Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft
File:                     0EtupigXnKOg5Bv_ruotM6VUYd4.mft (raw, json)
Hash identifier:          FJdgIE871J1I+zHM5V5V0D+ylBWsoq9hKpP8ik/G0iI=
Subject key identifier:   DC:5C:D1:74:21:37:6C:27:09:6E:32:80:BD:76:24:56:E9:F1:92:DD
Authority key identifier: D0:4B:6E:A6:28:17:9C:A3:A0:E4:1B:FF:AE:EA:2D:33:A5:54:61:DE
Certificate issuer:       /CN=d04b6ea628179ca3a0e41bffaeea2d33a55461de
Certificate serial:       0197B88FACC4DFB55BBB9C57ABB6050F412B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft
Manifest number:          66
Signing time:             Sat 28 Jun 2025 22:01:52 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:52 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:52 +0000
Files and hashes:         1: 0EtupigXnKOg5Bv_ruotM6VUYd4.crl (hash: +UuUBeDIicosgPLiuYVhp+d8YJvpl4sSJhlVBktJHEM=)
                          2: 1-XjcgxPBlCdT6xkSyh2YSHlHr8c.roa (hash: TMzItRD9NOGFOwDM/LKIt7JF4ab7923oNjQ2Ls9AlQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:ac:c4:df:b5:5b:bb:9c:57:ab:b6:05:0f:41:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04b6ea628179ca3a0e41bffaeea2d33a55461de
        Validity
            Not Before: Jun 28 22:01:52 2025 GMT
            Not After : Jun 29 22:01:52 2025 GMT
        Subject: CN=dc5cd17421376c27096e3280bd762456e9f192dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6f:bb:76:c8:a7:cd:41:54:b4:9f:7f:61:9c:
                    70:f2:8e:18:cf:c5:f4:c3:62:c7:77:7b:0f:71:23:
                    a9:a3:d7:01:9b:29:5a:97:1a:d6:d3:14:80:f8:3f:
                    1c:43:49:95:c9:48:f2:36:09:fd:e1:0d:52:db:88:
                    e8:90:ec:2d:30:ed:fe:8e:d1:72:2c:e8:2c:8f:a4:
                    22:2b:ef:18:78:b3:9c:49:11:a8:f6:3f:8d:81:eb:
                    21:10:ec:b3:32:1f:0a:70:d9:b1:ce:87:44:b1:a6:
                    3a:ba:a4:61:57:ee:fe:f9:19:c2:78:3b:57:c6:cd:
                    f1:12:d0:dd:69:b3:2d:ca:ea:e9:dc:e5:f1:83:8b:
                    f1:6d:85:b1:10:45:1a:3c:5c:1c:cb:e8:e2:4e:c5:
                    69:83:04:9f:3d:67:06:b8:45:db:1b:a5:a3:7c:58:
                    af:50:5b:9b:d6:b6:99:1f:f9:a0:d3:f4:3f:c4:66:
                    74:56:f3:0c:9a:fe:ac:75:34:70:b0:63:81:f4:5b:
                    6e:c5:c0:82:09:e8:c8:07:e5:61:a3:85:29:50:71:
                    fc:30:2a:25:89:c2:94:c4:2a:50:8c:36:22:f3:67:
                    3e:23:ca:4b:b2:78:51:4d:09:51:99:a5:48:7c:41:
                    27:9c:bc:8c:a8:a0:f1:06:2a:92:94:86:fd:39:42:
                    f1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5C:D1:74:21:37:6C:27:09:6E:32:80:BD:76:24:56:E9:F1:92:DD
            X509v3 Authority Key Identifier:
                keyid:D0:4B:6E:A6:28:17:9C:A3:A0:E4:1B:FF:AE:EA:2D:33:A5:54:61:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ee:87:17:9d:67:13:87:02:f9:0a:fd:dd:f0:7e:26:e0:f6:
         84:57:9d:a3:30:29:08:9d:82:9d:2d:c1:b9:02:d0:db:a6:57:
         2a:46:9c:c3:ba:ae:ea:0f:5a:f1:3a:4e:56:9d:35:c4:61:4f:
         41:31:e0:0f:3a:eb:c4:98:7c:e4:8f:bf:cf:a2:04:fe:f7:0d:
         f7:5c:dd:38:36:31:36:71:9c:74:60:0f:cc:67:3a:f5:db:01:
         c7:a3:ff:97:a1:e9:58:9f:dc:20:ea:35:be:05:42:70:e4:49:
         70:b6:f9:b2:bc:f0:80:d6:33:98:50:6a:58:a9:80:1b:52:25:
         f5:ed:5c:62:85:a6:9e:cf:55:36:63:b6:e7:30:e6:e9:56:ec:
         4e:d9:fd:be:49:9c:06:28:2d:25:49:9a:cb:66:77:83:64:b7:
         1b:a2:c8:91:ef:56:e1:76:bd:0e:27:82:46:41:90:dc:08:a0:
         37:fe:ed:5c:68:58:19:19:55:70:61:e8:b5:64:4e:74:bd:7f:
         0c:e7:5c:8b:ba:82:22:80:48:12:b5:d1:01:ae:7e:72:09:a1:
         f3:f3:9c:0d:ed:49:6e:28:5f:66:9c:96:ce:49:f9:f2:04:64:
         21:89:ec:ac:16:52:85:6c:52:fd:91:43:58:43:6b:81:05:f1:
         ad:47:47:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:18 2025 by rpki-client