Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
File:                     52CwD7DMWV_lQtYibj8KPlFl8cw.mft (raw, json)
Hash identifier:          mg2bkuXc7GDeMs2UrQahywJNWLsYRAW2OhXZaV89s+k=
Subject key identifier:   BA:E2:40:63:31:04:EA:85:7C:B9:15:41:4F:9B:C2:2D:5C:F1:4A:2B
Authority key identifier: E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC
Certificate issuer:       /CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
Certificate serial:       0197469E7154B67920589C866F7C90076802
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
Manifest number:          0523
Signing time:             Fri 06 Jun 2025 19:01:18 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:18 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:18 +0000
Files and hashes:         1: 52CwD7DMWV_lQtYibj8KPlFl8cw.crl (hash: VVr2V4o8IMb3CY2wnO8DZA5a1bu5601SA2Jj73m3GQw=)
                          2: rKGVKqiZpnbfrBEvUIL3z2bcD3w.roa (hash: GqgeMXx+9CHaMaMRbd16hQlhBApo1up4EaH0YwEA5E8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:71:54:b6:79:20:58:9c:86:6f:7c:90:07:68:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
        Validity
            Not Before: Jun  6 19:01:18 2025 GMT
            Not After : Jun  7 19:01:18 2025 GMT
        Subject: CN=bae240633104ea857cb915414f9bc22d5cf14a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:bf:28:10:36:d4:43:7c:0a:84:b9:a8:14:
                    70:9d:ea:a6:34:7b:3d:df:cc:2e:85:18:58:22:45:
                    1d:86:03:a4:7e:40:ff:75:e9:26:c1:81:55:c5:80:
                    85:8f:68:31:ef:67:7d:aa:52:1d:01:e8:7a:bf:ec:
                    f8:66:26:11:41:61:66:2f:06:12:29:b5:b4:c6:67:
                    6c:1c:26:0c:de:6a:8f:7c:3b:72:ab:44:06:89:ad:
                    ad:a6:44:b6:a1:98:e9:36:43:94:e7:91:f3:99:52:
                    6a:68:51:39:fe:c4:fb:f6:46:cc:5d:43:49:bd:2a:
                    c3:2d:f7:2e:e5:14:bb:b7:4d:80:d1:1f:c6:14:fe:
                    72:92:e1:2b:b2:05:ae:cd:7e:72:d7:98:9f:65:a3:
                    4a:53:ca:89:be:6e:4b:c8:2f:34:52:b8:73:09:4b:
                    14:ad:2c:e6:3f:6d:03:64:16:83:9b:8a:89:df:7d:
                    e9:89:9a:3f:fd:46:11:ed:c7:20:18:e5:49:49:07:
                    b0:ba:b6:a3:3e:dd:8f:44:89:75:98:bd:b4:a5:71:
                    ef:37:c8:d0:e9:b8:62:97:8e:88:41:9f:17:af:e0:
                    76:8c:86:f5:7a:85:43:c8:cd:7a:77:62:a6:dd:7e:
                    5b:70:91:c4:39:9d:91:bd:78:a6:3c:b2:92:e9:08:
                    fc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E2:40:63:31:04:EA:85:7C:B9:15:41:4F:9B:C2:2D:5C:F1:4A:2B
            X509v3 Authority Key Identifier:
                keyid:E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:10:02:3d:a8:07:35:db:15:5f:0c:22:26:e2:86:96:9e:f6:
         f2:8e:12:54:64:15:01:80:2a:40:de:9d:fa:ca:81:cd:5f:72:
         e0:d2:ce:cb:a0:1f:ae:cb:fd:7f:b5:f4:29:2e:a2:ce:c3:68:
         ca:d2:0b:1c:c9:90:63:a9:a8:a6:12:28:b1:74:39:f5:f9:a4:
         e8:35:a0:c0:e8:a7:38:e1:d9:41:67:90:a1:eb:f3:7c:db:59:
         29:51:ff:4d:9c:65:8d:8b:03:58:4f:7e:2e:7c:b5:39:a8:41:
         d5:1b:f5:79:c7:b1:3f:d1:91:44:40:6c:80:bc:17:04:c3:9a:
         6b:f1:df:da:14:c8:3d:9a:29:5b:64:60:61:3b:36:51:9d:06:
         03:c4:47:97:2c:c9:d4:9b:58:bf:48:ac:a4:1a:4f:b5:17:1a:
         7a:21:1c:a1:f4:4a:03:f0:b7:01:49:7d:f5:aa:a4:0c:c2:ec:
         3e:0b:99:5c:14:2b:33:df:9f:b8:fc:cd:fb:6a:94:6f:c8:3e:
         49:f4:6f:2a:51:47:46:e8:34:ba:1c:68:87:b5:dd:66:77:20:
         ef:bc:b9:dc:dc:cc:bf:38:81:71:cc:13:0f:ed:d6:e4:78:01:
         31:77:37:30:9a:41:54:58:1b:f9:85:b0:62:69:5a:43:f2:0e:
         3a:c5:cc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:31 2025 by rpki-client