Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.mft
File:                     L761tTgJwKseTgF9tL9QeIFa5mo.mft (raw, json)
Hash identifier:          +XtEn2iXByfBFEMr9YejGpOzk+uMt6HaiKPfDYBeoTA=
Subject key identifier:   9E:E0:33:71:42:11:C8:14:59:8A:0D:F8:9D:31:01:B7:76:A2:36:CD
Authority key identifier: 2F:BE:B5:B5:38:09:C0:AB:1E:4E:01:7D:B4:BF:50:78:81:5A:E6:6A
Certificate issuer:       /CN=2fbeb5b53809c0ab1e4e017db4bf5078815ae66a
Certificate serial:       01975B0022AFEA4E6F6B3E6DF85B6FEDB955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L761tTgJwKseTgF9tL9QeIFa5mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.mft
Manifest number:          3B
Signing time:             Tue 10 Jun 2025 18:00:24 +0000
Manifest this update:     Tue 10 Jun 2025 18:00:24 +0000
Manifest next update:     Wed 11 Jun 2025 18:00:24 +0000
Files and hashes:         1: L761tTgJwKseTgF9tL9QeIFa5mo.crl (hash: vYwQwYn0tXsNgzu2kDKqZXvfrVLKmdtNx9uNENS9aZ0=)
                          2: bi2rgr1mwihMTviNCzdJhqMEHIE.roa (hash: 9YBEOHgs2y2rTJyOfEqp4CwAwfBA0dewuMGVkGf2YyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L761tTgJwKseTgF9tL9QeIFa5mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:00:22:af:ea:4e:6f:6b:3e:6d:f8:5b:6f:ed:b9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fbeb5b53809c0ab1e4e017db4bf5078815ae66a
        Validity
            Not Before: Jun 10 18:00:24 2025 GMT
            Not After : Jun 11 18:00:24 2025 GMT
        Subject: CN=9ee033714211c814598a0df89d3101b776a236cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:44:d9:c1:83:22:0a:0e:d6:04:a0:49:66:89:
                    28:2e:57:d8:c0:dd:64:75:60:8f:12:67:5b:cc:4f:
                    d1:a6:ab:36:59:e1:4a:47:16:2c:b7:72:f6:3b:36:
                    77:fa:6a:cc:ea:0c:b3:67:03:3f:32:be:5e:8a:f2:
                    4e:3e:bb:bf:b7:a6:3f:58:60:65:10:00:1d:96:1c:
                    90:7d:89:8c:0e:90:37:db:64:eb:89:57:20:16:1e:
                    c7:16:de:a4:36:69:2d:bb:5f:41:87:15:4c:ef:0c:
                    36:8c:d6:1d:11:fa:90:6b:82:10:c7:23:70:3b:9c:
                    e4:90:8e:80:3a:9a:88:fb:63:a6:5b:78:bc:d2:58:
                    b6:30:15:74:91:70:25:65:1d:27:ed:c2:58:cb:28:
                    bb:15:69:18:6b:f5:44:49:97:ad:9f:58:40:bc:09:
                    d6:b2:ab:02:94:73:2f:db:b5:25:6e:87:9f:e0:1e:
                    52:ff:e2:95:b0:72:58:73:8b:4f:99:7f:32:2b:c6:
                    fa:6a:ab:55:a7:1b:54:97:bb:01:58:1d:0b:2f:46:
                    10:ba:6d:dd:07:44:4d:6d:61:b5:91:4b:97:ea:16:
                    7e:73:91:d9:dc:e3:18:56:11:6b:d7:60:da:a0:59:
                    a3:74:58:df:fb:72:ed:7e:b4:fc:db:56:c8:4e:c0:
                    bf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E0:33:71:42:11:C8:14:59:8A:0D:F8:9D:31:01:B7:76:A2:36:CD
            X509v3 Authority Key Identifier:
                keyid:2F:BE:B5:B5:38:09:C0:AB:1E:4E:01:7D:B4:BF:50:78:81:5A:E6:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L761tTgJwKseTgF9tL9QeIFa5mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:4d:a3:eb:cb:41:42:3c:b4:9f:47:41:2e:32:30:c7:9a:7e:
         12:01:de:af:31:3b:e7:3f:62:55:2b:45:85:0f:ad:af:f2:9e:
         29:45:c3:3c:10:fc:e6:9a:47:df:30:37:10:1c:22:9b:ee:f6:
         26:8b:89:62:48:6a:ae:8f:e8:d9:49:0c:2b:a1:4f:8e:37:ea:
         06:d0:a7:61:f7:91:30:a2:20:3d:33:86:a7:44:dc:04:b8:88:
         30:8c:28:09:6b:89:66:3e:25:a6:79:66:4c:e2:b1:5a:17:7a:
         06:1c:b8:86:9e:10:f5:61:5a:b5:97:e2:18:00:04:c5:1b:36:
         42:6b:5d:e2:1a:52:20:d0:95:11:53:2c:01:be:29:37:f4:81:
         ef:20:58:14:95:3d:eb:5a:bc:c8:f6:b3:87:c9:79:70:6f:fe:
         b5:af:8e:c9:f3:17:68:5a:2c:a3:2d:fd:80:a8:2f:64:8c:1b:
         e5:d4:4d:1c:1a:49:38:a4:06:37:37:32:2e:bf:bc:29:7e:14:
         92:f3:05:f6:0c:b5:47:08:2a:60:a7:52:69:da:01:fa:17:ad:
         1e:f2:ac:7f:e7:c1:fa:a7:a2:6f:38:b2:84:58:09:33:b6:04:
         10:38:98:49:f4:39:6f:5e:b0:f2:78:b8:4b:cc:49:64:3d:71:
         9c:9d:90:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 22:11:32 2025 by rpki-client