Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
File:                     1V05IYUKX_8H7KJgo275IQHy2Fw.mft (raw, json)
Hash identifier:          vijTz7PcXFjBhCNtBnGuDuJ4rHmU8STwjyoEHuWLuVI=
Subject key identifier:   FC:36:48:60:69:A3:10:88:E7:37:13:F8:05:66:C9:A6:7E:06:1D:21
Authority key identifier: D5:5D:39:21:85:0A:5F:FF:07:EC:A2:60:A3:6E:F9:21:01:F2:D8:5C
Certificate issuer:       /CN=d55d3921850a5fff07eca260a36ef92101f2d85c
Certificate serial:       0197B5C52650462CE7AFBFA70292B0C31525
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
Manifest number:          0FAF
Signing time:             Sat 28 Jun 2025 09:01:25 +0000
Manifest this update:     Sat 28 Jun 2025 09:01:25 +0000
Manifest next update:     Sun 29 Jun 2025 09:01:25 +0000
Files and hashes:         1: 1V05IYUKX_8H7KJgo275IQHy2Fw.crl (hash: 0Y02gXNawDFjGIbZalf/KFT7HICH6rk21WuHkMK2Qzo=)
                          2: k2mbzTYpqu-vVJrS8eVrfjvKL6U.roa (hash: q1LZnQ/M/m1mtPJpKlXgR+S06Cq8uIHatKNRuGYjFtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c5:26:50:46:2c:e7:af:bf:a7:02:92:b0:c3:15:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d55d3921850a5fff07eca260a36ef92101f2d85c
        Validity
            Not Before: Jun 28 09:01:25 2025 GMT
            Not After : Jun 29 09:01:25 2025 GMT
        Subject: CN=fc36486069a31088e73713f80566c9a67e061d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:75:3d:ef:5e:2b:35:9f:35:2a:96:18:b7:46:
                    91:93:e3:52:2c:ea:57:3e:91:74:9d:da:ae:fb:9e:
                    06:6c:ce:89:eb:51:65:72:b6:fe:17:0b:e9:19:75:
                    d7:78:ed:f4:72:e4:57:fa:51:a3:ae:df:f9:b8:8f:
                    c5:f6:e7:d7:74:3a:25:17:e2:c5:d8:bb:49:28:b7:
                    42:68:87:85:f9:b0:fa:09:f0:be:f7:2d:0b:54:95:
                    08:59:32:f1:e8:e0:52:eb:5f:59:e7:c9:68:3a:c8:
                    b9:6e:74:a3:f7:fd:d8:20:0e:d0:b2:65:31:69:e5:
                    7b:04:ee:81:8d:25:05:17:bb:9b:56:02:20:e7:72:
                    38:32:d8:dd:38:58:7f:16:3e:80:fa:d9:f2:71:60:
                    5a:04:57:d6:e0:f5:65:86:d2:59:58:f9:13:0c:69:
                    49:59:bc:01:75:22:78:d5:91:f2:99:bc:49:36:98:
                    31:99:99:f6:70:5b:c4:66:33:c9:f1:41:b8:4d:e1:
                    eb:da:c0:d2:43:e6:46:50:e9:19:c9:30:db:da:29:
                    8c:18:4b:45:18:6c:27:e1:77:9e:d1:26:07:ee:64:
                    41:d0:f7:9c:65:f1:09:60:d5:7a:f9:4e:cc:f1:ae:
                    a1:ea:9d:32:5f:09:5f:ee:9a:7b:49:9a:7a:bc:61:
                    e0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:36:48:60:69:A3:10:88:E7:37:13:F8:05:66:C9:A6:7E:06:1D:21
            X509v3 Authority Key Identifier:
                keyid:D5:5D:39:21:85:0A:5F:FF:07:EC:A2:60:A3:6E:F9:21:01:F2:D8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:fb:11:96:e6:f7:76:5e:91:e7:8b:f9:50:75:4c:4b:ee:ef:
         ed:87:6c:99:89:0c:60:57:73:7d:8f:71:31:47:65:ab:12:4d:
         6a:28:c7:65:dc:eb:a2:a8:b6:eb:d1:f3:ed:8a:a9:4c:cd:0c:
         20:79:75:06:df:d1:a9:d5:75:2f:10:87:f0:4a:eb:d7:f1:79:
         0c:98:8f:42:02:f4:45:66:89:c6:ed:cc:e3:d9:af:42:40:c2:
         a3:3c:24:5e:bb:23:b2:ba:57:c6:ea:02:39:b3:ff:c5:f8:5c:
         dd:43:9c:e0:a8:cf:d0:02:d4:fd:40:97:c8:da:18:79:db:66:
         d4:eb:62:0d:6f:3e:7a:62:d4:49:9c:a5:71:80:1a:2b:7f:ba:
         55:4a:e3:c0:04:91:6d:d9:a6:a7:b2:9f:e5:f4:c7:61:17:62:
         6a:b4:5a:52:2e:f6:88:85:eb:f8:d5:3e:ba:65:e5:87:a1:f6:
         ec:77:77:bf:93:5b:21:af:54:40:ff:e9:6a:29:c9:b2:c9:e1:
         3e:4f:4f:e1:e3:0e:62:a2:86:92:3d:84:b3:99:0d:59:63:b2:
         79:b3:6c:36:0f:63:a1:18:89:ef:30:da:50:58:95:79:40:69:
         94:42:31:81:4e:df:03:05:b8:16:96:3c:96:e6:2c:56:8c:9c:
         7e:c1:d5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:57 2025 by rpki-client