Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
File:                     fi7aaVKwPoukWZe-YV16vuF4T4M.mft (raw, json)
Hash identifier:          8154a8JfG1Y5T8ZW9Py8uXeozVQDazFh0PunQc9mVCg=
Subject key identifier:   13:07:5C:51:C2:8A:85:05:9B:E6:36:CC:84:82:E2:1E:C7:12:D4:E2
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Certificate issuer:       /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial:       0197B8C6115FAD40D315EB09B6A07C87FD16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
Manifest number:          09DC
Signing time:             Sat 28 Jun 2025 23:01:17 +0000
Manifest this update:     Sat 28 Jun 2025 23:01:17 +0000
Manifest next update:     Sun 29 Jun 2025 23:01:17 +0000
Files and hashes:         1: CIh-n620dapiChf7Qz9UJJ0kAYM.roa (hash: FBemJczTUCPxIUZPk0jDQbmKS7wDmu5CZBeaJ9h/Hsg=)
                          2: fi7aaVKwPoukWZe-YV16vuF4T4M.crl (hash: tmXwavT40Mw5B5VctbeTjBsgkX55xHUOxRcSlwsTTx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:c6:11:5f:ad:40:d3:15:eb:09:b6:a0:7c:87:fd:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
        Validity
            Not Before: Jun 28 23:01:17 2025 GMT
            Not After : Jun 29 23:01:17 2025 GMT
        Subject: CN=13075c51c28a85059be636cc8482e21ec712d4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9b:5e:70:87:ea:71:56:9f:ba:a2:bf:7a:d4:
                    f9:81:a3:d3:9a:4d:58:1c:3a:a9:a8:81:95:15:59:
                    60:4c:9d:98:35:9c:07:b1:49:f1:bc:11:82:76:14:
                    06:9b:19:d0:8b:69:e3:f1:fd:95:b2:e5:3d:4f:e1:
                    5d:7f:4f:8e:4f:51:86:a9:ab:7b:6f:17:71:92:7c:
                    7a:e2:37:f3:c6:30:6d:b3:65:42:04:c4:1f:68:de:
                    ec:e7:b5:3d:eb:b6:30:af:83:f9:87:3a:34:d3:1e:
                    95:5e:56:88:b3:fc:05:0f:3d:cd:e2:a6:4e:50:99:
                    29:a9:f9:e5:b8:6b:a9:d3:f7:77:12:b6:8c:93:27:
                    56:ad:e9:66:3c:a9:28:18:5e:e3:36:25:2e:f6:49:
                    ba:96:81:d7:75:45:17:95:a3:23:e8:f2:fc:85:8c:
                    f3:94:7c:1c:26:22:77:ba:5f:36:37:78:f6:b4:a9:
                    68:e5:43:a0:70:c6:1f:12:5f:66:b6:56:0e:3a:a2:
                    a3:f9:f2:c5:45:44:3f:30:17:bb:df:0e:39:fd:58:
                    74:1e:0d:a0:b6:48:07:91:bd:ce:d9:8b:36:9a:12:
                    98:62:c8:a6:12:13:8d:18:a4:11:d6:21:29:b2:8d:
                    d1:b9:1f:57:13:62:ce:52:98:3a:1f:50:aa:b9:bf:
                    9d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:07:5C:51:C2:8A:85:05:9B:E6:36:CC:84:82:E2:1E:C7:12:D4:E2
            X509v3 Authority Key Identifier:
                keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:be:5d:43:44:c8:14:ea:52:dc:19:8a:b2:18:9f:32:0a:26:
         50:d7:f7:fa:43:57:5a:6e:5a:6b:df:20:31:5c:50:5b:60:21:
         d8:ad:80:b4:5f:06:2d:03:48:fb:71:51:f0:74:96:4a:80:9c:
         45:aa:8d:3d:d6:b9:5f:50:44:eb:04:78:87:ba:81:96:80:56:
         91:d2:1c:79:3e:0d:b0:82:90:89:03:8d:ee:be:5a:b5:77:42:
         af:14:42:74:ef:30:68:ed:77:42:f7:b8:e7:de:3b:18:19:3a:
         c2:45:6a:27:f3:57:93:04:e8:4f:3b:d3:be:15:b9:fe:4b:2c:
         8b:44:ec:6b:bf:b4:dd:0b:2a:e9:90:4d:23:65:87:b7:c2:17:
         be:d9:62:92:a4:fa:5e:e7:8d:cd:bc:73:34:ae:ba:f8:a5:fb:
         ac:8a:ca:8e:0a:81:06:02:67:b4:c0:8a:18:bd:c4:af:11:2d:
         7a:39:7d:45:6b:db:2c:2e:ed:f0:9a:2c:5e:32:ee:51:3f:17:
         75:ca:32:39:63:21:3b:a0:e4:7d:ac:50:e1:5e:6c:73:5d:92:
         c3:24:8a:15:fe:2f:77:8b:73:73:fd:18:19:08:4c:06:59:9e:
         bd:31:19:8e:bc:99:79:82:f7:7f:6a:16:ed:fb:65:2f:35:b3:
         c2:c2:54:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:50:05 2025 by rpki-client