Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
File:                     05aWp2gOlVKR_q-h77qfvP8viIs.mft (raw, json)
Hash identifier:          iKyBaSkjVeVAEmIwTJGKpgy4gyYEEXXqZQQ4IXWKsJM=
Subject key identifier:   D7:FD:46:49:31:96:B6:0B:35:88:AE:A0:D6:A7:C3:DE:B0:E1:BD:9C
Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
Certificate issuer:       /CN=d39696a7680e955291feafa1efba9fbcff2f888b
Certificate serial:       0197B88F268C5210987577972FCABA5F0422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
Manifest number:          10A7
Signing time:             Sat 28 Jun 2025 22:01:18 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:18 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:18 +0000
Files and hashes:         1: 05aWp2gOlVKR_q-h77qfvP8viIs.crl (hash: gk5esbUBGQ6cQnxHUiaT9abqbWYIG2atfHiC9cbDePU=)
                          2: rB2INOwVRpDLnI62nHFRLMGjim8.roa (hash: 4e9dGvThW6tLmtEOnyeNLHSG2RRsUkaY7l6l90Sl8lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:26:8c:52:10:98:75:77:97:2f:ca:ba:5f:04:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b
        Validity
            Not Before: Jun 28 22:01:18 2025 GMT
            Not After : Jun 29 22:01:18 2025 GMT
        Subject: CN=d7fd46493196b60b3588aea0d6a7c3deb0e1bd9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bc:29:8e:9a:9f:ab:c9:4c:81:f6:ef:67:ce:
                    18:0f:fe:ec:65:df:02:5a:69:98:00:ba:cb:25:74:
                    8c:5c:e8:08:eb:80:e8:14:a7:b7:16:63:7d:cf:4c:
                    9d:a2:c8:78:7b:7a:2d:19:8e:13:81:3c:75:a9:ba:
                    08:c1:a7:3e:7b:c7:c3:f9:85:4e:ab:04:aa:c1:0c:
                    3d:95:cf:d4:c0:e6:c9:eb:e4:20:c3:ca:9b:52:b4:
                    de:bc:64:0c:21:fd:40:02:7c:0c:9d:c2:85:bf:c2:
                    eb:59:65:6d:76:7c:b7:fe:83:40:64:e7:75:71:04:
                    77:59:08:5d:70:0b:0c:38:bf:6b:ef:ed:99:91:96:
                    cb:4b:63:68:5a:03:71:e6:7f:8b:33:0e:7e:ee:a6:
                    a1:ea:0c:ac:5a:b1:79:fb:5d:6c:ad:22:4d:ed:53:
                    b3:5f:29:3e:d1:6f:94:07:27:29:ac:3e:2f:2c:b8:
                    14:d1:ff:24:d3:7d:d4:d2:69:30:54:51:dc:70:e5:
                    b4:e5:58:fd:3b:3b:aa:4b:f4:76:86:c9:4d:74:87:
                    b5:ce:a5:58:b4:13:8b:e2:7b:e6:50:08:78:ff:06:
                    10:48:23:a8:ce:9b:6c:46:1f:f0:b0:de:54:42:9b:
                    7f:ce:ae:ce:dc:76:44:30:0c:1e:11:6e:81:48:a1:
                    bb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FD:46:49:31:96:B6:0B:35:88:AE:A0:D6:A7:C3:DE:B0:E1:BD:9C
            X509v3 Authority Key Identifier:
                keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:cf:af:0f:65:fa:65:bd:55:99:5f:9d:67:59:98:80:bf:88:
         09:54:15:d0:65:a4:39:4d:d3:83:9a:3c:a3:28:5c:ee:61:32:
         94:41:bb:ca:83:32:74:6b:cd:60:d6:a1:75:89:55:00:23:c2:
         24:f1:3c:63:78:94:9a:a7:6f:af:44:48:34:f1:96:b5:5c:ad:
         18:21:cc:ee:37:45:ed:45:5a:d7:1e:0e:78:59:ee:ad:51:ec:
         2b:4c:d2:fa:f4:fd:75:ba:2f:43:a2:40:dc:ec:78:d7:e3:31:
         2c:d5:8a:d7:d6:f7:39:93:62:4e:b9:5c:ee:c3:b7:1a:61:db:
         9a:1a:3a:b1:a2:12:f5:74:f4:30:0b:2b:bc:2f:0f:27:60:54:
         89:61:84:c4:46:19:f4:28:44:2d:e4:6a:b6:97:61:95:63:3c:
         fb:2e:99:b5:23:53:1f:f5:fe:76:31:e3:dc:19:49:d7:4e:7f:
         77:c8:2e:0d:6a:79:d1:4a:1f:78:8a:fd:49:78:da:f8:1c:9e:
         f6:f3:45:76:3d:85:02:d9:7d:ba:22:a1:53:2d:91:60:7f:07:
         9c:b2:9b:23:6f:82:30:1e:e4:44:0c:ab:dd:f6:6e:f9:71:4e:
         61:db:d7:75:72:24:bf:8f:68:2c:7c:25:d0:8c:cc:72:b6:72:
         23:cc:52:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:17:22 2025 by rpki-client