Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
File:                     mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft (raw, json)
Hash identifier:          87K8dPXJ4I7nAUCkneTDaahzJjkE6R2EeIzapy2eqQc=
Subject key identifier:   4C:D2:C6:A3:6B:49:F0:9C:D9:61:A3:96:D9:AA:18:1C:2A:8B:2D:9E
Authority key identifier: 98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92
Certificate issuer:       /CN=985b50a10d2d58c67503eaaa701e510915dd5192
Certificate serial:       0197B70F1CE30967ECA0CA55D344BF9584CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
Manifest number:          0511
Signing time:             Sat 28 Jun 2025 15:01:50 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:50 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:50 +0000
Files and hashes:         1: mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl (hash: kAh4mUEHmO1xGYTWxdCpB3s8PY8h38iUHlJurJOSM3U=)
                          2: yN69dqz--m8dWXCMtbZ1dGzJo1k.roa (hash: pNrNwHsIk6sG4oFCvOY8zkn+qIXflJs47/VLFYzRdxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:1c:e3:09:67:ec:a0:ca:55:d3:44:bf:95:84:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985b50a10d2d58c67503eaaa701e510915dd5192
        Validity
            Not Before: Jun 28 15:01:50 2025 GMT
            Not After : Jun 29 15:01:50 2025 GMT
        Subject: CN=4cd2c6a36b49f09cd961a396d9aa181c2a8b2d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d3:97:f3:31:fb:05:a9:e2:57:a4:bc:ec:3b:
                    f8:7a:57:31:17:e2:f7:08:a3:75:fb:fe:03:74:21:
                    c7:91:fc:a9:8b:e7:03:95:1d:7e:0f:6c:94:57:17:
                    93:2a:ab:e9:65:3e:b1:15:4a:76:77:14:62:01:84:
                    87:fc:41:26:1b:45:cf:d5:4b:f9:da:2e:d8:8e:f9:
                    1a:1a:2f:5c:1b:61:52:91:3e:42:f6:98:4e:67:c2:
                    e2:21:d3:66:06:8e:be:06:04:8b:18:35:6b:6e:76:
                    f1:3b:a2:71:ab:37:18:b9:0b:22:69:35:ec:b9:d4:
                    86:e6:50:66:bc:51:12:a5:ae:b3:af:be:82:f1:7d:
                    3f:38:af:66:eb:19:2e:88:c8:55:99:f0:85:01:f0:
                    e9:f2:59:69:77:03:eb:57:8d:96:01:27:c7:d8:33:
                    e1:3a:23:bd:26:94:c8:bd:78:1a:ed:59:7d:5f:3a:
                    66:ee:55:4a:51:b9:33:e5:50:82:b8:14:6c:f2:00:
                    91:9d:d3:ba:85:e7:bf:2d:8e:06:ea:95:b0:e2:34:
                    65:5a:53:e7:51:fc:5f:e4:78:d5:7e:3a:b7:55:dd:
                    3f:0d:3e:45:84:6b:c8:d8:75:bf:7f:b4:58:aa:80:
                    8d:ec:ce:5e:70:0a:a8:a9:0e:ae:b1:c2:d3:0c:46:
                    2d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D2:C6:A3:6B:49:F0:9C:D9:61:A3:96:D9:AA:18:1C:2A:8B:2D:9E
            X509v3 Authority Key Identifier:
                keyid:98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:2e:98:d9:d8:a5:23:bd:66:b4:d6:4f:ea:dd:8a:ad:5a:1e:
         48:01:bf:02:c5:f4:29:21:b6:0a:7d:cc:24:44:f3:a0:0d:ad:
         d0:31:00:ce:9a:46:bd:fa:5e:9c:19:52:c8:a6:64:4c:9d:3e:
         9c:0d:e8:a0:90:55:8c:2f:f3:e7:a1:02:f7:73:e7:fa:f8:7c:
         f3:36:e0:e9:3e:f9:8c:0e:40:36:d2:9d:59:f0:d9:80:fe:06:
         a2:b9:b4:00:ab:e7:d2:13:e2:e9:cb:31:5d:4a:6a:d1:a0:49:
         ea:ce:32:9b:a9:cd:68:7d:52:a8:6f:6e:1b:a4:9d:0f:b0:94:
         fd:fb:f0:b1:1f:26:4d:12:3f:1a:48:9c:97:35:42:2c:05:b6:
         ce:77:53:7d:80:14:01:95:75:52:e4:77:81:c6:1c:7b:55:c7:
         f8:70:d7:f6:18:fc:0c:80:14:75:78:f5:d5:e6:4b:8c:a0:6c:
         0f:8c:09:28:07:f6:f3:97:00:85:b4:42:ea:23:ce:f1:13:81:
         bc:02:47:76:8f:3d:55:2b:01:18:9d:da:8b:97:ea:b6:8a:ab:
         9b:70:43:11:34:27:78:9f:de:92:44:a2:c4:d2:93:69:b2:69:
         0b:8c:63:af:bc:ad:11:42:fd:e2:ff:54:08:72:fe:34:35:35:
         3d:99:ff:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:35:27 2025 by rpki-client