Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
File:                     EXdPipmODyrxj3UnnjJlSBNpRIg.mft (raw, json)
Hash identifier:          uSc//mUAd/p7AA6vgVvyyqMiy47KxVfNtw/PRCwPbv0=
Subject key identifier:   93:2B:3F:D6:52:F1:3A:81:F0:AD:A6:E8:10:EB:DB:81:B5:A5:4B:58
Authority key identifier: 11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
Certificate issuer:       /CN=11774f8a998e0f2af18f75279e32654813694488
Certificate serial:       0197B8FCC1F8B91CC4650D47B220AE6BF4C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
Manifest number:          03FA
Signing time:             Sun 29 Jun 2025 00:01:01 +0000
Manifest this update:     Sun 29 Jun 2025 00:01:01 +0000
Manifest next update:     Mon 30 Jun 2025 00:01:01 +0000
Files and hashes:         1: EXdPipmODyrxj3UnnjJlSBNpRIg.crl (hash: af0aP9daHtV7hMNB5LoR1gC888CoGjnNGm5VjDD3Y0c=)
                          2: lEOnyeTSrhVKx1TLByVlPzDKz8w.roa (hash: n8RWZqmzmommBj8oDYR9O53K32j7DKyp4tQyqLf5eY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:fc:c1:f8:b9:1c:c4:65:0d:47:b2:20:ae:6b:f4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11774f8a998e0f2af18f75279e32654813694488
        Validity
            Not Before: Jun 29 00:01:01 2025 GMT
            Not After : Jun 30 00:01:01 2025 GMT
        Subject: CN=932b3fd652f13a81f0ada6e810ebdb81b5a54b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:ee:3a:9f:db:e7:52:58:bf:83:34:96:65:
                    90:ee:b1:2a:ed:2e:26:dc:9b:25:0b:52:dd:dc:1c:
                    07:f9:f9:37:86:85:e9:49:d9:e3:c6:45:79:25:88:
                    16:fc:d3:f3:07:97:95:8e:a9:ad:48:b7:ec:8f:ce:
                    d4:0e:98:9c:ff:33:5c:31:00:cf:67:33:e6:ad:ef:
                    72:9f:89:02:f3:55:cc:ad:a8:04:3f:6f:f3:bf:e4:
                    7f:aa:8a:ef:de:62:1a:06:47:d8:49:8e:13:b2:83:
                    1a:b8:7b:a3:da:8f:ff:50:9e:8b:46:10:92:a5:df:
                    a3:0c:66:08:c0:2a:45:53:d7:d7:97:34:62:8c:2d:
                    13:6e:69:40:43:d3:43:7d:62:24:b0:bc:7e:0c:36:
                    ef:f1:09:a8:34:35:e8:f8:93:20:e1:99:ce:2a:66:
                    e9:53:a6:ec:3c:ad:2d:4e:33:d7:ad:b1:19:a8:5c:
                    39:14:d0:67:da:f2:9e:13:31:ad:a4:f6:c4:4f:89:
                    23:d9:34:58:92:18:dc:fc:26:56:78:7c:e8:73:47:
                    a3:cb:c8:67:2d:18:74:0a:46:54:33:52:55:a6:22:
                    00:dc:b0:07:56:da:41:64:b0:ad:95:fa:a3:65:23:
                    1f:e9:45:ee:59:89:fb:5f:e3:dd:24:3f:92:26:0c:
                    a0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2B:3F:D6:52:F1:3A:81:F0:AD:A6:E8:10:EB:DB:81:B5:A5:4B:58
            X509v3 Authority Key Identifier:
                keyid:11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:12:a9:6f:e1:b4:f8:06:2f:29:e5:a9:0f:36:e3:5b:0c:20:
         81:4f:30:b6:1b:8c:8f:ec:8b:d9:01:ab:04:b5:2d:b5:1f:51:
         1d:06:0b:ac:b3:55:6e:60:1c:88:0f:78:0c:7e:b9:5f:20:40:
         b9:b0:90:8b:14:b2:fb:42:c5:05:f0:1b:d8:9e:4d:e0:55:a2:
         93:f1:73:93:c0:33:e5:28:89:9c:bd:79:e2:7e:e4:8b:a5:d5:
         7e:48:f9:d4:0b:2e:b7:05:b7:af:83:b9:d3:86:23:e2:52:72:
         31:95:70:c4:ff:b2:97:07:5b:b7:ea:75:a7:8b:91:20:49:da:
         92:99:f3:b3:ec:7d:23:3f:ea:58:81:5a:67:45:40:0e:ab:d2:
         e1:ff:2d:80:2e:90:14:00:bb:bd:83:9c:26:8c:0b:45:4d:6d:
         9c:1f:a2:eb:cd:75:74:c6:83:d6:30:c8:79:af:95:98:0c:54:
         8b:82:8e:df:82:d8:19:c6:ad:53:93:08:9f:c3:ae:8f:aa:e8:
         9e:d4:ea:06:16:94:37:5f:f4:1e:b3:73:f3:3a:b0:06:d0:6d:
         fd:69:73:6b:37:86:bd:06:6e:f4:57:7d:0c:65:6f:d4:51:60:
         0f:06:31:1a:86:b4:16:44:f7:48:45:03:2e:c2:e1:c2:8f:b3:
         a2:fc:33:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:57:46 2025 by rpki-client