Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
File:                     RD7UrkP6GQwQ_SxToQ494KvZi3g.mft (raw, json)
Hash identifier:          fTpBuA+9lIfjxKq95BtKzZebmA44Bmda4/y6Oko4HNE=
Subject key identifier:   F9:6A:D8:50:D7:D4:FA:BC:55:AE:79:C7:DC:6E:76:7A:35:1C:19:C6
Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
Certificate issuer:       /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Certificate serial:       019750B38FC22CA244345BECAD1C4D26F38F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
Manifest number:          0EF5
Signing time:             Sun 08 Jun 2025 18:00:34 +0000
Manifest this update:     Sun 08 Jun 2025 18:00:34 +0000
Manifest next update:     Mon 09 Jun 2025 18:00:34 +0000
Files and hashes:         1: KOQetqGXnr-_jcGLAAJM_EFGncg.roa (hash: J0d7xN2IM4WNzPNloLfdHQukDngK3dzlCPcUmKT74Iw=)
                          2: RD7UrkP6GQwQ_SxToQ494KvZi3g.crl (hash: fe4fWRPGHbcn/n3sgVWmsU54cCS5Hm53EjXgE2OiqCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:b3:8f:c2:2c:a2:44:34:5b:ec:ad:1c:4d:26:f3:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
        Validity
            Not Before: Jun  8 18:00:34 2025 GMT
            Not After : Jun  9 18:00:34 2025 GMT
        Subject: CN=f96ad850d7d4fabc55ae79c7dc6e767a351c19c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e9:02:a2:0e:ac:04:12:d0:22:4b:2c:bb:b4:
                    33:81:c9:ae:1e:86:fb:03:69:99:d7:d6:86:66:b0:
                    2b:00:75:71:89:59:ec:dd:ee:10:82:0f:35:f2:97:
                    ce:02:ba:42:89:ce:82:7c:99:51:02:f8:a1:77:1d:
                    13:61:84:2b:4a:3b:66:14:6c:a9:ec:f4:48:11:35:
                    3b:9b:33:25:1b:01:71:3c:88:24:d4:5f:41:ed:41:
                    5a:2c:c0:fb:d2:3b:0a:d1:e9:31:ff:10:23:ce:1c:
                    d9:b2:3a:5d:e3:9d:8e:ed:f9:a4:3b:60:bb:fd:27:
                    7a:d6:d6:83:21:37:60:0a:a8:43:a4:68:9a:5b:9a:
                    59:ac:70:ee:7e:36:f1:b1:6b:0c:d2:5e:52:2e:f3:
                    89:ba:2d:3d:d6:c8:ab:90:ff:53:95:f7:0c:0e:07:
                    f1:7e:37:b4:5f:a8:cb:d1:d2:9a:75:ab:80:0b:81:
                    59:0c:ae:c0:70:03:2e:e2:c1:2f:d0:39:5b:ad:ed:
                    29:75:d2:ec:81:a4:b7:42:d1:3d:03:fa:ca:3b:06:
                    3f:a0:df:35:40:c2:c9:45:10:83:8f:c7:26:ab:8e:
                    56:3d:f2:a4:93:34:7d:d6:25:ce:42:a3:9b:7c:62:
                    cb:3a:52:56:af:94:37:bd:d9:7a:ed:be:50:7a:4e:
                    2a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6A:D8:50:D7:D4:FA:BC:55:AE:79:C7:DC:6E:76:7A:35:1C:19:C6
            X509v3 Authority Key Identifier:
                keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:99:b1:e5:fb:53:99:a1:8c:91:57:24:fc:3d:56:bd:c9:bb:
         5d:15:fa:62:38:96:62:80:db:af:2a:ff:2c:1b:ec:91:8a:06:
         bd:e6:ec:f8:0e:4d:29:60:0e:6b:27:41:e0:b0:46:f4:8b:92:
         c1:13:bd:6c:82:78:32:1b:30:7a:c8:3f:f7:7d:72:40:f7:01:
         33:94:dc:ab:30:e3:74:98:de:eb:70:cc:e3:15:99:71:72:da:
         33:5d:a8:6e:e1:5c:d9:22:b4:2e:db:39:97:09:8f:12:19:61:
         68:12:24:e7:9d:94:78:74:09:37:86:a9:44:88:75:a2:37:64:
         72:cc:84:dc:25:9c:83:ef:b4:11:16:d1:39:60:87:23:89:72:
         ea:ff:12:00:95:c5:00:99:49:0f:d1:6a:4a:e3:ba:9b:e4:a0:
         14:91:da:bf:1d:73:a2:7e:13:b7:95:2d:b2:3e:00:ec:17:87:
         99:35:21:87:52:45:a5:6b:7c:92:5c:d8:9d:d8:d6:64:46:cb:
         f2:1f:de:40:cb:a8:e0:f7:5d:98:e0:c7:bd:25:db:86:b5:8a:
         a3:f7:3f:9e:a8:7a:28:d0:bf:b5:1d:b2:a8:4d:e1:bb:41:e5:
         a5:58:21:cf:e5:e2:88:44:b0:a1:cb:fe:fd:11:2f:02:cb:bb:
         13:5a:df:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:16:06 2025 by rpki-client