Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
File:                     60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json)
Hash identifier:          SOJG3sd6VYCh9isY0mnQXeBriLTJQGg7+BMPCzHkMfg=
Subject key identifier:   39:4B:49:00:CF:AE:C7:95:65:18:0F:B0:A7:DD:CD:5D:A8:B2:DF:7E
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Certificate issuer:       /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial:       01975A24E20E69106E521DAB9BE3F3AAFC60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
Manifest number:          09F9
Signing time:             Tue 10 Jun 2025 14:00:55 +0000
Manifest this update:     Tue 10 Jun 2025 14:00:55 +0000
Manifest next update:     Wed 11 Jun 2025 14:00:55 +0000
Files and hashes:         1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: rklDQgDPBlguPJMJfiBBx8xdTbPFOkCh1sSFpO9GDVE=)
                          2: BdUWQfeU6Dd3ui-CflFlA-XkoYo.roa (hash: ooQU4Ho0ybPL99Ep+vo4svb61ieYsfRUfMtTThTSOn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5a:24:e2:0e:69:10:6e:52:1d:ab:9b:e3:f3:aa:fc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
        Validity
            Not Before: Jun 10 14:00:55 2025 GMT
            Not After : Jun 11 14:00:55 2025 GMT
        Subject: CN=394b4900cfaec79565180fb0a7ddcd5da8b2df7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:28:6d:d9:00:fe:eb:e9:9c:4d:c0:08:f2:0c:
                    da:9d:bf:f1:39:5d:07:fd:34:f4:e2:a4:eb:6f:e7:
                    e9:06:12:61:6f:31:f9:fa:6e:69:1f:cf:0e:3a:12:
                    fe:be:15:90:37:a8:8e:92:e1:4f:40:4b:11:c6:7b:
                    cc:83:20:bb:0e:ab:91:85:b2:d0:b8:bc:44:fd:5b:
                    91:41:13:6d:33:af:4e:52:db:c9:fb:c7:4d:6d:23:
                    58:52:08:42:e8:e7:05:8a:f4:b7:0c:e7:94:44:db:
                    dd:7f:f3:1c:84:91:6b:95:fd:0b:79:10:6c:40:95:
                    2c:5e:56:0b:18:ed:28:38:b6:88:db:b2:b3:0b:13:
                    97:07:d5:6a:01:49:e8:b7:ec:dd:7f:50:d8:a9:21:
                    72:8e:fb:fa:2d:65:d9:3b:e3:57:25:7a:e5:64:ad:
                    15:e3:c3:ba:6c:bc:05:58:ea:df:4b:5e:2b:62:3c:
                    2d:fd:8f:8d:3c:b2:0e:e0:c2:1e:56:77:98:b6:49:
                    7e:71:14:5f:45:73:e9:50:77:d0:09:42:a8:13:d3:
                    48:fb:4a:60:a7:b7:a1:47:04:43:ed:7d:6e:6d:35:
                    81:d3:47:91:43:de:a6:e4:39:42:70:25:ef:c2:ef:
                    97:97:46:a0:d6:59:3b:5e:a6:9b:2e:65:08:f5:b0:
                    8e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4B:49:00:CF:AE:C7:95:65:18:0F:B0:A7:DD:CD:5D:A8:B2:DF:7E
            X509v3 Authority Key Identifier:
                keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:90:fc:ee:17:99:3e:bc:38:26:a3:02:54:49:e7:39:7f:0d:
         28:38:67:b8:e5:29:e7:05:c8:35:89:72:b2:d9:9c:eb:c0:73:
         9c:61:37:e9:23:0a:05:98:80:6e:c4:4e:33:09:81:66:da:01:
         7f:fe:7c:2a:3c:fa:08:2a:97:99:31:dd:4c:a1:6f:d5:d8:cf:
         94:27:2b:7c:2c:de:ab:64:ca:cb:98:a7:21:41:51:63:d1:e4:
         2f:95:e3:2d:5d:9e:91:69:55:66:b2:9d:68:99:66:57:9a:c7:
         92:8d:6f:07:f0:16:45:20:b6:4b:03:d3:47:41:ab:1b:95:52:
         9b:07:a2:67:6a:66:c5:82:4a:8d:7c:80:e5:fb:1e:19:ae:d1:
         65:f7:ff:44:59:12:02:52:14:44:4a:ef:40:65:81:9c:1e:e6:
         6b:a8:85:6f:7d:32:d5:fd:0b:57:a1:12:ca:fa:73:cd:9c:00:
         22:a9:1b:ea:fc:1d:b9:4a:bc:e2:bf:c7:7f:8c:f9:6e:94:6d:
         25:62:a8:70:44:ad:7a:67:c3:b8:01:22:92:8d:dd:e6:0a:d6:
         00:a5:9a:aa:23:3d:a2:39:00:4b:93:30:05:f7:af:ed:c4:f5:
         fe:54:e2:32:47:a6:a3:46:cb:f1:d3:d1:bb:04:f2:63:77:35:
         6e:b9:16:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:23:58 2025 by rpki-client