Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
File:                     xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft (raw, json)
Hash identifier:          f50JKwK6JjIxd47dEvqzUX4ZG9Rs9Q5sMSx0ktpd8kk=
Subject key identifier:   36:C7:7A:D9:06:55:29:5C:00:01:7E:15:90:7F:91:67:DB:28:09:B3
Authority key identifier: C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27
Certificate issuer:       /CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
Certificate serial:       01974D4474AA0C46C687DB822554E2F8288E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
Manifest number:          04EA
Signing time:             Sun 08 Jun 2025 02:00:21 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:21 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:21 +0000
Files and hashes:         1: e-ekxZnIJuci57HrEPz7zGue28s.roa (hash: 8H4l0N/E0NCOJoBHvZIBH7Jz+P9G/e+mdO0E4zzVLoo=)
                          2: xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl (hash: hBBfWZfYZqpV2omUxO5NjXX22962Le33Z1SQzd0Sy8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:74:aa:0c:46:c6:87:db:82:25:54:e2:f8:28:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
        Validity
            Not Before: Jun  8 02:00:21 2025 GMT
            Not After : Jun  9 02:00:21 2025 GMT
        Subject: CN=36c77ad90655295c00017e15907f9167db2809b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:ea:8e:99:ee:a9:3d:5e:7d:16:b3:de:94:
                    0b:63:6b:68:cd:85:53:99:17:45:2f:92:1a:9e:e2:
                    68:dc:cd:85:84:51:8f:ab:02:a8:2f:30:ea:1e:57:
                    6c:f5:6c:67:15:cf:b0:bc:78:c9:0a:80:04:36:30:
                    c3:a2:d8:3c:4c:4f:91:5e:90:88:b0:3c:92:b7:19:
                    c7:30:ed:95:7d:c4:99:15:42:4c:06:d3:73:bd:ef:
                    04:c1:e4:cd:b4:7e:0b:03:36:ae:5a:d5:af:a1:c3:
                    75:da:de:6c:b6:1b:63:8b:41:a2:1d:22:42:bd:c8:
                    0e:f0:a8:43:28:88:4f:6a:98:40:3c:91:35:37:26:
                    87:61:1b:bf:ed:cd:69:5c:43:f2:6c:78:2e:b1:57:
                    49:20:c7:f9:99:e5:76:76:dc:6a:20:1d:84:b6:af:
                    8f:53:e6:5f:a8:5e:e1:de:7c:93:91:db:60:8c:d2:
                    21:7a:23:f0:5f:83:7e:19:03:7e:34:86:a6:b8:41:
                    1e:63:e5:9a:03:42:bd:fd:60:4b:e8:df:fe:79:e7:
                    56:7f:bc:53:2e:aa:7d:2d:bc:c4:23:e3:f0:d5:4a:
                    16:6c:fa:53:51:10:81:f5:3d:92:9d:99:7e:ad:18:
                    5b:35:76:e0:b3:db:84:58:d9:13:41:e6:f1:4d:e5:
                    cf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C7:7A:D9:06:55:29:5C:00:01:7E:15:90:7F:91:67:DB:28:09:B3
            X509v3 Authority Key Identifier:
                keyid:C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:6a:9c:2d:0d:03:d2:14:8d:29:12:3d:07:e0:d4:71:d7:3d:
         ad:b3:4b:fa:68:bc:6a:6a:87:75:cc:9c:fe:e3:4f:af:47:eb:
         14:0e:5d:8f:46:05:e5:67:d7:56:27:a2:03:66:5a:24:38:9b:
         21:d2:d4:a4:b0:f0:47:d9:0b:bb:96:23:a1:fb:a3:1c:81:93:
         f1:d8:a5:80:66:9f:56:aa:db:11:13:48:00:79:7d:d5:13:81:
         94:aa:0a:aa:41:40:32:62:12:01:09:5d:b3:6a:e2:e1:c0:99:
         c7:4f:6b:93:dd:17:f9:46:80:2e:f7:41:70:c2:8a:ce:fc:b2:
         8d:b6:f6:ab:2c:5f:fd:f8:08:8f:bc:1e:08:05:ef:9d:b8:f4:
         53:90:22:1c:e7:0b:b1:78:13:34:b4:ea:aa:26:86:29:e0:12:
         f0:cd:7e:5f:55:00:34:77:43:15:1e:21:60:77:8d:93:77:4b:
         1b:84:fa:79:58:4c:f3:45:a3:c3:70:66:94:f0:8e:a2:9d:e8:
         fa:e1:a1:84:70:0e:79:fa:9d:50:69:16:a1:43:7f:d6:f8:12:
         d5:eb:05:9a:b4:0b:48:bd:c2:88:01:30:76:47:ac:e3:49:27:
         3e:35:67:d3:81:84:cb:df:ef:e8:17:e4:85:65:1f:08:4d:55:
         1d:67:d7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:12:06 2025 by rpki-client