Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
File:                     1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft (raw, json)
Hash identifier:          6J0a2C5KGbEJLjYq17zphBrXuPB1dDyfTUA47sURAAg=
Subject key identifier:   E3:65:11:E4:E5:7B:3F:CA:30:13:62:4C:16:E8:91:C0:C2:3F:AC:1B
Authority key identifier: F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
Certificate issuer:       /CN=f9951ba56329323b4c60f620d6a7391e707b5556
Certificate serial:       0197B632ACB3B00715673379E14D789CD67C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
Manifest number:          0DD5
Signing time:             Sat 28 Jun 2025 11:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:03 +0000
Files and hashes:         1: 1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl (hash: bURCO5nssvAdF6YG9VM9XXEF1Ma5FtWyTSXISv6Q/24=)
                          2: 4gz_E19lt_WQtnrzaUTS2wLE9kU.roa (hash: EPYfgGTHeJ3gz/LYRQ9uBlJ8BFrAwAfRiJVJRAOGoZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:ac:b3:b0:07:15:67:33:79:e1:4d:78:9c:d6:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9951ba56329323b4c60f620d6a7391e707b5556
        Validity
            Not Before: Jun 28 11:01:03 2025 GMT
            Not After : Jun 29 11:01:03 2025 GMT
        Subject: CN=e36511e4e57b3fca3013624c16e891c0c23fac1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a9:ca:c1:d8:d0:f0:f3:75:9e:d6:98:8d:5b:
                    f5:2c:1f:d3:df:dd:30:ea:1b:a7:49:f5:08:01:7d:
                    36:94:04:12:2f:da:83:37:a1:da:56:7b:ad:45:51:
                    13:b5:76:06:04:ed:cc:07:0f:b5:dc:3a:9d:32:e0:
                    78:8a:bf:38:20:f8:c2:1a:60:34:77:eb:26:67:ea:
                    a3:04:39:d7:5d:fb:31:32:c1:16:a1:70:ae:b2:a8:
                    df:fc:dc:ed:00:10:78:09:c5:a5:15:32:d0:f9:ce:
                    58:d8:0e:6c:42:93:0d:f3:cb:84:f1:2f:b7:d0:00:
                    49:b8:64:94:61:0c:3f:3c:42:4d:e0:bc:12:e2:db:
                    01:cf:d2:44:eb:83:3f:84:16:16:df:f6:e0:4b:82:
                    38:89:21:46:63:74:2e:d4:15:f2:ce:bf:25:b8:7b:
                    6e:cd:8c:fe:2c:54:4d:16:7b:c0:10:49:04:b1:75:
                    e4:4a:81:01:31:2f:6c:ea:39:d9:4b:da:4c:4a:05:
                    7b:d4:5c:89:62:c4:1b:ae:e2:94:2a:0d:c2:a4:83:
                    e9:9b:f2:6a:24:58:dc:01:49:48:cd:a6:40:ab:00:
                    ef:4a:ea:64:f6:a7:e4:cc:0a:6f:26:64:66:0b:f0:
                    90:56:30:2e:16:b6:29:97:58:94:5e:cf:36:67:67:
                    d1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:65:11:E4:E5:7B:3F:CA:30:13:62:4C:16:E8:91:C0:C2:3F:AC:1B
            X509v3 Authority Key Identifier:
                keyid:F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:56:5c:7a:f3:3c:69:7a:b7:da:5f:7e:d8:94:1c:ce:f9:d4:
         6c:20:6a:1f:b2:4e:1c:b2:fe:9c:27:7b:36:34:05:20:cc:2d:
         f1:cb:76:28:5e:4e:15:63:de:ea:6d:6d:f9:b3:21:3e:c9:aa:
         6b:f6:87:c9:dd:de:f6:2e:2d:d2:f4:61:ad:21:f6:ed:20:10:
         fd:9e:ae:3c:3b:c5:1f:63:41:60:9f:f9:ca:22:b6:2e:86:f1:
         38:63:65:f2:d5:aa:42:30:4c:0c:a8:a5:db:61:99:b1:c0:09:
         c9:a1:45:c6:57:42:21:00:a8:cc:f9:31:fd:c0:dd:ed:16:97:
         03:9b:38:41:e7:87:62:b1:3d:fb:2a:6d:bf:d4:4b:bf:fc:30:
         ec:62:ef:3e:00:78:60:8e:bc:72:d7:0f:90:d7:cb:5c:db:b0:
         4b:04:8c:0e:28:79:c4:24:58:1d:ce:c9:d2:52:12:41:ca:8f:
         ef:e4:62:82:22:76:f2:e0:b9:a6:eb:b2:24:75:9d:2e:99:99:
         eb:15:fc:ab:7e:c3:f3:07:16:13:44:9c:b8:a3:c3:87:48:0a:
         32:c0:9a:c5:5f:f1:fc:ac:3e:4a:97:6c:d4:8d:c9:bc:96:50:
         8d:a8:24:53:6f:2c:7b:f2:7c:e0:fc:8b:fe:d8:75:42:ee:2f:
         1a:8a:9b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:36 2025 by rpki-client