Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
File:                     E_OtQPlu1efznY2eGWq_D6I4How.mft (raw, json)
Hash identifier:          hGKfhC3AX9uMKNN95QrRCrG/XYfjcwDZ2dkvoyTbv+4=
Subject key identifier:   59:BD:84:CC:38:87:14:D9:3F:B2:10:6A:DA:40:02:4E:4D:82:42:8B
Authority key identifier: 13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C
Certificate issuer:       /CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
Certificate serial:       01974BC3E75F596E156863A7E1AC7ADACCC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
Manifest number:          10C3
Signing time:             Sat 07 Jun 2025 19:00:19 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:19 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:19 +0000
Files and hashes:         1: E_OtQPlu1efznY2eGWq_D6I4How.crl (hash: hxRq3fIajjVBuaUDFW17EdhUhn/jishdq7trZu5Qi9s=)
                          2: z7S0Dz882RLcbziuzTp5d0_DNew.roa (hash: KUS+jL9qYhHGYv1E9XE/X3yjSFhxo3sbNNAyJ3Cg4aE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c3:e7:5f:59:6e:15:68:63:a7:e1:ac:7a:da:cc:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
        Validity
            Not Before: Jun  7 19:00:19 2025 GMT
            Not After : Jun  8 19:00:19 2025 GMT
        Subject: CN=59bd84cc388714d93fb2106ada40024e4d82428b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9d:98:20:5d:fa:b2:3c:cc:6d:79:bb:f4:75:
                    cb:ce:88:a7:cc:ae:7b:fd:19:ef:c8:3b:41:60:73:
                    52:f1:97:48:5c:1d:fb:15:2d:4e:8e:41:66:23:71:
                    3d:80:bd:d1:1b:6f:a8:7c:31:ba:09:fb:86:76:88:
                    0d:5c:5e:04:17:90:34:0e:64:ba:d1:6b:2b:19:01:
                    8a:a3:6a:91:52:8d:5f:dd:3c:f3:2e:11:ef:d4:12:
                    ae:a7:df:fd:b1:70:b9:6c:35:b6:90:1b:79:0e:79:
                    40:82:9e:a2:43:e7:34:28:f8:8e:24:88:1d:21:69:
                    e3:a7:7e:87:65:39:1e:1c:74:1f:22:bd:a9:9a:2b:
                    46:22:04:d5:5b:dd:1c:1f:5c:e3:fc:3c:d5:4d:65:
                    75:43:7c:0f:88:78:2e:8a:b0:a7:91:d3:09:a3:65:
                    7f:a2:60:65:ca:cc:15:28:f6:1b:02:9b:78:31:0c:
                    66:28:6f:43:58:e8:a9:32:4a:a0:02:57:ea:ff:c7:
                    a3:00:70:bb:5a:48:f4:87:01:0a:a6:cb:46:5c:39:
                    ef:d8:09:7b:9d:5f:f7:7e:09:d2:f8:24:67:34:8a:
                    56:71:f8:bf:e6:61:c1:0d:d1:9b:a2:09:25:db:04:
                    a1:95:68:15:2d:57:71:50:fe:4c:44:7c:af:3c:e0:
                    4f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BD:84:CC:38:87:14:D9:3F:B2:10:6A:DA:40:02:4E:4D:82:42:8B
            X509v3 Authority Key Identifier:
                keyid:13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:8b:42:54:c3:3d:dd:8f:f5:d8:fa:e7:8d:6d:7a:3a:af:d8:
         89:7e:de:85:b9:8d:f3:3e:7f:44:f4:bf:a4:b2:49:d9:e5:ed:
         4b:dc:cf:cc:fe:d7:91:86:47:c9:f1:3a:5a:5c:74:2c:c8:4a:
         c8:c2:06:9c:8e:10:85:f1:a2:8e:c3:a5:0d:a0:bd:60:7c:f8:
         1a:0f:06:fe:6c:51:2e:2e:05:f4:24:28:9c:ed:0e:b6:e2:3a:
         4a:c1:df:70:0a:92:19:c2:89:fd:45:63:d3:9d:17:db:fa:4c:
         be:32:3d:37:07:77:c2:2e:98:4c:0a:57:16:88:d1:5b:bc:e0:
         01:ad:c4:5a:a0:59:d3:ce:26:69:02:f9:db:0f:4b:a8:3f:0b:
         25:6c:0f:73:84:8f:eb:43:3f:ea:ec:6c:da:93:21:34:bd:f4:
         8d:f4:b7:19:fc:14:8a:fc:31:86:ca:f4:ac:76:be:05:d5:f5:
         1a:b6:34:6a:fa:9d:a7:97:d2:24:27:1e:4c:e9:37:f2:bc:9e:
         4c:7d:e1:80:3d:b7:38:ea:42:fa:c3:c7:48:e6:7c:d6:a8:96:
         d4:48:2d:ae:52:18:f3:b6:fc:e0:b7:df:f4:2c:64:28:98:08:
         64:df:57:24:13:54:c4:7f:cd:58:66:d9:33:e3:0d:68:97:d2:
         cd:c9:a5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:20:56 2025 by rpki-client