Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
File:                     hoJWrjTlRSbFslqsK51fX6h9Bh4.mft (raw, json)
Hash identifier:          +IC9bOuGnQ0DjfGN1OC4x4Ez2RDb5C/R8LZ5UJ2CQB4=
Subject key identifier:   B0:05:A9:0B:9D:71:00:18:EF:84:D9:F4:1D:29:DC:5C:64:5D:67:B3
Authority key identifier: 86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
Certificate issuer:       /CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Certificate serial:       01975F141EB8E83B0B7DE164A6FC195645D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
Manifest number:          0C3E
Signing time:             Wed 11 Jun 2025 13:00:43 +0000
Manifest this update:     Wed 11 Jun 2025 13:00:43 +0000
Manifest next update:     Thu 12 Jun 2025 13:00:43 +0000
Files and hashes:         1: ggyXYBYJYDyjENMrTDEoM9cmQuY.roa (hash: nvujf7S88P1Vb2Lev6oUVClTcezEWcGUqDcy1w7ylUY=)
                          2: hoJWrjTlRSbFslqsK51fX6h9Bh4.crl (hash: GnPwtP2CzbijR4Tb5+XTa39FrJKgODFspzKIu0D9dIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 13:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:14:1e:b8:e8:3b:0b:7d:e1:64:a6:fc:19:56:45:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
        Validity
            Not Before: Jun 11 13:00:43 2025 GMT
            Not After : Jun 12 13:00:43 2025 GMT
        Subject: CN=b005a90b9d710018ef84d9f41d29dc5c645d67b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:be:df:8f:0a:d7:23:66:26:f3:70:d9:ab:d6:
                    ac:0f:22:57:fb:f7:30:ce:a4:b0:74:be:8d:dc:0f:
                    97:36:fa:12:a9:6d:37:ae:76:5a:ae:3d:fa:6a:95:
                    b0:80:ca:59:8b:9a:bf:12:9b:e3:85:32:0f:46:2a:
                    42:36:4c:47:61:81:d7:4c:4d:c4:34:15:b0:ab:d3:
                    dd:b5:72:59:ea:de:ff:3d:cf:44:4b:24:b5:23:7c:
                    d8:01:49:fe:12:bf:d2:0e:b5:a6:66:56:36:78:2c:
                    38:11:ae:47:f7:26:ac:8d:47:12:97:7b:61:b1:58:
                    f9:be:0f:52:e4:70:24:67:43:36:1f:20:e9:15:04:
                    9b:be:32:68:23:6e:59:a8:ab:2c:17:7e:8d:2b:47:
                    3e:41:fd:c4:20:96:59:5e:f0:b3:21:5e:ed:1f:07:
                    53:db:a4:23:ff:12:8b:4a:92:66:cb:02:b4:55:47:
                    06:9d:8c:b7:1e:62:a0:1d:85:7a:b6:78:10:c3:4d:
                    01:fe:b6:3f:17:8f:8f:17:af:6e:f8:ee:47:99:b9:
                    2e:63:73:16:a2:32:d4:ca:54:09:15:30:d0:cc:d4:
                    fb:f0:90:f7:7c:b1:f7:cb:05:c9:a3:5a:ea:79:8b:
                    3e:b4:38:b8:35:3a:f9:f0:ca:59:14:28:39:b7:b6:
                    8d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:05:A9:0B:9D:71:00:18:EF:84:D9:F4:1D:29:DC:5C:64:5D:67:B3
            X509v3 Authority Key Identifier:
                keyid:86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:06:1b:34:3a:5d:88:b1:15:45:92:e4:3e:58:a1:72:ac:b0:
         97:93:44:55:6c:a0:df:23:f0:6f:83:21:36:7c:e1:ac:79:ea:
         12:56:65:90:c2:21:f0:2e:95:68:65:4d:1f:38:b3:84:04:6c:
         28:3f:ad:d4:43:a7:d6:e1:a3:a7:83:d6:df:dc:e2:76:17:aa:
         ac:29:c1:e8:c1:4e:45:ea:35:e5:f2:ef:4a:bb:c5:12:5d:e3:
         10:45:bd:bc:03:96:1b:06:cc:e2:d8:0c:f3:ed:2b:62:45:a2:
         79:cc:43:2b:d9:7a:96:b7:70:ae:96:36:e1:bf:ae:41:66:bb:
         a8:40:eb:96:4d:eb:2c:79:70:36:8e:b9:8d:fa:d3:1a:ee:b3:
         49:f7:e2:42:93:04:90:13:60:2d:ec:c0:c1:66:38:25:3d:f0:
         4f:62:2c:eb:42:8f:59:48:f6:a2:df:2f:a4:4b:25:5f:10:fb:
         6b:60:16:01:bc:17:f1:56:68:32:15:cf:8d:d1:0e:01:cb:2d:
         5c:cf:7a:05:31:ea:18:70:96:c4:01:a8:d5:0d:df:e9:e5:03:
         a0:43:24:dc:8a:21:93:a6:57:19:cb:0d:35:d0:c0:38:d4:1c:
         ed:26:14:32:47:85:94:46:90:38:6b:c3:d1:23:84:a5:88:f0:
         92:13:cf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:32:37 2025 by rpki-client