Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
File:                     o875PLessPtJuiiKeg-_JtMAT6U.mft (raw, json)
Hash identifier:          OAO//YAxXmcC5MYfitnoT8nX4+Nw6lLweXE+wKOJEcM=
Subject key identifier:   B0:88:EF:0D:35:F8:E1:88:0C:96:BA:AE:00:EB:AA:80:6E:69:10:77
Authority key identifier: A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5
Certificate issuer:       /CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
Certificate serial:       0197B7EA513DB2837E966B93E27BFD1BCC1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
Manifest number:          071F
Signing time:             Sat 28 Jun 2025 19:01:16 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:16 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:16 +0000
Files and hashes:         1: Mu_6vmjEmJ0Ji86QXCWXfF9bpOI.roa (hash: /uxIZLUhjbrsvb3qsWaj7YVyFLtcx8Jkz3bF3E7gb3c=)
                          2: o875PLessPtJuiiKeg-_JtMAT6U.crl (hash: 4O+YYAqU5cY7sS3nlt8iTIatzJJrNDNbOQWvHrJ3ziw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:51:3d:b2:83:7e:96:6b:93:e2:7b:fd:1b:cc:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
        Validity
            Not Before: Jun 28 19:01:16 2025 GMT
            Not After : Jun 29 19:01:16 2025 GMT
        Subject: CN=b088ef0d35f8e1880c96baae00ebaa806e691077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7a:3f:b0:71:f2:ce:be:2f:86:ea:dc:10:68:
                    46:5d:a9:d3:7d:2a:90:04:35:b7:db:3f:62:7d:88:
                    54:6e:96:5c:d3:33:cf:e1:bb:84:1f:e8:63:09:f0:
                    37:e0:f7:7d:96:4a:1d:53:e1:52:78:ee:bf:60:76:
                    25:aa:31:de:a6:88:79:14:e6:a3:b1:ef:13:f8:f7:
                    ae:04:ad:65:39:7c:d0:d2:6c:11:af:66:1b:5d:6e:
                    2a:6b:09:c2:da:81:99:89:bb:52:22:2b:6f:e1:4a:
                    9b:46:86:bf:90:4c:3d:bf:a7:50:b5:1a:b2:cf:9a:
                    a8:cb:a2:d2:a7:bb:b3:ad:86:33:fe:a6:92:09:57:
                    06:fc:54:c4:f4:12:20:54:57:c0:5c:12:5f:56:1f:
                    24:ea:5b:7e:3a:54:46:50:1e:70:86:c5:c0:0a:25:
                    0e:31:4d:a9:ef:ae:bb:10:c0:6d:2c:3e:1a:17:0e:
                    e9:2d:7f:b7:42:97:47:d6:65:20:31:85:08:3f:6e:
                    e6:d6:26:d5:24:c3:f5:2d:41:d4:60:76:2c:27:0e:
                    b5:f4:7f:f0:c7:8e:e0:15:9e:cc:3d:b5:40:da:20:
                    b1:ea:f6:b2:0c:e6:59:9f:9d:68:fb:d1:3c:9b:51:
                    19:67:93:3a:b1:15:c1:85:2b:c9:43:82:0c:2a:d4:
                    c1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:88:EF:0D:35:F8:E1:88:0C:96:BA:AE:00:EB:AA:80:6E:69:10:77
            X509v3 Authority Key Identifier:
                keyid:A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:29:e9:ce:62:9e:7c:b1:7d:de:37:ce:b3:48:c7:d7:bd:9b:
         19:73:a7:aa:91:f7:83:ba:5c:ee:09:82:2f:ca:7d:94:b7:0a:
         c9:a4:b8:f4:b2:7c:4d:79:95:f0:1d:f7:ca:e5:a2:73:97:28:
         ef:7e:6b:56:91:2e:e5:0f:22:07:32:bc:ea:a2:fd:c7:c9:f6:
         24:c6:a4:e4:97:08:7d:9d:36:ff:ef:08:b8:d9:4e:ff:72:25:
         cd:39:91:ee:e1:3d:51:16:da:d9:1a:ac:c3:61:63:a9:82:7b:
         92:18:26:98:2f:cf:ab:9f:ec:ff:5e:78:34:f9:32:65:0e:a1:
         a1:18:88:ea:50:cf:1b:e7:05:15:a9:7d:42:08:30:a3:e1:2c:
         0a:1e:39:68:a5:25:41:b5:67:42:4b:06:02:7b:c4:3f:53:ea:
         26:c3:e4:c4:3f:ff:6c:3d:26:db:4f:b8:89:45:8b:ae:7c:7b:
         d1:09:18:43:23:da:09:ff:1d:94:39:a3:7e:97:bd:e5:5f:f3:
         6a:09:63:44:15:df:99:5c:e1:a0:02:cc:57:6e:4b:62:b9:46:
         28:49:8a:39:b7:37:19:d9:b4:bf:ca:5f:c1:85:4f:9c:a6:41:
         95:86:18:31:27:84:b0:ee:3c:1d:c4:30:a6:df:46:9a:be:9f:
         c5:d1:3a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:17 2025 by rpki-client