Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
File:                     52IQ44sWkJp-6P47jQZkfwZlKSs.mft (raw, json)
Hash identifier:          l2OP+ADcIXL8Vv7yiMHD/EoKeEYCSXIdA0ynnoxjQMY=
Subject key identifier:   15:B2:19:DD:AD:C8:18:CF:E1:14:C7:9C:3E:D7:F7:33:50:DF:77:74
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Certificate issuer:       /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial:       01974FA10123A2E6016366D6CD91B9621498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
Manifest number:          087A
Signing time:             Sun 08 Jun 2025 13:00:40 +0000
Manifest this update:     Sun 08 Jun 2025 13:00:40 +0000
Manifest next update:     Mon 09 Jun 2025 13:00:40 +0000
Files and hashes:         1: 0O73PaTyLOlo4DtC-zfVh-so0po.roa (hash: 8d52pgK7PtxKWsBsAJptabjpB2sUfgsDROP6Cr/a/W0=)
                          2: 3cLja0Qn7ryI3brAvn_huolef7k.roa (hash: uL09pyaPRqlSpX4587/io6caQs2mRPwnhcXeei1t0Y8=)
                          3: 52IQ44sWkJp-6P47jQZkfwZlKSs.crl (hash: qkHS5YaV94YHdStYX4G8ECvlO2tEIX0yvlge03OA/Tg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:a1:01:23:a2:e6:01:63:66:d6:cd:91:b9:62:14:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
        Validity
            Not Before: Jun  8 13:00:40 2025 GMT
            Not After : Jun  9 13:00:40 2025 GMT
        Subject: CN=15b219ddadc818cfe114c79c3ed7f73350df7774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5b:37:63:6e:8c:0c:a6:5a:45:24:58:83:f4:
                    99:9c:f8:9b:e2:62:fe:f6:7f:3e:25:a3:88:7b:18:
                    84:58:52:f0:16:12:35:8d:b6:b4:ec:85:16:51:3e:
                    20:12:f4:36:ad:e9:f1:ec:ff:3a:f2:0d:be:af:a6:
                    c9:aa:cd:30:fc:90:ab:2e:2f:59:64:16:80:21:37:
                    45:9e:57:c4:78:f6:81:d3:2d:31:b1:f1:b4:22:c3:
                    c1:9d:26:e0:43:54:04:91:5d:f4:e8:af:aa:3f:a6:
                    cc:bb:ae:02:0c:f8:0e:87:12:27:a5:70:15:0f:6a:
                    b4:58:62:41:f2:b9:e3:14:a8:ee:21:00:3e:c0:b5:
                    23:33:7c:a9:39:eb:5e:19:69:f8:8d:83:6d:c7:42:
                    02:25:9b:59:76:d7:e1:e8:74:fe:66:31:48:f1:d8:
                    77:db:f1:be:90:b0:ec:5b:39:3b:68:ab:4e:8a:8d:
                    87:e3:6f:73:79:90:53:56:bf:0e:92:61:43:e6:16:
                    42:f0:1d:94:ff:c4:7e:32:3e:1e:b9:e8:a9:c1:67:
                    99:38:92:77:d2:ba:06:a2:d9:e7:5f:75:f9:4e:1c:
                    7b:e2:bb:a4:b9:bd:eb:96:47:fc:40:e4:35:e7:c5:
                    a9:13:07:59:f5:ab:bb:a5:fc:cc:2f:c5:8d:74:1e:
                    c2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B2:19:DD:AD:C8:18:CF:E1:14:C7:9C:3E:D7:F7:33:50:DF:77:74
            X509v3 Authority Key Identifier:
                keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ca:f9:68:75:28:6a:dc:eb:85:be:a4:a7:cd:dd:5a:f0:e4:
         77:8d:f9:cb:8b:90:02:df:fb:f9:8f:76:c6:14:3c:b6:5a:f4:
         5b:16:65:22:3d:20:8b:0d:f9:2f:00:c6:5e:70:44:7e:27:82:
         64:a7:86:51:76:81:25:bc:33:7b:94:da:27:a6:8c:d1:e8:b8:
         06:c0:c0:d3:b3:d1:be:69:34:4b:8d:02:06:8f:61:27:45:be:
         3f:0a:88:dd:1e:f3:57:82:85:27:c4:df:03:d8:2c:1b:60:90:
         14:29:57:27:74:6f:5f:f4:6d:22:f5:ef:af:1a:db:0d:3e:55:
         26:b9:9a:24:8f:c5:90:30:8c:08:db:24:a7:1f:d5:04:f9:21:
         bf:11:4a:c1:a1:f4:45:43:6f:d9:31:11:45:64:6b:c4:c1:5f:
         79:8b:12:48:18:ec:e2:71:85:7c:c8:29:21:23:20:d6:32:34:
         5a:a0:1d:69:2e:34:8f:47:fd:71:42:46:de:d1:fb:ed:82:9f:
         b2:75:99:a6:bd:2f:ed:76:cd:1b:10:b2:af:0f:2e:cd:5b:ef:
         ed:bc:cf:81:fb:3c:ad:06:2b:40:91:91:e0:b5:8f:ce:13:a1:
         a7:9d:f8:b3:aa:ae:39:39:cc:27:40:b9:9e:ec:ed:32:f5:cd:
         e7:80:13:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:40:53 2025 by rpki-client