Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
File:                     O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft (raw, json)
Hash identifier:          Nb6jP0j84w61PgfmqVpLLqb7ohohf4UeRNLM18FLBd4=
Subject key identifier:   26:74:E9:21:D1:BA:F4:5C:73:4C:AB:83:12:4A:76:6F:6C:97:CC:4B
Authority key identifier: 3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
Certificate issuer:       /CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Certificate serial:       0197B6327DE668C447FB390F4B3287028664
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
Manifest number:          0E85
Signing time:             Sat 28 Jun 2025 11:00:51 +0000
Manifest this update:     Sat 28 Jun 2025 11:00:51 +0000
Manifest next update:     Sun 29 Jun 2025 11:00:51 +0000
Files and hashes:         1: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl (hash: 3QBlin7+zVuTDdrAF0PqJf1pJoISx0cvQxxOQU6Ik8c=)
                          2: gXpN4Jzwwckj47SB6dPDzkGMcGo.roa (hash: cU0OZZjL1jwr+A4jdiw86+QpPrFnf2WcAbgpLCZiW4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 11:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:7d:e6:68:c4:47:fb:39:0f:4b:32:87:02:86:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
        Validity
            Not Before: Jun 28 11:00:51 2025 GMT
            Not After : Jun 29 11:00:51 2025 GMT
        Subject: CN=2674e921d1baf45c734cab83124a766f6c97cc4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5b:7d:6a:f3:3a:98:be:84:78:7e:26:cb:b8:
                    56:da:5f:18:15:74:8d:a2:c3:4e:cd:1f:d2:5d:bd:
                    2b:45:d9:0b:06:41:05:7f:ff:dd:53:26:ec:7b:ba:
                    c8:5a:d8:c5:3a:f1:bc:11:14:bf:d2:62:85:67:d1:
                    23:d7:2a:f6:01:7b:25:64:12:e4:0b:7f:51:0a:02:
                    72:c0:1b:e0:80:23:d3:20:d1:69:2e:5f:98:ab:ef:
                    4f:6e:da:86:c4:a4:00:c2:0b:c0:57:2c:b5:bf:c1:
                    db:35:2d:50:5b:3f:66:ed:03:51:49:ea:ee:3d:96:
                    c0:54:af:7d:c3:31:af:cd:72:d8:cc:86:7a:e3:b7:
                    c0:a6:e4:96:a6:7c:bf:7e:f7:56:92:78:33:bb:3a:
                    a4:58:10:82:87:68:5b:d9:95:7a:0f:60:ba:9b:9a:
                    2f:f2:21:70:84:f9:a6:27:1e:5c:69:ca:43:68:9e:
                    9f:30:a0:4e:c1:a4:b3:99:44:58:e1:39:b7:12:9b:
                    56:96:ca:fc:93:dd:5e:13:29:27:9a:a7:cf:ac:50:
                    f1:b0:48:26:16:5c:98:e2:f7:1d:4c:8b:32:3d:5b:
                    dc:68:0e:8e:db:1a:01:f0:bb:97:18:4e:35:2f:c1:
                    65:87:23:db:e3:bf:25:3d:8f:52:e2:5e:bd:b4:c4:
                    12:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:74:E9:21:D1:BA:F4:5C:73:4C:AB:83:12:4A:76:6F:6C:97:CC:4B
            X509v3 Authority Key Identifier:
                keyid:3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:2e:fb:d3:12:75:ec:8f:01:ff:e9:d4:70:40:5f:81:5e:cf:
         85:4c:8e:80:7f:36:67:b1:65:1c:37:ef:4c:31:2c:d8:66:39:
         56:a5:b8:21:e3:f9:20:c9:f3:46:e8:94:f9:88:6f:dd:50:e3:
         8e:35:b5:7c:fe:c7:98:95:99:dc:52:cf:81:84:3b:a8:28:18:
         d5:f9:9f:74:35:bf:51:f4:17:fb:57:ba:c8:03:b3:b8:02:c1:
         49:3e:04:43:60:d6:03:e2:c1:12:50:45:92:cc:30:ed:8a:4b:
         5d:fd:9a:46:40:3a:b7:af:a6:b8:69:da:82:90:d9:db:7b:f9:
         3f:95:79:3d:a7:fb:f4:e9:6c:17:cd:43:0c:0c:3d:a7:ca:b7:
         fd:d3:fc:88:c0:d8:ee:07:5c:27:7a:93:d7:a8:78:51:b1:24:
         6a:5a:50:a9:4a:ac:bd:69:ec:3d:6e:e9:01:cc:bb:0e:40:61:
         20:5d:93:87:17:09:45:91:89:e2:b7:79:b7:bc:ca:0e:84:81:
         81:c5:d0:b0:8c:cd:b5:c7:d7:f5:51:ab:67:be:37:ee:fb:75:
         18:2e:e1:3f:16:76:d1:04:96:1f:4e:be:fa:63:1c:af:5a:96:
         a6:92:71:43:b0:65:9c:01:f9:f2:d9:71:e7:2a:29:41:f6:8e:
         e8:2b:af:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:57 2025 by rpki-client