Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
File:                     d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft (raw, json)
Hash identifier:          XV/D/zpRso6nvfsv0kdEkicVP6ArK5d7tpUd3ogvtko=
Subject key identifier:   96:C7:83:17:35:57:15:34:51:E8:F5:67:A1:C3:98:5C:24:58:A2:9E
Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
Certificate issuer:       /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Certificate serial:       0197B77C1634830038FA0A560D968130945F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
Manifest number:          0D55
Signing time:             Sat 28 Jun 2025 17:00:52 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:52 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:52 +0000
Files and hashes:         1: d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl (hash: cpfpnmG2d9akR48+hHJQ0pCEB5oR6OiazHKrNQ7e8Ps=)
                          2: hNGctvUgxsV9VRFcAR330Ay19l8.roa (hash: zQTWmn2EIkYMs7iDpMx3kmmkHaS8RfsfTxjAwAVdFG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 17:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:16:34:83:00:38:fa:0a:56:0d:96:81:30:94:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
        Validity
            Not Before: Jun 28 17:00:52 2025 GMT
            Not After : Jun 29 17:00:52 2025 GMT
        Subject: CN=96c783173557153451e8f567a1c3985c2458a29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:3f:e9:4c:88:a0:3d:5d:17:79:e6:c0:37:
                    82:e4:b9:e7:1e:97:ba:fa:68:e2:9c:ce:2d:53:2f:
                    70:ba:29:de:c2:98:47:6b:54:85:69:8d:83:f3:35:
                    76:e0:e9:56:08:7a:f4:39:38:b1:18:2a:4c:42:5c:
                    a0:71:45:f3:ed:9c:dd:93:f7:c5:43:95:f5:ed:12:
                    70:cb:06:fd:39:65:9c:f9:a2:e7:d0:06:2d:bf:dd:
                    16:00:2e:ec:b5:b3:f4:e1:0b:4f:ec:88:85:f0:0a:
                    7b:0a:13:d8:72:ed:e1:a6:af:da:7b:2a:23:1b:56:
                    7e:cc:0c:4f:ea:5d:18:c9:f7:17:5a:6d:c2:6d:ba:
                    10:9a:c5:17:f0:28:f8:30:e3:6f:f8:e0:ab:91:36:
                    92:f7:54:79:8a:f9:cc:ee:69:06:c7:2a:29:19:88:
                    6a:c7:cb:62:5c:1e:40:5d:ed:4f:bd:5c:9b:28:16:
                    f8:1e:82:c5:c9:3d:ce:a7:cf:06:8f:ed:b5:d3:d3:
                    1f:59:3a:1e:a8:4e:47:9f:38:e3:0b:4c:aa:22:3b:
                    4c:aa:f5:e1:de:45:f3:85:74:85:c6:21:5b:06:fd:
                    b2:10:90:ab:fd:98:d0:12:00:f6:2e:88:5a:97:52:
                    53:60:d3:31:9b:b5:ec:27:49:b3:35:be:d8:4f:9f:
                    c0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C7:83:17:35:57:15:34:51:E8:F5:67:A1:C3:98:5C:24:58:A2:9E
            X509v3 Authority Key Identifier:
                keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ba:f7:de:14:fa:e6:ae:a1:e6:60:f7:a6:db:2d:37:51:01:
         25:31:4d:b0:62:83:8f:4b:33:8d:75:37:fb:23:c6:bf:b3:ca:
         ab:c5:ee:b3:2c:67:fd:ff:38:12:df:10:7b:ca:ff:a1:5d:d7:
         4b:11:9e:51:20:84:5f:6d:40:cf:28:0b:4f:6b:0b:8a:21:23:
         92:75:c1:e8:61:0c:b2:1f:31:62:b7:ae:62:ba:ee:0d:17:1b:
         e4:03:02:e1:c8:eb:22:2e:66:94:a5:dd:d8:60:25:0a:fd:40:
         d4:18:1e:e6:31:f3:c6:e6:be:fc:52:ce:b9:80:33:66:6a:06:
         c7:d5:a3:3e:09:d5:d4:85:9d:22:ce:3c:f1:99:db:79:70:c1:
         32:30:c4:33:8d:e8:a5:b3:6f:cd:f5:30:9a:3c:7b:c5:13:78:
         4d:bc:b3:05:4f:f8:1e:10:66:03:3d:38:51:94:f8:97:2a:62:
         5d:47:dc:b3:d0:4e:67:87:ee:c4:6c:17:f4:00:70:d8:b1:44:
         b7:20:6d:13:ed:ba:b6:1d:7d:f8:c4:95:4f:45:2a:b9:3f:8f:
         57:df:6a:0d:e2:51:16:a1:bd:cf:09:d9:3a:2a:26:90:e0:d7:
         43:f6:35:3a:86:f5:03:d4:f3:e9:86:15:16:c2:5d:09:d0:49:
         d9:44:85:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:03:32 2025 by rpki-client