Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File:                     _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier:          Wv8bT784zbPhjDrlQdKm/FWG4OIrgWEl2kJFpfEgxG8=
Subject key identifier:   0A:08:E5:E3:AF:64:6D:CA:E2:F3:84:55:87:8D:3F:27:C1:73:6B:57
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer:       /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial:       0197B77CA0C1DE2B518F7365A32EE7627281
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number:          0D7E
Signing time:             Sat 28 Jun 2025 17:01:27 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:27 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:27 +0000
Files and hashes:         1: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: VDIS2MYPVYAFZW46wcGYyOSXaDPQP0jpGXUS+PFjsU4=)
                          2: mmQZQMc3pi55Js-9aVzfnXjlBGY.roa (hash: 93uL4N1ZhKCAtYqh9gXaRNVs2vWfWmN+xYkYAO6a64o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:a0:c1:de:2b:51:8f:73:65:a3:2e:e7:62:72:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
        Validity
            Not Before: Jun 28 17:01:27 2025 GMT
            Not After : Jun 29 17:01:27 2025 GMT
        Subject: CN=0a08e5e3af646dcae2f38455878d3f27c1736b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:83:6e:53:aa:c2:52:ec:9a:e7:df:28:43:44:
                    a1:56:a3:f2:a1:e7:24:b9:8b:31:37:2a:e9:01:7d:
                    c3:63:d6:78:78:f6:9f:ca:3d:75:3c:1f:75:27:b9:
                    de:b3:e7:7b:8b:9f:9b:c9:03:26:bd:db:dc:7b:cb:
                    5b:f3:af:92:31:ce:42:07:9c:3e:a5:68:32:54:c1:
                    53:fa:11:aa:73:4c:66:0d:29:7e:77:1c:bc:76:c7:
                    57:a8:25:3f:35:bb:88:d0:4d:c6:f6:6e:24:42:b3:
                    3e:60:89:12:34:7d:f1:d3:e0:1e:cd:83:91:73:f0:
                    cd:1b:d1:88:90:3f:1f:e7:df:a2:a6:19:d9:ad:ee:
                    3d:cb:93:3f:8c:05:21:5e:0d:4e:c3:cb:a8:46:c9:
                    f7:e7:ad:34:26:41:b8:03:1b:37:14:fa:d5:b2:93:
                    7e:1f:73:6d:a7:ef:af:c8:cf:c9:74:a5:07:a6:c9:
                    68:af:09:b3:ef:a9:32:34:91:13:d3:7d:98:e0:97:
                    d7:c8:39:d8:93:ca:06:85:d7:c0:81:7e:e8:37:b7:
                    a8:9c:f2:0b:38:70:c2:62:75:61:25:a1:39:fb:3b:
                    9d:a2:06:15:73:70:ac:4a:61:4c:65:9d:78:be:90:
                    85:37:12:39:16:5c:f8:51:f2:a1:8e:1c:ed:07:82:
                    d1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:08:E5:E3:AF:64:6D:CA:E2:F3:84:55:87:8D:3F:27:C1:73:6B:57
            X509v3 Authority Key Identifier:
                keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b2:2f:03:22:dd:d4:8a:a5:c8:35:60:dc:8c:2f:53:b2:a7:
         e0:1d:63:ec:f7:56:af:94:f1:d3:4d:26:c4:5c:4e:6e:7a:bb:
         0f:5a:d4:09:a1:8f:47:5c:f7:02:4a:e0:6d:0d:c2:b1:7e:06:
         61:13:63:21:48:62:35:a3:c6:38:9a:7d:1c:c3:53:c2:29:49:
         57:d4:f0:8a:ed:d7:bd:e8:d8:7a:f0:81:d8:17:ea:86:4a:18:
         53:48:63:af:ab:dd:b2:bf:ac:74:58:f9:de:45:0d:24:a2:65:
         fb:c4:30:84:a4:12:2f:1e:01:9f:89:3f:56:4e:a3:88:da:49:
         27:03:53:ca:85:b1:47:55:6f:49:8a:b8:bc:48:a8:e3:c6:22:
         d8:dc:76:db:16:e0:43:76:53:10:86:2a:35:07:4c:15:bd:50:
         92:9c:0a:3d:b5:55:47:43:a2:7a:29:c2:1c:a6:02:ae:2d:f2:
         b1:76:e6:56:1d:c4:8a:5a:b6:05:ee:0d:54:ba:92:82:39:da:
         95:97:d5:d8:8b:13:71:cb:7c:02:0f:df:84:33:7a:db:f1:66:
         35:5c:02:13:ed:a2:dd:16:51:6c:86:4b:69:55:c4:bf:be:9a:
         f3:c7:32:a8:9f:26:43:85:4d:4b:f2:77:5f:e8:ab:11:8c:90:
         44:66:cb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:36:55 2025 by rpki-client