Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
File:                     eTT37l0EoCYiPDqjGRK_YQ0A23s.mft (raw, json)
Hash identifier:          0RD6RIOSlFrjf4RUqWjuXFCt75qi7QtB9RVrdkskP4o=
Subject key identifier:   3E:87:BB:35:36:4E:EF:D6:7C:F6:6A:04:80:82:21:0F:B4:7B:E1:95
Authority key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
Certificate issuer:       /CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Certificate serial:       019758A3C75CAFA782B5CEC774BB7B8232CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
Manifest number:          1502
Signing time:             Tue 10 Jun 2025 07:00:17 +0000
Manifest this update:     Tue 10 Jun 2025 07:00:17 +0000
Manifest next update:     Wed 11 Jun 2025 07:00:17 +0000
Files and hashes:         1: VNYCVzbiU_3jbeJ25u2hye6LJrc.roa (hash: fFv8A65gc1twwkAZ87BZHCT4KPuUQXD/tqltH8mgh/g=)
                          2: eTT37l0EoCYiPDqjGRK_YQ0A23s.crl (hash: Geot5SskHP0aNF/2jj+teon9/aaGD2Zqcth0APLdGcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:a3:c7:5c:af:a7:82:b5:ce:c7:74:bb:7b:82:32:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
        Validity
            Not Before: Jun 10 07:00:17 2025 GMT
            Not After : Jun 11 07:00:17 2025 GMT
        Subject: CN=3e87bb35364eefd67cf66a048082210fb47be195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:12:3a:cd:e9:1a:07:75:21:3f:cc:8a:24:78:
                    71:9f:4d:8b:af:22:bd:17:cf:56:27:1a:7f:d9:7b:
                    0c:53:7e:fb:73:8d:a3:05:b5:57:5c:3b:27:2f:43:
                    36:d9:c2:6b:c9:1e:e5:82:5f:76:88:1f:49:fc:0b:
                    ef:21:f4:48:d4:6c:4a:4f:96:ec:63:23:7d:8e:83:
                    8a:e5:65:c9:6c:0c:51:ed:70:6b:5c:8a:8f:5e:71:
                    fa:88:74:88:1c:dd:8a:65:e7:c8:43:f9:92:be:4f:
                    6e:8b:12:bb:c2:84:1b:56:75:d6:a6:37:e9:e3:80:
                    70:49:61:ce:7f:ef:81:a5:1e:00:2b:1b:11:00:ec:
                    1a:4c:de:dc:94:bd:f4:42:7c:bb:3b:3b:f6:7a:ae:
                    34:64:9b:47:60:54:f1:23:2d:d2:34:84:5e:35:93:
                    d1:e0:99:30:ed:22:35:ff:7d:b3:79:2c:9e:31:0e:
                    ce:20:64:3b:d9:d9:08:9d:c0:3b:62:e3:89:dd:b8:
                    85:db:91:1d:66:4f:34:b5:30:ae:59:23:61:52:20:
                    9f:97:23:07:5b:df:b1:00:78:cf:39:03:88:55:d7:
                    12:44:06:74:b0:23:00:08:ce:d0:18:6b:5c:9e:4b:
                    85:e8:7a:b0:42:84:72:6c:70:16:8a:3c:0a:b6:18:
                    72:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:87:BB:35:36:4E:EF:D6:7C:F6:6A:04:80:82:21:0F:B4:7B:E1:95
            X509v3 Authority Key Identifier:
                keyid:79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:0f:6c:4a:88:b2:e6:b6:4a:aa:de:ae:46:2e:73:81:10:b1:
         5f:e0:7e:71:40:6b:66:11:ec:05:df:4d:9c:38:1f:bb:56:74:
         ca:0a:88:e3:62:12:5c:dc:4e:f0:99:0a:26:54:19:78:5e:fc:
         d3:87:f7:ff:0a:f4:2f:9c:19:eb:37:c7:a9:1e:89:27:fa:2f:
         bb:f4:89:df:be:ff:ab:e8:cf:f0:33:37:73:62:7e:20:92:07:
         ca:03:25:ae:24:58:b2:80:34:fd:02:b5:74:67:42:34:27:51:
         77:2f:08:68:9c:29:5c:44:14:b0:10:a1:52:e8:96:18:55:ae:
         d1:45:e3:ae:44:9b:73:69:e9:96:da:4d:0f:19:f1:17:f0:b4:
         08:1e:8c:68:3e:90:c9:a7:19:58:b9:d9:b0:27:c0:46:18:e2:
         9a:b7:cb:5d:a4:66:dd:c9:1b:58:7e:fb:36:9b:69:c7:0d:4a:
         62:68:a2:e0:d9:78:61:c3:9c:b0:66:57:b5:a9:91:92:59:09:
         4a:e2:c7:25:75:ea:ee:02:2a:91:4c:d5:86:c6:00:ec:38:14:
         64:14:c0:91:ae:8e:fe:ff:d8:4a:3b:53:41:2c:69:92:97:94:
         17:93:a9:72:5d:12:82:fb:d0:36:0a:4b:a7:10:8e:d2:7b:f8:
         b3:84:59:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:00:22 2025 by rpki-client