Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
File:                     t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft (raw, json)
Hash identifier:          xzMe0KWAybwKPOOOKJrrNV61TchIhlQkiCCVvezoGm4=
Subject key identifier:   F0:1D:EA:0E:62:EC:44:4F:5A:AD:E8:EE:3D:F9:7C:D1:6F:69:2D:78
Authority key identifier: B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7
Certificate issuer:       /CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
Certificate serial:       01974779C3C25E1564EB6C359D9058A82481
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
Manifest number:          047E
Signing time:             Fri 06 Jun 2025 23:00:51 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:51 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:51 +0000
Files and hashes:         1: CrtWfCL7i9NVihI1TfWhriARtZk.roa (hash: GvkPNrJjcp+5LqZSEnG2rMaRPFf5goGwB+oAHuiRPHA=)
                          2: t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl (hash: TkSooCcv8cxAndH1K80KLK2xUq2JxciK8tdK8iGc2Ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:c3:c2:5e:15:64:eb:6c:35:9d:90:58:a8:24:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
        Validity
            Not Before: Jun  6 23:00:51 2025 GMT
            Not After : Jun  7 23:00:51 2025 GMT
        Subject: CN=f01dea0e62ec444f5aade8ee3df97cd16f692d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bf:83:4d:5f:29:98:0e:70:a4:2f:5c:6d:f4:
                    5f:fc:b5:51:44:e2:c2:c7:82:b4:97:54:da:6c:af:
                    f5:ec:63:36:44:81:17:7f:6e:ba:ab:d4:57:af:21:
                    b9:92:85:31:61:6b:94:a1:10:84:b3:b6:5d:3b:61:
                    8c:0a:f0:eb:b3:c4:75:18:d2:26:8c:fb:05:80:90:
                    33:df:d8:47:7d:cc:4a:42:fc:71:d0:84:fa:a5:53:
                    03:fc:1b:3a:d7:62:83:d8:e3:1e:dd:a2:57:3a:d4:
                    9f:1f:27:c0:e9:c8:4b:b5:10:98:54:2a:22:55:f4:
                    e5:3a:fd:ae:bf:17:d5:c1:25:87:49:df:91:87:fb:
                    d7:b8:cf:ca:d6:1c:36:2d:0e:fb:d2:89:36:2f:51:
                    9c:bb:cd:cf:41:e5:52:da:af:2c:e8:42:8e:30:fa:
                    6b:75:ba:42:70:ec:13:8e:98:ca:9e:55:2d:f9:cf:
                    a9:77:86:f9:b9:88:9e:84:99:62:1a:53:d8:02:b1:
                    ae:d6:c2:98:23:6b:b2:d4:a9:2f:b4:6e:5a:15:b3:
                    2b:af:bc:b6:f5:78:96:d3:3d:3e:2a:81:18:af:60:
                    65:48:bd:a0:fb:b7:7a:4c:71:ed:37:fa:eb:2b:67:
                    06:22:32:f3:af:e0:11:ea:e9:40:e0:98:59:0c:86:
                    7a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1D:EA:0E:62:EC:44:4F:5A:AD:E8:EE:3D:F9:7C:D1:6F:69:2D:78
            X509v3 Authority Key Identifier:
                keyid:B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f8:07:0f:f5:4a:19:e3:8a:fa:e3:28:b4:81:03:d2:74:5e:
         88:be:ba:fa:0e:04:c3:16:50:c1:93:a9:eb:23:16:86:4e:0f:
         d2:65:35:21:3b:60:59:89:cc:87:d1:2b:6b:ed:20:b2:9f:10:
         26:38:3e:bd:01:15:2b:a8:40:6d:31:c7:df:ba:fe:79:6b:ea:
         dc:a8:e8:0a:a7:88:1a:0c:7b:87:76:f0:0f:f3:2f:83:3d:2a:
         66:d5:4e:3f:81:3b:24:ae:fb:55:fb:a6:75:dc:93:88:af:a4:
         53:e3:eb:35:17:bb:1c:53:c8:38:24:50:7a:c9:aa:34:09:0a:
         3a:d7:f9:39:18:59:9a:85:93:53:eb:5c:fe:53:ee:61:42:09:
         ff:80:9a:8a:29:12:9c:f0:2e:44:6f:f9:81:16:c2:0d:47:dc:
         95:e8:61:a9:86:a1:6d:a5:9d:5f:8c:71:1d:90:54:36:d4:d1:
         0c:77:f1:45:18:a0:8c:c8:6d:f4:1b:9e:1a:41:59:0a:3f:99:
         f5:3d:33:4d:e9:8d:48:29:9f:2d:0f:b1:d8:d4:0a:d8:b3:b4:
         48:74:5a:69:18:5e:ce:c2:26:37:62:bd:ac:42:56:7d:ba:80:
         7f:86:26:7d:de:99:12:be:d2:a7:f7:2f:aa:6f:64:aa:47:24:
         29:2a:00:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:24:04 2025 by rpki-client