Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
File:                     fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft (raw, json)
Hash identifier:          Zc9zBfKqmpuIZ3MVaCynzW52DnsMqnWCe5EPNlg47iI=
Subject key identifier:   E1:D2:A7:34:C5:DB:E3:B3:DD:38:EB:77:7F:69:F2:D2:00:29:81:EF
Authority key identifier: 7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78
Certificate issuer:       /CN=7d014c9a158218eed684ae2fc06d58e5cf671478
Certificate serial:       0197B6A10CCDCE857EA11C2658DA169B7BBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
Manifest number:          0E44
Signing time:             Sat 28 Jun 2025 13:01:37 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:37 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:37 +0000
Files and hashes:         1: 3DrlLWhGcsMv-s4viwJB1FYsGOU.roa (hash: s3b1rQsesdFt4DpbajXuJViVF04qZ0u1qGw5GYZzzXk=)
                          2: fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl (hash: 4Xi/qHxnmjjUdfZj/oS1C/HUaIeTh9HSjdKsZ22kP/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:0c:cd:ce:85:7e:a1:1c:26:58:da:16:9b:7b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d014c9a158218eed684ae2fc06d58e5cf671478
        Validity
            Not Before: Jun 28 13:01:37 2025 GMT
            Not After : Jun 29 13:01:37 2025 GMT
        Subject: CN=e1d2a734c5dbe3b3dd38eb777f69f2d2002981ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d9:7e:65:26:03:6a:e8:67:6c:f2:2f:ca:f4:
                    9d:bc:59:83:27:81:46:68:11:01:ce:a5:3a:f0:68:
                    d1:ad:b2:d6:01:5b:65:41:3a:32:71:cd:2d:42:2d:
                    ea:11:9e:c0:2d:bc:42:33:99:71:aa:10:61:c1:6c:
                    f3:3d:1d:1c:0d:b1:4d:63:ad:f6:53:e6:0a:ec:ce:
                    72:ea:fe:67:58:ef:31:a0:fd:76:78:b4:06:42:fe:
                    66:99:19:98:4d:b7:fb:6a:a5:68:01:0f:d5:e5:54:
                    fd:22:ac:80:9c:32:75:f8:07:9a:ca:34:68:bf:64:
                    36:61:c3:dc:68:11:b8:6c:36:5f:e5:35:21:f8:cb:
                    a3:30:9e:fb:3b:57:5c:6e:42:3d:86:7f:c5:b0:2a:
                    9c:af:5d:b4:80:6b:b8:05:0b:2a:45:55:18:c1:08:
                    79:c8:05:93:89:32:22:9f:49:8d:86:da:30:f4:71:
                    7f:23:c6:29:ae:d2:85:5e:38:69:9c:bc:6c:91:1a:
                    69:40:b9:08:11:bf:c1:37:4e:bc:9f:ba:fa:9a:12:
                    e8:7b:df:b1:0f:86:32:43:74:78:bc:cf:34:8f:38:
                    ee:57:e0:c2:a2:12:e4:31:af:8e:b3:dd:70:fb:01:
                    03:a4:d0:23:ed:5d:c6:9a:15:5d:91:35:84:7b:05:
                    db:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D2:A7:34:C5:DB:E3:B3:DD:38:EB:77:7F:69:F2:D2:00:29:81:EF
            X509v3 Authority Key Identifier:
                keyid:7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:32:1e:a5:91:6b:f4:24:89:19:0c:a3:26:ae:fa:7c:97:8d:
         a1:7e:3a:b0:95:ee:df:e4:2c:97:b3:70:67:f5:f5:f1:12:4e:
         26:9a:79:aa:76:46:9a:7f:74:ae:c1:d1:26:ba:29:4c:53:93:
         ed:61:c3:72:ab:44:50:7d:e1:e7:a4:4e:75:c6:0d:c5:a9:04:
         3d:82:97:3a:79:c5:02:86:e3:18:1c:c3:59:9b:a7:de:59:e7:
         9a:2c:ce:6b:79:b1:6b:e3:c2:f3:c4:eb:1c:45:2d:86:37:53:
         f2:7f:eb:25:ee:a5:6e:1a:58:43:c8:c0:5a:a4:7d:0c:c6:97:
         38:a2:e4:53:8a:f0:e6:fc:e5:cb:b5:36:59:10:56:1e:33:30:
         e6:95:fe:eb:c7:1a:5d:a8:07:47:59:15:bd:07:58:8b:eb:f0:
         a5:e9:d4:d1:c7:a3:ca:29:f8:28:48:3f:aa:4b:fd:cd:8a:e3:
         3c:82:24:c2:17:64:c9:a1:e1:3a:b4:9d:03:c0:86:07:e1:d6:
         19:3e:19:a6:43:4c:05:e3:12:df:95:68:d9:19:07:3a:1d:bd:
         29:8f:93:fa:25:73:9a:2b:57:1e:35:96:76:04:1d:61:83:43:
         f4:dd:f7:26:4b:fa:55:49:bd:34:86:4d:ce:a2:23:5c:ad:63:
         d9:68:ce:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:24 2025 by rpki-client