Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
File:                     0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft (raw, json)
Hash identifier:          WNwajmAjFa08+2ulTmjq7ZrP0/QVh6bfUVrMNMmNHTw=
Subject key identifier:   2B:EE:C5:24:32:00:7F:DC:DD:7D:B9:BB:24:66:59:7E:02:6A:A8:21
Authority key identifier: D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
Certificate issuer:       /CN=d2323101b29596ff442d3749373b8e9983354670
Certificate serial:       01975CEEA30D9952ABAD6941C30A4B523B17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
Manifest number:          128E
Signing time:             Wed 11 Jun 2025 03:00:32 +0000
Manifest this update:     Wed 11 Jun 2025 03:00:32 +0000
Manifest next update:     Thu 12 Jun 2025 03:00:32 +0000
Files and hashes:         1: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl (hash: Ql4pP8eFXDUt56FpA5rIpjM81nHMfUDj0HRn+CganVo=)
                          2: 68zFv9YtD3NrAFeU4wp9olsTM-s.roa (hash: pnT0iUdcMHrqvl0nnH7oLBNpzo/eCuulVPG8TY9HMQI=)
                          3: QaIK-rl-UO6iCpNPezV_L0xU2YU.roa (hash: xhqiUIeuQiCwC9en8JMr8aD8gps5b0AVPyZ6zETgu08=)
                          4: WOXWvBeCokpSOHl_JrntVW9NKAM.roa (hash: eB6i8745ycqxVgNK38j0RIcjXGqo0GZI7gH9QRyDDJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:ee:a3:0d:99:52:ab:ad:69:41:c3:0a:4b:52:3b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2323101b29596ff442d3749373b8e9983354670
        Validity
            Not Before: Jun 11 03:00:32 2025 GMT
            Not After : Jun 12 03:00:32 2025 GMT
        Subject: CN=2beec52432007fdcdd7db9bb2466597e026aa821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a9:3e:2b:b2:ca:6e:16:16:3d:3e:7c:4f:2d:
                    85:84:90:c7:a1:56:d7:de:d0:24:25:97:32:5b:54:
                    de:19:da:fb:ab:dc:73:1f:11:06:56:6d:ae:8a:20:
                    4a:e8:47:9d:58:2a:81:55:83:ce:14:f3:05:4f:bf:
                    b3:60:bf:03:51:6d:7b:d1:94:a6:0d:09:53:0e:97:
                    ef:60:42:c5:e1:6e:20:d2:f3:5d:a0:21:a4:b9:fa:
                    f5:bd:42:0e:4b:3a:7b:1c:8a:6b:e2:4f:38:53:e9:
                    76:8c:62:9b:3a:70:40:61:b2:84:91:8e:d3:82:67:
                    e7:70:21:0f:1c:e5:19:8a:cb:bf:5e:fd:c3:3a:90:
                    25:3b:d3:8c:c1:8e:7f:c0:3d:30:8f:97:8f:10:2d:
                    bc:c1:7c:a8:64:3b:84:27:ae:98:0f:e2:01:e9:88:
                    f9:12:c4:31:7e:b6:c8:69:c8:16:97:e3:69:fb:87:
                    d6:30:a0:d5:2c:75:7a:2d:07:16:d2:e1:15:06:2e:
                    4a:93:8b:2e:95:32:15:b8:6d:52:a5:0e:33:50:9d:
                    91:cc:4f:6e:67:5e:80:71:9d:7c:c7:01:66:04:09:
                    f0:10:a4:17:1f:21:4d:d3:1c:d9:bb:a4:8f:68:ef:
                    1c:29:9a:f3:15:1b:d4:6f:21:7e:85:eb:51:39:b3:
                    ca:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EE:C5:24:32:00:7F:DC:DD:7D:B9:BB:24:66:59:7E:02:6A:A8:21
            X509v3 Authority Key Identifier:
                keyid:D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:71:4a:c4:d1:1c:ca:5d:b5:36:6d:d8:fc:8f:3e:3f:1f:07:
         09:78:07:10:c2:d2:44:62:b4:ac:53:29:d3:01:cd:ea:10:1b:
         11:12:24:9b:fc:dd:2d:d1:4d:9a:10:0f:e0:31:51:8a:47:5f:
         3b:a7:8c:04:c1:70:cb:25:f4:ba:77:49:38:fb:38:54:ba:ef:
         93:3b:85:1d:1d:33:be:35:fe:cf:69:d3:92:34:54:33:a6:8f:
         17:a8:af:63:08:b6:58:b0:d5:6c:47:a4:98:19:d1:cd:89:4a:
         50:fc:7e:96:65:ca:d0:c3:a0:30:d6:44:eb:06:9d:59:a1:41:
         0e:00:9e:11:7b:fa:17:54:6f:8c:cf:8f:25:e6:90:f1:de:33:
         4f:a9:db:ea:5a:43:99:3f:d1:bd:f0:5b:59:48:02:a8:bf:96:
         bc:4b:a5:24:fd:8e:ae:7a:3c:c9:d6:d0:1f:10:5c:d8:f3:2b:
         93:c9:07:49:8d:16:e0:69:38:dd:b0:38:fb:8b:ff:f9:d9:3c:
         f2:b2:59:ee:5f:7d:5e:e6:98:b9:51:6d:19:4f:28:36:40:c7:
         3b:62:32:d2:6b:5c:71:53:ba:26:8d:ad:24:78:01:bf:fc:48:
         e9:e2:95:0c:f7:c9:ea:21:fa:14:8f:d5:22:e8:0b:c9:9f:92:
         1d:e5:db:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:29:28 2025 by rpki-client