Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
File:                     987QIfmRTRLUGNmqI4yTgl6l9gU.mft (raw, json)
Hash identifier:          e/eK0LjEkCQiPzGjUTouFZ3+EDesLlHg/Nls/omSPXQ=
Subject key identifier:   91:86:E7:9C:4E:20:A6:85:5B:88:85:0E:F0:AC:36:2E:BC:4F:8B:A9
Authority key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
Certificate issuer:       /CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Certificate serial:       0197B77CA948C3D1FDB6867EA013CF3C662B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
Manifest number:          0D76
Signing time:             Sat 28 Jun 2025 17:01:29 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:29 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:29 +0000
Files and hashes:         1: 987QIfmRTRLUGNmqI4yTgl6l9gU.crl (hash: 26fKGAbuoGFPKf25J9rV8LHILctbPMKuLb/V8PE/9xs=)
                          2: AI1eVAvKdYB-fGkwuq_TIIbeidU.roa (hash: sKA1VCAma3ARvuIYZgQlGGFrTvogdspfkZ1qSCBQPg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:a9:48:c3:d1:fd:b6:86:7e:a0:13:cf:3c:66:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ced021f9914d12d418d9aa238c93825ea5f605
        Validity
            Not Before: Jun 28 17:01:29 2025 GMT
            Not After : Jun 29 17:01:29 2025 GMT
        Subject: CN=9186e79c4e20a6855b88850ef0ac362ebc4f8ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:fb:5a:71:33:e9:ee:85:0c:1c:81:29:e0:
                    d5:3b:31:30:60:7d:be:7a:48:f6:1d:3d:77:24:68:
                    a6:63:b8:b8:a2:e8:82:5a:82:fb:b9:14:f5:1e:11:
                    3d:6d:50:2e:a4:6c:60:9e:48:38:05:67:e7:c5:21:
                    52:ff:7b:f6:1b:54:7a:10:f7:70:67:5c:98:d4:b9:
                    02:e4:9f:da:5f:c2:ac:9d:fb:6a:99:e7:51:d9:6e:
                    5e:13:34:81:cc:3f:ac:c0:fb:e3:91:98:07:53:80:
                    df:56:10:a5:1e:80:09:40:75:be:61:21:f1:0e:37:
                    13:92:0d:bf:cb:c1:3b:86:91:42:21:1a:96:55:4c:
                    b5:72:fa:8a:85:39:ca:c3:65:22:52:62:78:e1:d1:
                    de:f2:7f:81:17:58:fb:31:fa:5e:b1:4f:9b:d5:27:
                    db:cb:d2:46:ab:15:dc:d2:2c:69:0c:64:95:30:47:
                    19:51:41:e0:90:f3:2f:84:36:a1:d6:07:98:9d:84:
                    d8:ec:b5:76:6a:46:dc:30:dd:e8:30:5d:21:00:53:
                    70:f4:2e:cc:15:c6:cf:a6:95:d4:55:b2:a9:14:51:
                    be:ef:29:cf:21:fa:4b:27:5c:4f:74:af:75:81:ef:
                    b7:74:b3:a0:4d:3e:8e:50:a4:32:b4:6d:4a:b5:ce:
                    b8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:86:E7:9C:4E:20:A6:85:5B:88:85:0E:F0:AC:36:2E:BC:4F:8B:A9
            X509v3 Authority Key Identifier:
                keyid:F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:3a:b2:89:d4:f8:4e:c9:85:cb:5e:2e:5b:0f:99:b1:19:c0:
         fa:90:77:42:57:1d:1e:77:03:eb:ef:f2:d3:6c:82:17:7c:0f:
         f9:80:89:52:33:c2:cd:17:4b:a4:c2:36:52:ab:ce:a3:11:8c:
         6f:69:3e:ff:5b:a5:35:4a:31:0d:de:1c:18:e4:70:55:c7:0a:
         5d:2f:d7:db:56:0c:3e:b6:8f:f7:43:a7:9a:05:3b:11:59:90:
         70:65:17:93:c4:d2:ad:27:78:1a:d1:53:13:6b:52:dc:39:8d:
         7f:8e:c3:8f:59:a3:6b:7b:a6:b7:51:ab:ca:7f:14:d3:05:cd:
         bb:5d:b3:b3:16:33:43:48:0d:76:b4:e2:25:22:bd:48:02:f0:
         53:09:40:8f:3e:12:72:41:c1:b2:0a:ea:ac:27:a2:5e:d3:06:
         90:6d:e0:8f:64:88:47:d3:f8:0d:93:a5:8a:90:a7:b7:b6:8d:
         6e:2a:13:2b:2a:8b:91:72:df:d0:ef:5f:55:71:ca:78:b5:67:
         84:fd:ef:9f:f0:6c:65:ed:80:c0:04:b1:8a:d1:c5:7f:97:7b:
         72:aa:22:40:f7:e0:b2:e5:b0:b1:14:a7:8d:86:68:4c:2a:6d:
         98:bd:e2:56:d0:ad:fd:d9:c0:2f:63:ef:72:89:a5:d6:22:c8:
         bd:6a:e2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:28 2025 by rpki-client