ8/bty60h4IQcxLhct5JKGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:9a:33:5a:ba:8e:ef:0b:1e:c8:d1:49:77:c1:bd:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
        Validity
            Not Before: Jun 14 18:01:05 2025 GMT
            Not After : Jun 15 18:01:05 2025 GMT
        Subject: CN=ff47cbeb12b66a8ea9663a248b744b0f7ca729e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b4:c4:bd:f9:04:95:fb:63:c5:a5:3e:ab:f6:
                    ea:11:ce:73:74:d7:50:8e:ef:17:be:78:2b:85:0b:
                    99:86:fc:45:ac:66:c1:f5:f3:cb:41:44:b1:25:8c:
                    19:1c:93:a7:74:d4:3b:df:34:a3:97:84:a6:e6:2a:
                    4e:bb:b3:0b:be:84:80:a9:0f:15:63:2e:47:18:8b:
                    e1:5e:5b:93:4c:d6:24:38:26:8c:21:e0:8b:3f:e1:
                    e7:87:5a:62:10:54:63:c3:76:16:ab:f4:af:7c:20:
                    dc:e1:57:2b:e0:9a:e1:23:ef:56:cb:57:35:d6:7f:
                    7e:83:99:e3:19:c0:1a:a7:9c:1a:aa:02:44:ed:6b:
                    42:ed:c1:70:89:e1:ff:2b:6f:38:76:db:f9:26:66:
                    b3:02:8f:93:8c:5e:0d:d7:c3:91:c5:ed:fa:d9:a2:
                    93:1c:32:ad:44:ff:4b:9a:8f:d5:98:57:48:48:fb:
                    12:fe:26:b1:81:e2:d0:f7:3b:18:ae:57:54:e7:d4:
                    94:a4:ec:1b:70:98:68:dd:02:56:7a:a0:7a:9b:08:
                    a3:67:22:9e:56:6a:26:9b:cd:85:b0:55:53:78:e9:
                    b7:68:c4:16:0d:ff:d0:fd:08:06:12:72:29:e8:ac:
                    61:d1:73:4d:87:7f:17:0a:70:61:74:83:e7:15:8e:
                    88:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:47:CB:EB:12:B6:6A:8E:A9:66:3A:24:8B:74:4B:0F:7C:A7:29:E0
            X509v3 Authority Key Identifier:
                keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a7:ca:6e:25:55:00:78:86:a3:38:7f:ff:97:76:d8:e7:be:
         cb:08:8f:ce:55:41:48:ed:b7:e3:44:79:3a:68:3a:20:04:7e:
         23:f4:1d:05:44:ce:55:e3:95:46:fe:7a:e3:ba:08:db:ae:07:
         6f:f8:24:66:9b:26:be:d4:58:2e:ef:96:90:cd:d2:0b:8b:09:
         76:ba:84:6a:90:f3:2a:6c:d1:b4:4f:f0:0b:02:e0:2d:1a:70:
         d8:f8:5f:60:29:42:d1:9c:71:c2:45:76:53:a7:e1:d9:9a:2e:
         65:55:6b:9b:76:10:5f:ee:5a:c9:f9:42:d1:aa:3a:53:03:29:
         7a:8e:40:b2:cb:90:fc:06:f7:af:38:39:d6:1d:9a:82:5e:cf:
         cb:11:bf:e7:bc:c9:a9:b4:f9:17:1a:4a:0e:0d:73:3c:c4:c4:
         c5:f7:9c:f6:fe:59:b3:4b:db:80:19:4d:c9:9d:47:18:2c:1b:
         9f:44:8f:5e:28:fb:83:8b:7a:19:0e:65:3b:08:e7:ad:6d:a7:
         39:00:6d:ef:b6:cb:fa:83:c2:d5:41:7f:bd:d7:0d:0f:56:aa:
         80:a7:38:5d:a1:4b:95:4b:29:e6:6a:a6:5d:84:17:c7:ed:67:
         10:0d:80:f0:0c:85:a6:ab:c3:5b:ab:ed:eb:4f:a6:76:12:cf:
         a6:19:d8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:56:44 2025 by rpki-client