Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
File:                     E0vH5v379zjSP8XuXlrLUr77wFE.mft (raw, json)
Hash identifier:          3TFVYUaq2MPOJuAV9SnBSfHTP+POh22h2vn6jL9oNuw=
Subject key identifier:   25:B0:D7:15:57:9C:11:40:F5:98:E8:35:40:BB:AA:16:60:5D:B5:BA
Authority key identifier: 13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51
Certificate issuer:       /CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051
Certificate serial:       01974DB2572174CBD4FB37B5BC8152F01C7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
Manifest number:          14C1
Signing time:             Sun 08 Jun 2025 04:00:22 +0000
Manifest this update:     Sun 08 Jun 2025 04:00:22 +0000
Manifest next update:     Mon 09 Jun 2025 04:00:22 +0000
Files and hashes:         1: E0vH5v379zjSP8XuXlrLUr77wFE.crl (hash: sSwCWzHwmzgyyfUUqc9Ov4bpiVeuR9/ojGL6GAGKHwo=)
                          2: jScU1zFVjCaRKrDbPPQusY4_bns.roa (hash: 4SG9zb228Iu48jTcU1xr7DFLeKIwml/oUjk+0F3n0UE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b2:57:21:74:cb:d4:fb:37:b5:bc:81:52:f0:1c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051
        Validity
            Not Before: Jun  8 04:00:22 2025 GMT
            Not After : Jun  9 04:00:22 2025 GMT
        Subject: CN=25b0d715579c1140f598e83540bbaa16605db5ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:58:b4:3f:1c:c5:d5:03:06:1d:92:ac:1d:20:
                    28:f5:dd:9c:de:7e:3c:10:1f:9a:b5:c9:5f:c8:b0:
                    99:75:9d:10:fe:d6:ff:67:5d:32:61:27:36:70:c4:
                    4f:5b:ad:6b:02:d9:66:a6:c2:d8:25:88:54:e5:5f:
                    3c:56:16:13:d1:be:6d:b3:4a:41:5a:2c:86:a6:db:
                    3f:38:7b:39:42:a6:f2:af:9d:e0:84:0f:34:9a:18:
                    d6:82:67:5a:8b:6e:86:c9:25:9f:b3:fe:c6:3e:81:
                    96:7a:93:3d:fa:35:1d:cf:c9:da:59:7d:fc:90:bb:
                    7d:28:29:97:09:56:6b:f8:47:03:2e:ea:34:5b:9e:
                    4b:c6:c2:81:d7:c4:fc:ea:25:d1:96:ae:34:5b:e8:
                    78:28:33:2d:86:1b:aa:fc:6d:85:fe:fd:9f:ea:3f:
                    69:ef:40:60:19:4d:a1:af:df:fb:e2:ac:bf:6b:fd:
                    87:31:f7:f8:f9:47:19:87:6e:d4:ae:d6:45:41:eb:
                    0d:46:d9:43:87:87:fd:dd:ff:f5:9b:55:85:88:03:
                    bd:d2:40:fd:26:0b:b5:b5:10:79:90:b4:ff:76:dc:
                    3a:10:c5:78:02:04:be:8e:22:71:6a:bc:c9:b9:4a:
                    b9:af:bf:27:86:be:36:97:bb:8b:27:e5:e1:42:20:
                    c1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B0:D7:15:57:9C:11:40:F5:98:E8:35:40:BB:AA:16:60:5D:B5:BA
            X509v3 Authority Key Identifier:
                keyid:13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:82:35:46:81:a8:e0:81:e6:0f:17:c9:f7:fc:16:a2:61:31:
         04:58:ae:be:da:6a:5d:60:6e:4e:6f:08:9f:9b:ed:54:82:40:
         f8:51:f4:cd:6d:7e:97:2a:76:77:51:ab:03:b3:e5:c7:7d:3a:
         17:36:66:4b:52:79:9c:b8:bb:68:6d:9e:7c:d3:a3:35:0d:da:
         35:20:34:72:64:36:da:20:64:3b:25:6a:46:b7:da:2d:6a:b8:
         28:32:6e:ab:1d:5f:38:0a:6e:a1:f4:38:43:c4:fe:96:2d:73:
         41:a0:43:9c:a2:04:7d:f6:8f:58:e4:f8:cb:e6:e2:2a:41:9f:
         51:09:4b:b8:d2:fe:da:5b:ab:6e:a8:e8:80:6b:09:15:59:5e:
         c4:f8:a4:86:61:99:9c:ac:66:06:48:65:d4:9a:37:70:ca:eb:
         0e:cf:20:f5:9a:42:d6:37:74:c9:99:60:fa:95:f8:6e:32:e9:
         b4:06:03:c4:03:73:91:1b:bf:95:ef:bc:32:23:3b:16:d8:1e:
         06:61:74:bd:f7:b7:a1:d2:f8:b4:c3:27:dd:38:bb:9b:09:f3:
         2c:8e:db:6f:12:e6:57:2f:45:2b:2e:c3:e9:86:67:9a:57:94:
         0e:65:fd:21:7c:58:66:29:7d:4d:56:65:79:76:52:4c:ac:25:
         78:3f:dc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:21:28 2025 by rpki-client