Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft
File:                     dmAUOBTDTSksdavNtF-BgZU07cE.mft (raw, json)
Hash identifier:          d2mv3RvQnX+CmaP3gY0G4y/kzXC+gmPmjNJquKSwRBU=
Subject key identifier:   F0:9A:27:89:7C:88:29:B1:C5:DE:B0:C1:CF:FC:A3:3F:FB:E7:D1:B9
Authority key identifier: 76:60:14:38:14:C3:4D:29:2C:75:AB:CD:B4:5F:81:81:95:34:ED:C1
Certificate issuer:       /CN=7660143814c34d292c75abcdb45f81819534edc1
Certificate serial:       0197BA7E02608BC6F2695E6D8865D5E3D41D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dmAUOBTDTSksdavNtF-BgZU07cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft
Manifest number:          15B7
Signing time:             Sun 29 Jun 2025 07:01:49 +0000
Manifest this update:     Sun 29 Jun 2025 07:01:49 +0000
Manifest next update:     Mon 30 Jun 2025 07:01:49 +0000
Files and hashes:         1: dmAUOBTDTSksdavNtF-BgZU07cE.crl (hash: ewVwop3X4NrDGsjGw2tmF59AqpJ/l75ajQXo+o7QOV0=)
                          2: zAtYgiSv3lzLdQ7BBPQ53TQsCu4.roa (hash: oWvGPGIfuR7zXnkTrpVSOOMAOW1y+zKMrxGu/T9zook=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dmAUOBTDTSksdavNtF-BgZU07cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 07:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:7e:02:60:8b:c6:f2:69:5e:6d:88:65:d5:e3:d4:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7660143814c34d292c75abcdb45f81819534edc1
        Validity
            Not Before: Jun 29 07:01:49 2025 GMT
            Not After : Jun 30 07:01:49 2025 GMT
        Subject: CN=f09a27897c8829b1c5deb0c1cffca33ffbe7d1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1f:c0:64:2f:48:1e:0f:93:06:da:b5:b4:b6:
                    67:f6:c6:f9:65:e1:ca:45:33:94:9f:1a:fc:e6:3b:
                    47:2c:74:7d:77:1e:24:3d:e4:f1:ab:c9:7a:e3:42:
                    09:12:36:4e:b7:bb:a9:fb:e6:d5:bc:9f:1c:3e:20:
                    0e:58:83:7f:09:64:32:ff:a1:38:da:be:9b:d9:e3:
                    3a:6d:dc:87:f3:05:6f:dd:cb:44:f8:43:da:40:8f:
                    1d:50:0c:3c:d3:3d:b1:01:a3:a9:9b:39:66:6a:e9:
                    05:35:d3:8a:0c:53:35:25:e8:9b:de:64:8e:1b:ec:
                    b3:90:49:dd:64:51:82:05:e9:a8:16:57:3d:fb:f8:
                    ff:9e:96:9d:eb:3b:cf:cd:00:b9:c5:eb:4b:25:0e:
                    c4:c9:a3:9d:11:28:62:6c:e0:5c:5d:5f:29:4f:eb:
                    11:bd:13:7e:51:1e:7c:7b:db:14:a7:e8:a6:f3:3d:
                    56:55:ed:0c:70:a2:e3:72:b4:c0:ba:2e:ed:d8:2f:
                    7d:68:6e:e2:ea:9e:6c:db:6f:f6:26:c1:cd:f5:2b:
                    2c:7b:84:5d:33:bc:ab:87:fc:04:51:96:54:2a:7d:
                    8a:63:db:fd:8e:98:c0:b4:89:3c:a1:53:ae:cd:14:
                    2b:e9:0a:6d:f0:06:60:79:81:73:d9:e4:f0:d9:20:
                    9a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9A:27:89:7C:88:29:B1:C5:DE:B0:C1:CF:FC:A3:3F:FB:E7:D1:B9
            X509v3 Authority Key Identifier:
                keyid:76:60:14:38:14:C3:4D:29:2C:75:AB:CD:B4:5F:81:81:95:34:ED:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmAUOBTDTSksdavNtF-BgZU07cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f1:c2:b5:f0:a1:d4:7e:99:bb:44:8d:59:6e:bb:aa:8d:6a:
         46:09:c1:27:ea:a9:84:71:9e:da:fc:63:84:33:1d:9e:18:4a:
         8f:d2:84:7a:05:bb:5e:32:e9:36:b5:2e:fb:1a:14:3a:7f:58:
         ca:82:57:26:16:11:1f:ec:b2:40:b1:09:0f:77:ca:8e:a2:5e:
         bc:22:f7:53:ca:b4:97:2e:03:56:6b:40:63:d2:ad:3b:1f:dd:
         db:26:fd:c7:b2:63:c7:8e:01:08:79:b0:b3:17:d3:45:1b:b9:
         c6:ba:03:e3:57:a7:00:94:3e:f6:19:e0:ee:7d:ee:d1:bc:7e:
         46:91:42:c1:93:43:fa:6d:1c:b2:ea:9b:31:22:40:4e:ae:71:
         07:8a:b7:5d:0c:6d:ef:42:c4:29:40:ad:79:f1:d8:0a:d9:1c:
         b2:ab:be:3e:41:8e:83:54:e2:d2:3e:08:b0:b3:a6:ca:fb:3e:
         24:13:7c:0c:85:82:46:84:dc:f7:8c:0d:fe:c0:f9:4e:3e:ce:
         07:92:e0:51:ca:1b:61:b4:70:20:fe:0b:f3:8c:08:18:22:bc:
         9c:75:b5:6e:a6:ed:3f:92:ef:b9:6c:39:95:4c:c0:63:fc:f7:
         cd:db:ae:aa:57:b1:b0:ef:99:d9:49:9c:82:76:d3:d5:20:8c:
         18:ad:cf:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:48:37 2025 by rpki-client