Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
File:                     tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json)
Hash identifier:          dpl2f8GESgi8cUpOm1XJAv4rJb/LcP0AxXzvOi4tI+w=
Subject key identifier:   8E:F6:05:60:1E:3F:1B:7E:57:A8:FC:5A:26:5A:DD:CB:63:A7:7C:A0
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Certificate issuer:       /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial:       01974AE8C486156837BFA27070D2B7E41ABD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
Manifest number:          0FDC
Signing time:             Sat 07 Jun 2025 15:00:57 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:57 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:57 +0000
Files and hashes:         1: Tm8yT_3vBgLrxw1Lr4A3GN1Cjk4.roa (hash: cpwfuPoZQp9+xwJvstUEZKWWh0LDOj40EbCeSJBVSfw=)
                          2: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: rUKBJn9ynAiO5PppkDhx7prQBCwc+fgRSw1UMD618xU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:c4:86:15:68:37:bf:a2:70:70:d2:b7:e4:1a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
        Validity
            Not Before: Jun  7 15:00:57 2025 GMT
            Not After : Jun  8 15:00:57 2025 GMT
        Subject: CN=8ef605601e3f1b7e57a8fc5a265addcb63a77ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:8a:24:b8:7f:05:f4:df:40:00:98:50:91:
                    e1:1c:5d:d8:cf:14:41:39:83:4e:63:2c:16:e6:e2:
                    72:94:49:e8:ab:d6:42:28:10:8d:61:bc:28:4e:5e:
                    4b:67:3e:d5:8e:f0:2f:6d:8f:6a:81:37:14:93:40:
                    24:ff:20:e7:e4:aa:9b:80:25:0b:db:44:51:8c:3b:
                    d1:ee:17:0e:60:a7:d3:90:f1:c3:ff:4a:c9:18:b4:
                    b2:5e:eb:32:6b:1e:6a:9b:a2:88:be:50:52:91:c5:
                    24:fb:7c:2a:c7:5b:38:57:f9:49:bc:d7:dd:29:8a:
                    6a:d5:2c:0b:3d:cc:91:04:4c:c5:cd:36:1d:59:18:
                    12:91:f3:7a:41:d7:2c:42:55:ea:a4:f7:65:9b:c8:
                    58:e1:8c:f9:30:40:31:5b:b5:e1:17:0a:76:22:5a:
                    a1:c2:6d:57:a1:84:66:48:d4:df:f3:53:d2:9f:84:
                    08:1c:0c:fa:e6:94:00:ac:83:11:2c:5c:a0:90:a1:
                    c0:b3:c2:bf:11:e8:b2:9d:62:78:d9:67:a7:c2:9c:
                    ab:31:ce:ac:95:e9:f4:ab:70:c4:b4:c9:f4:a0:ae:
                    73:aa:04:2d:9e:67:6a:3e:44:44:2b:31:cc:7a:14:
                    24:9a:b7:49:d5:b9:bf:c4:ce:7b:30:a3:da:98:53:
                    d1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F6:05:60:1E:3F:1B:7E:57:A8:FC:5A:26:5A:DD:CB:63:A7:7C:A0
            X509v3 Authority Key Identifier:
                keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f0:50:43:f6:b0:af:25:8d:dd:80:71:28:bd:11:c8:c2:b9:
         8b:84:d4:65:3b:3b:02:85:59:86:73:ea:28:3b:a0:ab:09:ca:
         3c:e9:d7:41:64:1b:20:ba:2b:e4:41:94:81:98:ee:2a:cd:8d:
         93:84:ed:37:4f:91:90:84:a2:31:10:b4:78:61:2d:f7:e3:e3:
         b3:52:20:d7:ca:26:a7:16:6d:cd:26:f2:bd:0e:b1:85:77:ee:
         6a:7b:bd:27:50:15:fd:3b:44:63:f0:41:54:e4:44:9e:84:9d:
         50:af:a0:6b:53:76:af:34:8f:3f:f3:92:1c:46:ca:e4:55:9f:
         cd:a5:45:2c:83:dd:7f:e6:1d:ed:f6:f2:a3:3f:21:26:e7:61:
         a3:f5:d3:c0:4b:b4:60:35:2d:e5:9c:71:0e:24:c5:cf:81:7a:
         32:54:54:b4:b4:39:f4:16:49:2a:a2:27:cd:ee:5a:32:13:1c:
         03:b4:bf:bf:82:02:9e:09:27:c5:14:77:f6:48:dc:30:f5:9f:
         8a:40:be:6c:6d:f1:fb:32:12:da:39:19:25:8f:2f:b7:de:0a:
         2a:41:ba:a3:b8:9a:31:e4:2e:1d:d0:96:d2:bc:dd:52:f6:b6:
         db:36:2a:76:9f:00:68:29:7a:c7:b4:d1:22:32:30:e4:a3:d8:
         3e:cc:01:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:11:54 2025 by rpki-client