Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
File:                     7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft (raw, json)
Hash identifier:          lZVybuu/ZL0OAE8WvSHkFUWQhzeojR/3ghVhr5XFGgI=
Subject key identifier:   AC:65:72:3D:D0:AA:9A:4A:62:B4:85:18:E2:61:B5:EC:FE:E5:7C:2A
Authority key identifier: EE:9F:79:AB:1D:59:84:7F:F1:F2:E9:61:21:8C:15:9A:F2:64:D8:35
Certificate issuer:       /CN=ee9f79ab1d59847ff1f2e961218c159af264d835
Certificate serial:       01974E209B8F70768B312547E5A9C38B2AFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
Manifest number:          0E9D
Signing time:             Sun 08 Jun 2025 06:00:49 +0000
Manifest this update:     Sun 08 Jun 2025 06:00:49 +0000
Manifest next update:     Mon 09 Jun 2025 06:00:49 +0000
Files and hashes:         1: 1-FL3J5HDX1AzUYYBni119Abw4So.roa (hash: Pv3mjZGTlo0qp9Lt3NOhk+KT7N8R0d7IbCiwPWeiu1s=)
                          2: 7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl (hash: p8PeKsZFPFYDub0UU6XdSHKmx1hrXVfB5EaFSQFIA3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:20:9b:8f:70:76:8b:31:25:47:e5:a9:c3:8b:2a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee9f79ab1d59847ff1f2e961218c159af264d835
        Validity
            Not Before: Jun  8 06:00:49 2025 GMT
            Not After : Jun  9 06:00:49 2025 GMT
        Subject: CN=ac65723dd0aa9a4a62b48518e261b5ecfee57c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:28:08:60:c3:89:06:58:07:15:e0:6b:fb:91:
                    bf:65:e3:2d:17:06:5a:b3:24:98:f4:11:30:04:51:
                    5d:92:83:0c:65:b0:32:32:41:4a:9e:6d:00:8c:b3:
                    62:42:7f:7f:49:fd:5d:8f:f7:2c:88:37:f9:5e:bf:
                    87:33:50:c9:71:f1:3c:fc:89:5c:80:22:ba:58:00:
                    8a:02:4f:23:64:05:f6:05:bf:17:1a:a8:90:6b:73:
                    60:a3:07:be:93:47:cc:34:a0:7d:e3:87:fd:31:f0:
                    28:dd:68:23:47:4f:59:b1:06:c6:11:e8:ef:d7:29:
                    45:5d:cc:97:16:a7:fb:42:56:4f:45:7b:c2:31:eb:
                    29:9d:08:34:cc:30:64:3c:b8:06:bf:46:ef:9b:07:
                    4d:9e:54:47:9a:c8:72:d9:64:ab:ae:d3:c1:fb:d4:
                    37:76:69:b8:2d:1b:87:fe:88:7f:88:27:0a:ae:01:
                    15:18:23:59:ac:8c:4d:57:27:52:8b:86:52:14:f3:
                    42:b0:15:f6:69:a6:88:9e:fa:f6:28:9f:cb:3f:4a:
                    77:e8:05:1f:00:79:a7:dc:75:12:a3:19:d5:9e:c1:
                    09:4e:70:8f:d7:44:10:95:b6:3b:96:8e:6f:5c:72:
                    94:cb:6e:19:c9:4f:aa:65:4c:56:26:a4:9d:7d:ed:
                    ce:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:65:72:3D:D0:AA:9A:4A:62:B4:85:18:E2:61:B5:EC:FE:E5:7C:2A
            X509v3 Authority Key Identifier:
                keyid:EE:9F:79:AB:1D:59:84:7F:F1:F2:E9:61:21:8C:15:9A:F2:64:D8:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:35:0f:0c:c3:21:e5:e8:ae:0a:83:f3:1c:a2:fe:1a:d2:b4:
         c2:22:82:60:c8:a3:9a:8b:29:84:d1:de:0c:1b:ae:9f:3b:09:
         2a:b3:6d:46:e8:ff:15:60:35:6c:18:4e:20:e4:9f:be:a2:d3:
         b0:ce:ac:e0:38:84:eb:24:75:ea:2e:40:53:b6:55:25:2e:38:
         4e:e9:ae:04:54:ea:b0:22:00:11:c5:5a:f0:48:3d:6d:04:69:
         48:0a:1d:d1:42:00:4f:cc:50:9c:4b:7a:9b:71:75:93:bd:12:
         97:f4:1f:85:85:7e:d7:df:a1:c7:a2:b1:c9:45:20:92:73:b0:
         56:79:39:ac:0f:c5:4c:70:73:be:a5:43:6c:34:98:e5:ed:01:
         09:fe:43:ca:5f:b1:a9:ce:4f:03:bc:39:f0:9c:84:94:33:41:
         cf:a3:7d:73:d4:96:4b:e8:cd:c2:86:64:78:8e:32:5a:f5:89:
         b9:f6:fb:65:8b:b0:51:ea:cd:23:a3:0d:55:7d:4d:88:39:5e:
         6d:6d:ee:e8:50:f2:1a:34:e1:d9:b0:c8:27:1c:38:d1:0d:81:
         a7:42:29:eb:c8:4c:fe:2c:3a:ea:21:c8:8e:9c:17:16:70:74:
         1b:44:a8:43:bb:28:52:d0:83:5c:ec:88:4a:40:55:49:c1:5a:
         2b:20:d8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:48:00 2025 by rpki-client