Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
File:                     cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft (raw, json)
Hash identifier:          r0agrc6k7NWX6pV7Sou5NbaVFgiS+O/UVfhr1CVu6aA=
Subject key identifier:   0D:08:01:57:14:25:00:6F:83:C0:F3:C2:01:9F:6A:60:2E:04:45:4A
Authority key identifier: 71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
Certificate issuer:       /CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Certificate serial:       0197B7B363F33E1D7D1C6A46D25C4A532340
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
Manifest number:          0E3C
Signing time:             Sat 28 Jun 2025 18:01:16 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:16 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:16 +0000
Files and hashes:         1: Y4BycvpgIPFrj5lhsii_AUvYAWw.roa (hash: brKO8LRrExe011Bv/UP5eEIq/IhdQ+O1vYEiLB6elCE=)
                          2: cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl (hash: 3rMKb8GeIJxyXiPWW9lbsVXVf1am8he3bMRr8wYCP6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:63:f3:3e:1d:7d:1c:6a:46:d2:5c:4a:53:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
        Validity
            Not Before: Jun 28 18:01:16 2025 GMT
            Not After : Jun 29 18:01:16 2025 GMT
        Subject: CN=0d0801571425006f83c0f3c2019f6a602e04454a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:84:0f:96:d5:e3:d1:05:99:02:55:c8:f2:ef:
                    2d:55:ae:1e:02:07:1a:ee:3b:2a:21:fa:20:03:c4:
                    b7:59:6e:d0:d1:fa:26:eb:0d:23:09:a5:69:16:d9:
                    5f:07:de:d1:39:e4:1c:eb:06:ea:5e:b1:ea:2b:04:
                    bf:a7:3d:ac:fb:ff:89:5d:67:09:50:29:67:ed:6f:
                    08:41:40:44:14:8a:c4:68:09:78:12:78:58:1c:f6:
                    cd:a2:28:8c:95:18:5e:f4:71:80:f3:5f:32:8b:d7:
                    d7:a6:65:7c:23:fe:8d:cf:b3:9c:4b:58:1d:dd:da:
                    bb:8b:d8:4a:0f:eb:15:95:b5:1e:8d:96:90:fa:dc:
                    53:9e:ee:0d:72:29:fc:e3:4f:d4:9b:aa:6a:ba:76:
                    17:e2:20:46:5f:92:99:7b:ff:af:d0:92:cd:c9:16:
                    d6:b3:01:c1:ac:bd:6a:d4:a4:b1:47:c4:bc:a6:f1:
                    53:58:81:06:7e:75:ad:e6:6d:01:06:86:bf:aa:82:
                    46:bc:db:ad:0f:dd:ca:3c:7f:d9:5d:3d:c6:5a:40:
                    70:fa:ba:9c:c7:48:b7:d5:f7:fc:d3:b0:c3:17:cd:
                    c9:ed:86:dd:5d:ac:b0:82:70:dd:d7:62:fe:d5:00:
                    9e:94:d4:3b:29:6d:ba:22:1a:0e:3a:3c:7e:05:2b:
                    e3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:08:01:57:14:25:00:6F:83:C0:F3:C2:01:9F:6A:60:2E:04:45:4A
            X509v3 Authority Key Identifier:
                keyid:71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:15:4d:86:c8:5a:71:b7:ef:0b:0b:a9:24:46:4b:00:92:54:
         6f:d6:ec:e7:8c:25:02:81:60:58:84:53:c7:34:ea:12:50:32:
         2f:23:db:3d:8e:48:f8:91:96:a1:a1:72:51:16:cb:3f:b6:d1:
         24:2d:ac:2f:bf:a1:33:84:08:bf:f4:46:5d:0f:cf:c7:05:d7:
         77:36:94:26:92:fc:86:59:2e:59:73:98:1d:ff:1b:af:04:04:
         dd:80:8e:d6:ff:4c:29:62:c5:9e:30:3e:e3:0f:e9:ee:33:56:
         2a:00:c2:fa:9d:c8:6f:10:72:4c:1e:df:58:7c:87:17:9b:5a:
         f1:15:0b:1f:9d:78:d1:6c:27:14:b8:2c:62:06:c4:80:bf:ca:
         09:fe:39:5c:06:86:56:6a:30:8a:f2:b3:b7:a6:90:bd:1a:45:
         91:4d:c8:5c:7f:29:e7:34:f1:d1:ae:ce:1f:8b:af:62:2d:86:
         aa:3b:91:79:81:c4:08:b6:6a:28:12:0d:35:2c:ac:de:3a:90:
         c8:49:de:fc:c7:d3:4a:bc:e4:26:9a:57:f9:dc:3e:c0:d1:7e:
         e4:ed:82:83:e7:15:b9:d7:4e:24:8d:09:ea:4a:2f:e1:75:a8:
         48:59:8e:14:fd:67:31:6a:f6:48:e2:57:d4:83:f0:06:fa:fe:
         9d:00:e0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:37 2025 by rpki-client