Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
File:                     MryjKc1OJWX_DRPoNVpuxMwXlOE.mft (raw, json)
Hash identifier:          jFeChljaAIWyOkXHK52zw11EVNJLnYEyJPpUYx5e2Yw=
Subject key identifier:   22:F4:B4:69:C7:1E:81:98:A9:F1:D9:61:24:63:48:4C:B6:B3:34:D9
Authority key identifier: 32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1
Certificate issuer:       /CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
Certificate serial:       0197B6A19D37F09C3851AF0DE9F9199D518D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
Manifest number:          0C68
Signing time:             Sat 28 Jun 2025 13:02:14 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:14 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:14 +0000
Files and hashes:         1: EY9B7xHMl-Tku1EaPiHTMSJd4UY.roa (hash: fngf8eQs7Bwu0pM4j6i0WPj4gj/7hDrn6NltGJxnSqw=)
                          2: MryjKc1OJWX_DRPoNVpuxMwXlOE.crl (hash: xe9uDd0vSVaa3YxB0SnHiKzl7J/eEf1X1NNSMgyhijQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:9d:37:f0:9c:38:51:af:0d:e9:f9:19:9d:51:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
        Validity
            Not Before: Jun 28 13:02:14 2025 GMT
            Not After : Jun 29 13:02:14 2025 GMT
        Subject: CN=22f4b469c71e8198a9f1d9612463484cb6b334d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5f:30:06:ae:cf:db:c3:5a:8f:0f:6d:70:34:
                    01:f9:ba:6e:5f:41:8d:3a:eb:a5:38:29:e9:4f:52:
                    4f:4a:42:e7:f7:a2:ec:9a:a1:fc:56:03:6f:a9:82:
                    b3:a7:c1:13:27:22:c3:10:49:90:5b:35:b2:a0:6e:
                    ec:d0:41:90:af:b8:e8:b8:30:cf:55:b9:5d:04:0d:
                    18:c9:12:f5:12:14:7c:3c:53:b1:24:11:b8:7b:56:
                    28:9f:a2:7e:dc:16:50:a0:59:74:2e:da:10:02:ed:
                    88:0c:73:65:31:42:62:f6:f5:ab:c8:4d:92:dc:9c:
                    3d:66:08:21:56:e6:cb:2c:b2:8b:46:4f:db:4a:53:
                    9a:4d:5a:17:89:1c:c0:0e:5a:a2:4e:21:9d:12:cc:
                    db:9c:0d:07:93:e5:0c:de:58:24:84:3b:7e:c9:67:
                    b3:a3:cb:a2:a5:f2:fe:c4:eb:09:00:40:f2:ef:9d:
                    06:01:da:3f:f9:4e:58:3c:f4:fe:77:6e:07:9f:b9:
                    ff:0f:e5:67:c4:c9:c3:12:18:81:32:a2:f8:e1:dd:
                    fa:d2:69:54:14:ba:f8:23:eb:ac:9f:41:a4:9f:50:
                    24:73:47:fe:38:52:9f:47:96:e3:99:73:1c:70:7b:
                    cb:e8:cc:03:75:be:9d:e6:46:b0:bb:13:76:f7:6f:
                    4c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F4:B4:69:C7:1E:81:98:A9:F1:D9:61:24:63:48:4C:B6:B3:34:D9
            X509v3 Authority Key Identifier:
                keyid:32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:e1:83:d8:a5:e9:06:51:b6:84:3f:26:8a:fd:d1:93:8a:72:
         ef:cc:cc:e3:b6:cb:c2:27:70:d9:53:9d:ec:c9:8d:24:b3:4b:
         2d:07:5b:ee:40:17:70:57:69:5c:48:70:35:55:74:f9:22:0f:
         10:aa:b3:c0:9f:13:2d:39:2c:4e:c4:b6:84:4d:84:41:fa:e1:
         8f:c8:74:77:fe:a6:f9:89:74:6f:00:27:3a:c2:b4:60:5e:2b:
         61:e2:4b:69:f1:ba:db:11:15:73:85:0a:99:07:10:3e:a3:ca:
         13:a8:98:aa:eb:c3:1b:f3:35:2e:4b:e6:9b:b8:c5:96:41:69:
         2a:77:c7:6d:06:90:2b:28:e4:9e:53:e6:dd:83:cd:80:03:1b:
         82:69:69:ea:e0:7c:3e:40:6e:b0:d4:f7:ac:99:a5:78:5c:ce:
         df:72:d6:a5:da:73:9f:e9:4e:b9:ad:29:bd:9e:f5:a0:13:40:
         26:4f:f5:da:6c:79:c1:a0:9f:47:94:b5:e5:e5:4a:18:55:a8:
         82:bd:73:b2:5b:95:40:6a:e3:87:82:17:dc:96:a1:ce:cd:58:
         6b:30:44:4c:54:23:a5:7c:69:8e:3e:63:88:9c:4d:47:0c:a0:
         dc:ca:3f:39:30:4e:51:0a:02:33:2b:3b:8d:c4:05:56:8e:24:
         eb:20:dd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:12 2025 by rpki-client