Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
File:                     DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft (raw, json)
Hash identifier:          DmgHufnN6QuaVfusoLOi4K+FKECkmygGGkDASRUKNzg=
Subject key identifier:   FC:B3:03:26:B5:63:D2:8E:14:17:FB:EF:46:1D:79:6B:96:CA:34:BD
Authority key identifier: 0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
Certificate issuer:       /CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Certificate serial:       0197B6A23F74F00D44B5D8060B5706AA87A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
Manifest number:          087C
Signing time:             Sat 28 Jun 2025 13:02:55 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:55 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:55 +0000
Files and hashes:         1: DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl (hash: Ejz7gcspYy1y9JyYMgKTDoeKFRZCTfla0tLzo/tgPx4=)
                          2: RmJWhAxRco_E7xVjUFT03f6Xzf4.roa (hash: fQ9hdhF3VEd9Q8e/aZRy085yRuISqh5rUOV7wWDjEP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:3f:74:f0:0d:44:b5:d8:06:0b:57:06:aa:87:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d026a518947dd5bd3981ed0669c11c5621d0475
        Validity
            Not Before: Jun 28 13:02:55 2025 GMT
            Not After : Jun 29 13:02:55 2025 GMT
        Subject: CN=fcb30326b563d28e1417fbef461d796b96ca34bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:22:6b:25:1a:06:f4:29:fd:89:10:43:d0:82:
                    21:a0:e4:17:56:37:2f:0a:22:80:ae:12:ad:a8:f6:
                    eb:e6:65:c2:24:94:13:df:df:91:be:77:0e:30:18:
                    8d:ac:0a:11:ec:86:94:ba:0a:96:88:96:21:48:72:
                    06:78:3e:f3:3e:83:11:3b:23:47:52:fa:23:cb:55:
                    b4:00:2c:4b:d2:db:4e:0a:77:3e:92:1e:23:82:a9:
                    ca:8b:85:46:35:08:19:a0:83:84:93:d6:fe:c3:17:
                    6a:24:59:46:49:69:1c:27:c3:15:f6:fb:e4:5e:5f:
                    ca:9a:28:b8:e3:ba:d2:01:08:fc:62:23:9b:42:11:
                    78:fe:29:fc:c0:62:6e:b7:67:02:c6:8b:c1:20:fd:
                    31:d2:15:f3:fe:a6:99:b9:d3:0f:cb:17:e4:a5:91:
                    a3:d3:de:40:32:b5:89:73:57:ef:64:4d:86:72:95:
                    8b:9d:dc:7b:0d:13:af:45:21:c1:b0:af:64:bc:37:
                    83:c3:21:65:81:2a:77:eb:b3:26:57:50:59:69:a2:
                    80:8b:fb:2b:d6:99:40:0a:1e:4c:9f:ef:fa:c8:cf:
                    78:1d:7f:33:30:e7:21:56:ab:0c:89:e5:a3:72:91:
                    45:a1:c5:76:6b:f2:e1:c1:d8:46:e6:2e:2e:84:66:
                    81:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B3:03:26:B5:63:D2:8E:14:17:FB:EF:46:1D:79:6B:96:CA:34:BD
            X509v3 Authority Key Identifier:
                keyid:0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:bf:40:05:78:e7:30:00:a4:d3:f6:ec:18:7f:30:77:8a:14:
         60:61:ff:84:fe:8e:86:87:0a:fe:7c:2e:e2:9d:fc:cf:14:d4:
         33:39:57:ef:3b:16:23:35:81:78:1f:21:85:0c:1e:e9:1d:b6:
         0f:a4:83:b1:1c:d9:f2:b1:bb:60:dd:e6:c5:70:8a:67:f7:da:
         74:89:a4:17:59:1f:2e:a9:4c:fd:5e:a0:21:fd:5c:6d:9a:64:
         cc:54:4e:a4:a3:d5:14:94:3a:0b:08:ef:da:13:ad:82:c3:c9:
         9b:5a:95:5f:67:45:e1:43:36:43:b1:c1:80:cc:1c:f1:e4:ee:
         f0:0a:34:48:c6:90:bb:7e:f3:bf:5d:59:26:97:79:7f:d5:ca:
         b4:35:6c:64:8a:79:4f:39:04:de:b9:62:78:57:9f:6c:6c:0c:
         e2:6e:20:ee:8a:13:f0:3e:53:a8:37:2d:d3:80:b6:b9:4b:4c:
         ff:db:bc:a5:7f:73:b3:cd:cc:73:18:4f:3a:fd:b3:38:db:b4:
         bd:94:0c:41:a6:be:68:8e:e9:ee:73:cd:c2:5a:ed:6a:22:d1:
         ad:a9:79:40:89:8c:c3:e4:3d:cf:91:42:17:83:7f:b3:e7:54:
         d3:a5:6b:b2:74:2e:ec:b9:94:a7:06:37:6a:ea:ea:70:7a:36:
         52:f7:03:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:51 2025 by rpki-client