Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
File:                     fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft (raw, json)
Hash identifier:          19H8eoJw8yRqMep/EJwVuxK/iH0u8DkK93NWqCEVLxI=
Subject key identifier:   64:34:F5:88:43:BA:76:95:29:96:EC:36:FD:84:C9:69:03:F3:23:F4
Authority key identifier: 7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05
Certificate issuer:       /CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
Certificate serial:       0197B96B1A4261CE906CD7F2B3167F43392C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
Manifest number:          090D
Signing time:             Sun 29 Jun 2025 02:01:33 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:33 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:33 +0000
Files and hashes:         1: fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl (hash: vnEia74tiGEE5SiIqn4VQ4SB9R42kl6inQ4uu8K11II=)
                          2: mC5LwElUmLRuYfhtRytHc9ZpqR0.roa (hash: ThX2BNk8xeMGUBx8nMXao6T14FMQBl6CvbjOYDIbLcQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 02:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6b:1a:42:61:ce:90:6c:d7:f2:b3:16:7f:43:39:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
        Validity
            Not Before: Jun 29 02:01:33 2025 GMT
            Not After : Jun 30 02:01:33 2025 GMT
        Subject: CN=6434f58843ba76952996ec36fd84c96903f323f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:ac:c2:08:4a:da:68:b0:ad:be:65:9a:ad:
                    21:9e:16:93:ae:b4:62:89:a3:46:9c:74:30:dd:ba:
                    52:32:9b:89:7f:83:94:63:6f:c7:28:31:dc:3a:c4:
                    45:e7:aa:4e:d9:71:85:31:40:dd:21:72:f1:87:64:
                    3e:85:04:57:f5:54:10:8a:78:fe:c3:20:d1:6d:37:
                    41:3c:ff:57:b1:e3:82:12:4e:58:81:97:e6:ca:1b:
                    01:f1:39:89:27:11:4c:0e:3a:eb:cf:ef:f1:b2:59:
                    b6:4d:10:f0:a8:6f:a8:3b:6d:68:76:33:6f:84:d5:
                    28:bb:e7:dc:10:cd:02:d7:37:11:08:ef:14:bf:c7:
                    ea:ee:16:3e:21:0f:d2:5a:e8:3c:ce:64:d1:61:e9:
                    f8:7c:d7:e4:ba:e1:67:6c:c2:47:3c:1b:9c:e4:04:
                    9f:7f:48:7b:6c:fa:09:17:4f:87:c8:6c:b5:fa:0f:
                    68:7e:08:48:c1:a1:d7:56:95:3b:9a:ed:85:f9:1b:
                    3d:cf:4b:21:83:ef:52:af:f2:15:71:47:28:1d:a1:
                    60:0a:e4:71:db:bf:49:60:21:2e:03:ed:e6:ca:19:
                    30:29:72:93:32:26:6a:74:5a:17:2e:55:6e:31:46:
                    0d:fd:12:97:0c:f2:96:03:57:99:e7:80:e9:85:2d:
                    2c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:34:F5:88:43:BA:76:95:29:96:EC:36:FD:84:C9:69:03:F3:23:F4
            X509v3 Authority Key Identifier:
                keyid:7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:24:35:1a:ba:99:8d:3f:a5:63:8e:00:ba:e5:85:76:63:69:
         6c:93:f8:c5:5b:19:78:76:a5:fc:f2:b5:6b:6f:90:f5:82:98:
         cb:2d:b9:3d:cf:28:db:50:c0:6d:60:e5:f8:43:0c:48:10:e7:
         cc:f1:67:41:ef:6d:01:80:87:0a:a2:bc:d7:e4:5f:52:ac:bf:
         03:7b:59:b2:2e:49:80:64:07:eb:18:d0:f9:6a:7d:7f:01:c0:
         b4:9c:24:75:4b:bf:fd:0a:54:5c:4c:00:9e:f4:89:84:c4:32:
         ce:89:a1:51:7c:bf:99:f3:f7:c9:b3:95:62:b5:64:23:c5:f2:
         02:81:5e:3d:77:24:78:b1:f2:d3:d3:98:48:dc:82:cb:00:0f:
         e7:99:cc:49:ad:a8:28:aa:50:e0:dc:15:f6:38:b4:f2:63:2e:
         9b:a6:74:f1:cf:55:a7:ba:f6:83:4e:df:bf:9b:dd:cc:2f:44:
         ec:ca:86:52:cd:72:ee:12:03:87:a3:48:0a:c9:51:28:f2:2b:
         18:b8:68:fc:55:b3:8b:d0:e8:0a:5e:5a:1b:0b:7c:6a:51:83:
         68:fd:8b:16:d8:df:5d:ce:95:2c:5e:06:41:90:0c:e7:05:a1:
         d6:86:c5:86:a6:92:73:7c:eb:4a:6d:9f:4a:c8:20:3f:31:36:
         47:e1:b4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:07:37 2025 by rpki-client