Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
File:                     evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft (raw, json)
Hash identifier:          AUQbFCWQQVPn6dNDY4RdppdVmPjbfpykRxBKfHrx4wc=
Subject key identifier:   D0:CA:AC:D2:E0:03:30:74:5C:0C:CB:A3:93:88:4A:C4:40:4C:04:AD
Authority key identifier: 7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
Certificate issuer:       /CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Certificate serial:       01974742B8C666278D8C524F94C20213B39E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
Manifest number:          052C
Signing time:             Fri 06 Jun 2025 22:00:44 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:44 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:44 +0000
Files and hashes:         1: 3I2mGfHorPrDep9I0nPeIh65tkI.roa (hash: OLscXpyWIbrn1RcZqjdSr9XXKKiPI7j2rv0JHHPMEQI=)
                          2: dNzpUeScS40SGAakdE8EMOqK8-0.roa (hash: ChCS0TPiqjqC3j7rrZypS24t3Ck3/GrBq9+62XOwDas=)
                          3: evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl (hash: hCs+a7MKxR2+PE28x1ATznrT+Cw5GYp/78DPfcij8zM=)
                          4: y_1DokJhuMn6KiVy0_PFo2uwqL4.roa (hash: CyQURB7g+UVvvUP5P21dxzNPaEmL0tzfzogezhC6J2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:b8:c6:66:27:8d:8c:52:4f:94:c2:02:13:b3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
        Validity
            Not Before: Jun  6 22:00:44 2025 GMT
            Not After : Jun  7 22:00:44 2025 GMT
        Subject: CN=d0caacd2e00330745c0ccba393884ac4404c04ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5d:5d:67:5f:c0:04:62:3f:ee:1a:a2:05:9b:
                    18:46:d4:7c:f8:e7:df:93:97:ef:5a:bd:35:89:39:
                    e2:fd:ff:26:87:19:91:ed:62:a6:b5:91:46:12:b0:
                    04:6e:7a:50:a5:00:69:e9:c1:18:2a:d8:6a:0d:2d:
                    ca:de:4a:69:50:7d:cf:92:48:57:e9:f2:90:b0:de:
                    d0:77:f5:8b:2c:56:de:cd:e2:19:bd:be:5a:c0:df:
                    07:ad:64:ac:3d:40:88:8f:e5:91:f3:8e:09:d1:92:
                    68:26:a3:d8:ea:a1:a6:83:61:67:24:4d:d4:3e:59:
                    59:6a:fb:96:cc:04:18:3b:81:53:bb:aa:96:9c:18:
                    c3:19:31:14:03:71:11:95:f1:e8:07:7f:c0:b5:74:
                    d4:4d:88:54:e0:71:5c:ed:06:ba:7b:cd:c8:41:55:
                    9e:48:b4:06:14:a7:da:88:dd:0d:52:10:e8:8d:b2:
                    dc:06:82:db:7c:a3:11:d2:cc:ee:ac:da:11:2e:26:
                    c0:e0:bb:1c:fd:2c:9a:65:a6:f9:d8:c6:1e:d8:78:
                    bd:83:d7:17:b4:5b:77:75:c9:b1:b4:73:d2:b9:d1:
                    fe:e1:3f:c4:1c:ba:23:8b:d2:52:e3:ad:f4:af:7d:
                    00:48:ae:be:8a:e5:6d:a3:b8:21:e4:cc:57:ee:9e:
                    84:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CA:AC:D2:E0:03:30:74:5C:0C:CB:A3:93:88:4A:C4:40:4C:04:AD
            X509v3 Authority Key Identifier:
                keyid:7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:47:bd:05:4c:44:90:b2:5b:5c:53:20:03:64:fa:7c:26:b8:
         2a:a2:2b:6a:b1:da:50:04:c5:f2:c1:b8:ac:56:37:8f:2f:5e:
         a8:01:e7:b9:2b:3b:04:f6:b3:a4:49:04:b2:20:a4:3f:a0:ec:
         42:5f:b6:08:ee:fb:87:de:63:9f:f9:36:44:8f:d5:53:81:7c:
         5c:68:b7:51:eb:47:2b:65:76:51:1e:ab:ea:27:49:bb:a7:bf:
         03:52:5f:c2:f4:af:72:79:82:ff:85:69:88:9e:df:bf:2f:a2:
         5f:a8:0d:96:b1:59:c9:8a:21:43:ee:c2:7f:da:92:fc:13:42:
         53:e1:6e:6c:41:4c:e9:08:82:a9:e2:0c:bd:2c:39:fe:47:69:
         6d:22:57:79:e9:ea:24:49:8c:a7:dc:db:77:33:b2:b4:0d:11:
         b9:b3:be:3f:85:97:9f:7b:a6:c1:75:c5:f8:ce:f2:49:43:53:
         3d:6b:cc:fc:78:30:e1:20:de:27:5e:b5:a9:ce:4b:08:ef:3c:
         ef:48:73:7b:06:90:fd:c8:75:b1:b5:c7:c4:fa:fc:92:ba:c7:
         bd:45:5b:e1:e3:ee:88:44:c3:da:55:e8:02:54:a9:36:32:ca:
         f2:2a:87:40:69:46:71:15:8e:33:57:0c:be:f3:0e:49:15:da:
         24:fd:60:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:33:59 2025 by rpki-client