Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
File:                     _ME6qqHk6E6wwly5UOJp_z3bzuA.mft (raw, json)
Hash identifier:          gEK3PEq5bkTqBIMrrF7XBYHlG/LuQuU9ZUjck+AY9F4=
Subject key identifier:   08:9C:63:72:2C:A0:02:6E:60:78:FD:6C:91:B0:23:0E:F6:73:12:C9
Authority key identifier: FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0
Certificate issuer:       /CN=fcc13aaaa1e4e84eb0c25cb950e269ff3ddbcee0
Certificate serial:       0197B70ED03904B5903CF7547748E6EAB016
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
Manifest number:          07B3
Signing time:             Sat 28 Jun 2025 15:01:30 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:30 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:30 +0000
Files and hashes:         1: _ME6qqHk6E6wwly5UOJp_z3bzuA.crl (hash: 6KCTANc9Q8zMKGD3gFQnZFocYLuy8/eLAwtCBfNh0/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:d0:39:04:b5:90:3c:f7:54:77:48:e6:ea:b0:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcc13aaaa1e4e84eb0c25cb950e269ff3ddbcee0
        Validity
            Not Before: Jun 28 15:01:30 2025 GMT
            Not After : Jun 29 15:01:30 2025 GMT
        Subject: CN=089c63722ca0026e6078fd6c91b0230ef67312c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7b:a3:18:e3:c4:1a:ae:85:c6:4d:ea:aa:cf:
                    a2:18:1b:89:9e:c8:e1:1e:98:8f:d9:a6:b0:f1:93:
                    40:1a:95:e9:da:3d:0e:87:e2:c3:3c:2b:ee:df:47:
                    d1:3d:eb:af:4a:86:fe:44:97:3f:2d:ca:2f:43:29:
                    98:32:a5:d0:9a:0c:05:f0:c3:da:7c:9b:cd:39:d5:
                    86:3a:cb:b9:31:57:01:9d:5c:f3:04:67:0e:5c:4c:
                    bc:00:44:df:97:6a:4b:d5:18:41:d8:4f:55:fb:f1:
                    30:6e:6d:ea:91:f2:97:a6:92:ee:18:7f:4e:a7:e8:
                    b2:ed:92:b4:8c:b8:05:06:9b:a5:5c:03:01:60:ed:
                    d2:c8:ce:ee:be:b4:42:86:93:9f:fa:e0:2a:ab:0f:
                    7f:e9:1a:cd:13:2f:c2:c5:8d:8c:38:ef:6e:47:63:
                    74:b1:35:24:6c:75:96:7e:2b:4b:ad:54:f6:3e:1f:
                    37:61:bd:ea:57:12:69:b2:4a:e7:da:a9:0f:7b:19:
                    21:30:5e:56:d1:7e:ff:ee:d5:89:f1:0e:a2:33:6f:
                    7c:ab:69:7a:18:78:8d:4b:dd:7f:84:3d:e7:7a:4f:
                    c3:61:da:c3:02:9c:0c:da:da:e8:b6:c8:bc:1a:68:
                    f1:07:be:01:35:2b:b1:be:51:0f:47:96:41:3a:86:
                    7b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9C:63:72:2C:A0:02:6E:60:78:FD:6C:91:B0:23:0E:F6:73:12:C9
            X509v3 Authority Key Identifier:
                keyid:FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:67:5a:0e:01:76:72:ab:5d:cd:d9:66:8f:67:5f:c0:31:cf:
         17:0e:80:91:06:bf:ef:3d:b3:d6:97:f1:b1:3d:02:5f:7c:f9:
         c5:85:f6:16:9a:8a:b3:27:55:61:19:26:54:47:a7:bc:28:b1:
         b4:70:e2:e6:fc:ea:6c:91:ea:d6:8d:a6:fd:f7:82:61:f8:10:
         cf:dc:11:dd:f5:07:8e:61:ae:51:45:3d:a7:c5:c2:3d:31:2b:
         c6:d9:df:e1:dd:9c:6a:90:9b:fc:2a:3b:4c:d3:0c:58:ea:79:
         6f:93:a3:95:f4:f8:f2:8b:39:c0:7c:32:9a:5e:a2:ec:7b:88:
         b2:13:d1:1e:57:9e:91:90:de:e5:29:70:32:2b:d8:ca:2e:c5:
         94:ad:34:06:18:26:6e:77:5f:1b:58:8d:fc:54:ce:d2:13:f5:
         3a:c5:0e:09:8f:f5:72:a3:bb:df:26:85:6a:bb:66:4e:78:fb:
         ea:69:a2:a1:a2:4a:19:f5:90:cf:25:cb:f7:24:68:1b:16:5b:
         95:43:8a:eb:5b:65:05:16:c9:89:42:eb:e6:8c:d5:fd:37:e9:
         70:c4:97:48:b5:e3:a6:56:29:8e:1c:38:70:04:f0:bb:b6:da:
         a8:1d:15:3a:2d:e9:8f:df:65:eb:85:98:27:16:06:1d:38:53:
         0b:f1:33:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:27 2025 by rpki-client