Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
File:                     fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft (raw, json)
Hash identifier:          UbxdD+Cn1y9/B1/Qd5bqWVTpVHjYPoG/IDWHld3n7SQ=
Subject key identifier:   CE:47:7F:14:3C:FA:E0:82:50:DE:6B:2A:3F:D1:65:11:C1:97:DF:1B
Authority key identifier: 7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85
Certificate issuer:       /CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
Certificate serial:       0197B7B34BF93183132C92D3ABB01936713A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
Manifest number:          0A97
Signing time:             Sat 28 Jun 2025 18:01:10 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:10 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:10 +0000
Files and hashes:         1: fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl (hash: Z23KmbLNCG5feFLDWCrupMnHJW+3lsLZ3vAUt0uE9Zk=)
                          2: mCKGYv7Hn8VpwzSrofG5k1K1u28.roa (hash: LkkBVbT8cmI52OeplrbujyTxipUcCUujJaGi2zW5iDw=)
                          3: o74rBkwgi-OLyw8qLeq0VZnWs9M.roa (hash: XmOmIlqK0EcHoxKDnpHB1Iv3cjgrTtgXMu4pU/uNCvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:4b:f9:31:83:13:2c:92:d3:ab:b0:19:36:71:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
        Validity
            Not Before: Jun 28 18:01:10 2025 GMT
            Not After : Jun 29 18:01:10 2025 GMT
        Subject: CN=ce477f143cfae08250de6b2a3fd16511c197df1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:51:e0:c9:dc:84:27:63:5b:8a:48:6b:d1:
                    01:21:fa:31:d7:34:bc:dd:ed:d3:a4:72:6a:67:c9:
                    cd:9e:e3:78:49:b8:ff:7b:d6:3f:d4:52:fd:73:84:
                    c9:56:b7:87:8c:e5:60:4d:ff:90:c0:28:67:b3:e1:
                    d4:54:15:c0:13:36:82:27:40:7e:5d:6c:29:fa:dd:
                    9e:a8:fb:23:38:f9:0a:b0:50:8d:1c:97:d8:cb:ca:
                    57:12:7e:96:2f:ee:97:b3:2a:17:3f:7c:f7:63:44:
                    ee:45:e9:31:9b:f1:80:f5:a1:eb:1e:aa:d5:62:03:
                    b9:52:1a:11:11:72:85:ff:9a:78:f6:78:20:39:ca:
                    b4:44:72:62:40:bc:85:47:f8:cc:03:6a:d3:18:06:
                    3a:85:c9:61:f2:f6:36:ff:8a:50:e8:a9:29:f5:74:
                    43:7d:73:cc:01:00:c5:28:43:12:28:51:db:34:51:
                    b5:6c:f2:af:ef:4a:e0:11:c3:63:ea:b3:0b:1c:b8:
                    15:63:95:02:c6:f3:c0:45:d6:c6:c3:a9:b2:1a:bc:
                    d2:75:2d:9e:e5:7e:7c:69:b8:10:79:c8:fd:42:73:
                    e5:80:c4:5c:0e:29:73:5f:4b:67:d4:aa:09:64:00:
                    b4:28:eb:95:f1:b5:70:55:7e:94:43:fe:82:e6:72:
                    80:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:47:7F:14:3C:FA:E0:82:50:DE:6B:2A:3F:D1:65:11:C1:97:DF:1B
            X509v3 Authority Key Identifier:
                keyid:7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:9a:95:13:07:5f:01:06:ef:2d:6f:2d:f0:c4:f8:e6:ce:a9:
         55:c3:de:73:2c:c2:ec:67:fb:72:c3:32:fc:63:22:00:0f:87:
         8b:e3:ed:ad:9e:63:52:e1:e4:8c:96:89:46:ee:36:ff:b0:4b:
         48:0b:9b:23:a9:7b:c0:85:9f:e2:ba:bb:96:fc:ca:29:1f:2b:
         79:dc:21:54:f4:c7:e5:96:23:98:00:39:b7:a6:10:52:ce:a7:
         9a:0f:ed:e1:58:a4:61:67:38:e9:62:e8:da:00:be:d9:6e:d4:
         32:10:9a:a0:1e:ed:1d:c8:51:60:ec:96:13:48:86:49:12:e4:
         d8:cc:dc:5f:dc:23:46:4e:af:2e:f1:89:20:17:0f:e4:17:cf:
         fc:f4:12:31:c3:2e:6e:5f:2d:37:d9:f5:17:47:37:27:6c:e5:
         cf:10:af:e3:34:5a:cc:1b:4d:e3:11:61:ae:7c:57:e5:34:30:
         97:ba:d3:f6:1b:b8:00:5f:a7:6e:6c:d8:78:94:33:6c:42:2a:
         45:cf:18:59:67:59:1c:ad:4e:9a:48:6a:12:fe:cb:5e:20:0a:
         9b:a6:0b:32:a0:b3:85:78:57:04:3b:ba:c1:74:12:9e:17:e9:
         80:23:d7:54:e2:5e:29:bc:73:d4:17:a1:82:1c:89:b9:44:73:
         02:fc:bd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:32:49 2025 by rpki-client