Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
File:                     xJ7uJN6rVSARm2o9oEV9OcQGQds.mft (raw, json)
Hash identifier:          nd75TmSTPvcOH6NWmMoo0P7/daCI4087O+ztoyH/u4s=
Subject key identifier:   B5:A9:6B:D2:F9:CC:71:33:49:95:73:52:12:BE:2A:E0:5B:D0:33:FC
Authority key identifier: C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
Certificate issuer:       /CN=c49eee24deab5520119b6a3da0457d39c40641db
Certificate serial:       01974DE9E5A38845F6813FF618D7AE7995CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
Manifest number:          0EA4
Signing time:             Sun 08 Jun 2025 05:01:03 +0000
Manifest this update:     Sun 08 Jun 2025 05:01:03 +0000
Manifest next update:     Mon 09 Jun 2025 05:01:03 +0000
Files and hashes:         1: eZo07jBCKWD2FYiNfDITWNW5OaU.roa (hash: 09rC6Rc4KHaoiqlZ0+3v+LC/tqWiWb4ZuqXZ8h/EnX0=)
                          2: xJ7uJN6rVSARm2o9oEV9OcQGQds.crl (hash: wK0kJMFYam3nppaRD9l2qo1z1TapLhcjkb/kvtLMvOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:e9:e5:a3:88:45:f6:81:3f:f6:18:d7:ae:79:95:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c49eee24deab5520119b6a3da0457d39c40641db
        Validity
            Not Before: Jun  8 05:01:03 2025 GMT
            Not After : Jun  9 05:01:03 2025 GMT
        Subject: CN=b5a96bd2f9cc71334995735212be2ae05bd033fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9f:52:3f:75:df:65:34:98:1f:d2:07:27:ef:
                    e4:4e:dd:a9:23:72:dd:a2:8d:d1:a2:6c:d9:1b:2b:
                    57:8f:84:d4:e1:c8:90:a5:f0:81:e2:83:11:f7:c7:
                    e2:d3:c7:34:de:86:fe:51:04:fa:2a:a8:69:b1:23:
                    e5:3f:88:50:1b:1e:0a:d4:b7:a9:3d:84:12:10:d6:
                    a2:a5:da:12:1a:b2:ab:a4:a2:30:4a:2b:a5:5a:3d:
                    ec:ae:59:85:fc:2a:23:ff:03:05:ce:07:cd:c5:a4:
                    ea:1d:7e:15:c3:4c:e7:06:09:5f:19:31:05:3e:40:
                    5d:c0:a6:1f:3e:89:fd:c5:f0:eb:21:c2:79:a8:e8:
                    21:74:16:7d:5a:ae:24:46:b8:37:f7:01:49:8b:6b:
                    01:d0:ae:57:44:4c:38:23:e2:c1:2b:15:3e:71:59:
                    a4:cc:4d:eb:b1:53:ae:03:08:f3:da:db:15:13:18:
                    35:01:68:81:5b:fa:12:75:e8:5f:2e:60:3c:2d:eb:
                    40:be:38:6f:8a:3d:a2:c5:73:d7:07:45:53:d6:6c:
                    bd:81:1e:97:22:43:79:d9:24:36:50:17:c2:7b:e6:
                    8d:25:3a:7a:98:60:f8:d9:3a:87:c9:e7:ae:17:6e:
                    be:b1:06:ea:76:9a:94:07:3d:c1:2f:56:f2:20:42:
                    eb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A9:6B:D2:F9:CC:71:33:49:95:73:52:12:BE:2A:E0:5B:D0:33:FC
            X509v3 Authority Key Identifier:
                keyid:C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:37:d6:46:e4:67:34:84:40:cb:c5:ee:40:24:8f:a3:b7:8e:
         2a:3d:a8:59:2e:7d:61:2e:f9:ce:86:60:33:7f:b6:c3:00:d8:
         4a:62:9f:14:63:ea:0e:2f:cc:30:9a:c0:20:5b:11:b1:d0:1f:
         86:98:c5:cd:f5:a4:39:ed:b5:cf:dc:00:0c:26:fd:e2:dd:3b:
         fc:1b:9d:1c:27:f7:7c:e9:b7:61:7d:79:b2:b3:53:4f:51:91:
         de:51:40:1c:00:62:2b:29:bf:ad:2f:08:20:47:8e:c3:0a:77:
         2d:39:c2:ec:8b:89:3d:5d:88:34:8e:e2:b0:2d:20:f5:f2:9e:
         bf:0b:ec:47:bd:a4:44:e3:5c:20:8e:e1:47:2b:7b:87:a3:50:
         3c:3e:6d:39:f4:be:35:be:6b:0b:9c:d8:be:81:d3:03:28:d1:
         e4:6c:cb:cb:f5:00:be:a4:be:88:4e:19:d9:bd:e9:cf:a5:c1:
         50:fa:f9:84:de:0b:49:30:af:be:f3:fe:6a:3c:f3:42:dd:1e:
         70:06:d6:fa:55:c1:dc:36:be:c3:be:41:ed:9d:9f:cd:69:c4:
         fa:0a:ad:d3:35:57:b8:fb:b7:e7:55:ff:6e:3b:85:d9:dd:a8:
         0f:fc:22:d1:5a:13:cc:14:f1:a8:78:38:88:27:56:cb:5b:ec:
         df:3b:a4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:37:22 2025 by rpki-client