Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
File:                     59nPsHjtpYFvyAnpjCXLcZY-dbc.mft (raw, json)
Hash identifier:          pAdAyz1kr+0bJCUi6y1d+A35GS68KefEGqDftpO5Azg=
Subject key identifier:   25:B7:4E:03:13:52:F4:A0:C6:6F:54:F5:BF:DA:45:89:73:29:FC:BA
Authority key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
Certificate issuer:       /CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
Certificate serial:       0197B70EC1BBB20C7706A31275C43C2337C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
Manifest number:          10D3
Signing time:             Sat 28 Jun 2025 15:01:26 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:26 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:26 +0000
Files and hashes:         1: 59nPsHjtpYFvyAnpjCXLcZY-dbc.crl (hash: DbvJ6cFun2UbuvZIIZkWCTz7QqTvn8hMlgutihuTMSs=)
                          2: doaBFCoAi9PMEGjDVkL2tXpIeqk.roa (hash: Z98ogMYuCRCB/EUQ20sK/eyL2P/vgOy7W+oSu1U5VEE=)
                          3: uRo2bMOeIiH8StyfjDXOPHZmCRc.roa (hash: /c4Qcmm44bZ40YwEJJpcK2loOF7YWT9F41wjJC1v0Vc=)
                          4: xOWUW0bOewUorU3PuzR6cnv41Ec.roa (hash: z/ye3u1sqtlYcBf/GAFPNRmAn23AockZVnADhLIPFmU=)
                          5: ygDMNPZB6ioJh9v1SV5ZJ0aINDg.roa (hash: 0bPn18ewCwFlle0D4D1zaFp/YvFhdd8pfg8oWQqwtM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:c1:bb:b2:0c:77:06:a3:12:75:c4:3c:23:37:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
        Validity
            Not Before: Jun 28 15:01:26 2025 GMT
            Not After : Jun 29 15:01:26 2025 GMT
        Subject: CN=25b74e031352f4a0c66f54f5bfda45897329fcba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:e9:59:13:ed:6e:a9:be:4c:a6:b3:68:6b:
                    e6:d7:d6:15:3d:2f:11:d7:be:d7:2a:a1:5e:e1:2e:
                    97:9d:8e:d9:42:a9:13:9f:20:d7:b7:3d:e7:b8:8a:
                    ca:49:d3:dc:7d:d9:33:c6:5c:4e:3f:0e:7a:9b:c4:
                    20:2c:e7:88:8d:f9:6f:ab:89:c5:32:93:ea:cd:81:
                    75:9d:19:4b:f3:ae:67:30:a9:ee:7b:0e:2e:33:9a:
                    e2:f3:c7:26:8d:af:98:c0:5e:f7:d7:9a:36:80:76:
                    36:f6:6a:2e:4e:c3:37:14:5d:2e:83:bc:81:4d:4a:
                    1a:ee:1d:fe:66:c3:03:30:d6:0a:b5:4f:d9:96:09:
                    ed:52:19:cf:46:d4:1a:89:bf:80:35:ec:d2:5d:38:
                    a2:e4:7d:bd:9a:4b:26:f4:ea:13:5d:75:2d:fc:45:
                    3a:83:6b:cf:fb:87:a6:6d:74:1e:d9:91:2e:c1:07:
                    88:ff:67:69:78:38:c6:fc:43:c4:e4:1d:d6:df:bc:
                    c0:c7:e3:ed:4e:00:f5:e3:13:6b:94:7a:c0:75:ac:
                    28:90:09:89:7e:9e:bd:cb:6d:ac:7f:02:7f:23:e2:
                    c6:e6:b4:77:4e:e5:0e:b9:b2:f4:25:9d:4d:ed:fd:
                    d7:69:52:0b:1c:23:3b:cf:07:0e:af:fb:22:9e:23:
                    bc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B7:4E:03:13:52:F4:A0:C6:6F:54:F5:BF:DA:45:89:73:29:FC:BA
            X509v3 Authority Key Identifier:
                keyid:E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:0f:34:6e:9d:54:71:23:c8:9d:7e:e1:04:2b:78:61:4f:ad:
         6d:e4:05:f0:f5:4c:c5:89:a4:aa:10:27:ef:cb:7d:a0:cc:1e:
         19:95:99:ea:3a:04:83:bd:23:ac:70:d6:32:ca:37:88:ab:66:
         16:5d:c5:a6:e6:16:44:73:ae:b7:c7:cc:eb:44:a7:4d:33:61:
         12:a2:04:b3:9a:1a:e0:18:bd:47:f9:fb:5d:d4:e6:cb:b6:c9:
         ff:95:99:5c:8f:be:5c:5c:53:0a:6f:ac:9a:9f:ea:33:c7:06:
         8a:14:61:9a:d8:9d:5f:a8:0f:40:83:18:2d:07:5d:e5:ce:44:
         4e:57:3b:d9:b8:9d:78:8d:c8:b1:3a:e1:fe:5d:a4:0e:dd:00:
         aa:e4:ac:1e:3f:6b:a4:09:25:fe:06:58:50:99:26:30:fb:ab:
         35:4d:22:8e:2f:4c:76:e5:ab:75:43:b3:d8:a3:5c:af:3d:a4:
         7b:ac:41:33:ff:30:3e:e3:bc:62:e5:f8:21:1f:99:22:53:42:
         ad:08:bd:a5:1c:ee:f4:f4:78:a0:3d:b6:28:b5:f5:10:f6:ff:
         6e:81:14:54:6f:cc:1e:d8:c0:60:3a:b7:e8:f3:eb:9e:6b:7e:
         34:bf:d6:a7:10:16:a8:22:83:3e:53:dd:ee:68:be:eb:1a:db:
         64:df:2e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:34 2025 by rpki-client