Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
File:                     rpPMjMqB-gDcU-e4B46RtcEbou8.mft (raw, json)
Hash identifier:          iEuWykKwP4f6v7A5Qh69xI7QQOCLINfTdSkkcc/Xnj0=
Subject key identifier:   EA:23:C0:48:EF:BF:94:2B:D9:16:7A:33:75:94:49:A8:E0:52:17:10
Authority key identifier: AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
Certificate issuer:       /CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Certificate serial:       0197470BCABB73946C3D75143CE6C0E419E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
Manifest number:          1084
Signing time:             Fri 06 Jun 2025 21:00:44 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:44 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:44 +0000
Files and hashes:         1: crHez21ajs4tpxPy7D0FO2U5bxU.roa (hash: gCTLggUH/wf+1HoWxwo5Fpy8idWpj7d4gVSkhA0S2qM=)
                          2: rpPMjMqB-gDcU-e4B46RtcEbou8.crl (hash: FqFgtS7uPOKDVlb0jM4OptnwjsNakJ/qFpeE7wmDlTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:ca:bb:73:94:6c:3d:75:14:3c:e6:c0:e4:19:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
        Validity
            Not Before: Jun  6 21:00:44 2025 GMT
            Not After : Jun  7 21:00:44 2025 GMT
        Subject: CN=ea23c048efbf942bd9167a33759449a8e0521710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:39:90:82:23:7c:eb:2a:bb:0b:60:73:6d:e3:
                    bd:9f:9a:3b:75:3a:6e:ff:eb:d1:e4:e2:ef:c8:4e:
                    f3:27:7f:c5:f1:3a:43:00:45:35:9d:ce:38:13:6d:
                    20:1e:95:6a:59:2f:6c:c4:7c:ab:73:6a:b4:85:74:
                    02:dc:6f:6c:43:21:d5:a6:d6:33:ed:21:cd:79:0a:
                    46:56:84:59:e4:ac:23:70:61:e3:a9:ae:86:a5:80:
                    d9:ad:04:6f:f0:64:96:0d:67:15:4c:b6:2b:2e:ca:
                    30:37:46:37:c7:7d:af:f0:2a:e9:f6:54:e9:da:da:
                    e4:58:b8:8b:b5:2f:e5:e6:64:82:70:6e:5e:67:3c:
                    5d:e5:f8:53:9e:8d:8c:48:3a:48:89:a1:17:c3:bb:
                    14:14:09:49:ed:d3:3f:41:bc:e8:c6:31:ed:5d:32:
                    7f:ee:cf:6f:71:fc:1c:87:65:88:34:66:7d:72:34:
                    8b:3c:0e:ca:4a:20:f7:6f:56:bc:ea:07:29:89:bc:
                    f0:75:ea:96:2a:d9:bb:7a:e2:20:20:3c:95:e3:98:
                    ab:dd:09:7c:71:9a:28:d5:ce:a1:e2:8c:84:07:6e:
                    38:c4:79:c3:35:44:e3:6f:db:f9:31:4d:c0:22:3b:
                    44:a1:ae:aa:29:d3:7a:8a:96:3f:d8:72:39:13:a6:
                    80:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:23:C0:48:EF:BF:94:2B:D9:16:7A:33:75:94:49:A8:E0:52:17:10
            X509v3 Authority Key Identifier:
                keyid:AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ba:52:b4:f9:7a:89:1f:83:1d:58:28:e4:cd:ac:a7:f0:ae:
         f3:4c:8b:cc:26:53:fe:58:9a:c8:6a:aa:f9:5a:09:4d:5f:3f:
         38:b1:76:6d:90:a1:95:88:27:42:ef:72:43:48:7e:a7:b3:8e:
         95:e1:48:aa:25:fe:13:c6:3b:43:97:f2:67:2e:70:ea:8a:6c:
         4f:a0:bb:34:2b:f4:d5:d1:07:50:c7:1b:57:85:e4:5c:71:93:
         58:b6:11:85:fe:da:c7:30:95:4f:67:22:84:99:00:f7:90:49:
         1f:61:87:d3:b0:39:08:70:55:e1:d6:d9:88:a8:29:05:ab:ed:
         0a:d0:25:39:1c:53:ab:10:ae:71:a8:90:d7:27:b9:ef:3c:d1:
         d0:b7:fc:bc:2d:ea:c8:87:08:6d:c6:d2:2a:39:b6:f0:79:bd:
         c3:b3:86:99:ee:b2:39:c4:dd:04:98:f6:45:e4:7d:b8:29:97:
         9b:e7:e4:f1:1c:9c:b5:0d:23:a8:70:dd:48:a2:4b:db:72:28:
         ac:bb:42:aa:c4:17:c5:44:b8:9d:cc:8c:92:ee:cd:6a:8e:89:
         09:98:87:d8:3a:5b:52:e6:03:8a:c2:17:08:f5:86:b3:f6:56:
         38:6b:c8:b1:eb:92:c8:07:56:e8:5f:ea:70:14:de:2e:8c:c2:
         eb:61:91:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:34:47 2025 by rpki-client