Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
File:                     t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft (raw, json)
Hash identifier:          eHvnCeSonvxPyvflZRyhjYfa86iqbDlbux1YrI6csts=
Subject key identifier:   F4:A2:EB:61:65:94:CC:FA:CE:F6:DC:62:92:41:2C:C1:DE:64:1C:41
Authority key identifier: B7:F6:46:DE:41:40:72:FC:1A:B7:6B:1B:2C:9E:08:B9:BD:21:A8:43
Certificate issuer:       /CN=b7f646de414072fc1ab76b1b2c9e08b9bd21a843
Certificate serial:       01974742B3CD176D798C8B27670A3BFC56F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
Manifest number:          09CD
Signing time:             Fri 06 Jun 2025 22:00:43 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:43 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:43 +0000
Files and hashes:         1: t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl (hash: V+TJ9gMUyy3VwJ/Hzcw8y5Ah/CTwrMoe3Q6vr7HWgkg=)
                          2: tyPwFquST_QYpMOQ15p0kPwIfBE.roa (hash: pgj4wMLIuT+JDsLGd7CH6ihopHeyqUjAH/pXaSBmiXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:b3:cd:17:6d:79:8c:8b:27:67:0a:3b:fc:56:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f646de414072fc1ab76b1b2c9e08b9bd21a843
        Validity
            Not Before: Jun  6 22:00:43 2025 GMT
            Not After : Jun  7 22:00:43 2025 GMT
        Subject: CN=f4a2eb616594ccfacef6dc6292412cc1de641c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:17:f3:a1:bb:da:40:9e:9b:ac:cf:f4:ad:
                    9d:e9:84:18:cc:d2:05:95:ba:67:bd:b0:fb:d3:4a:
                    f9:ae:ff:e4:d1:d2:f1:8c:63:f6:95:92:a0:ad:a5:
                    ee:20:9c:6e:17:7a:39:d9:32:42:55:92:e0:13:a1:
                    29:be:27:05:2d:f3:a8:77:70:83:54:e3:38:27:25:
                    c9:7c:fe:8d:5d:d4:be:05:3b:9f:0c:65:df:b0:31:
                    3a:f4:7c:72:04:ed:99:57:b0:70:d2:20:c8:61:d6:
                    9a:58:5f:ff:12:b6:48:64:df:d4:16:15:a8:64:ce:
                    6b:a4:1c:ae:d9:37:87:a7:ae:47:3c:87:f9:60:d8:
                    6f:9e:13:d1:7e:29:44:3f:b6:ca:4a:50:41:b5:ce:
                    7d:f9:d5:bb:e3:d4:a4:32:8f:5a:35:80:1c:23:29:
                    22:1f:5d:dc:9f:10:09:55:ae:f1:6c:3b:d5:7b:33:
                    85:ad:f7:2f:cd:a6:6f:b2:0c:8b:e8:e6:78:15:e8:
                    9a:20:0e:66:36:77:07:3f:90:76:dd:55:93:50:80:
                    61:65:a2:8e:6e:68:cb:be:9f:32:16:02:11:96:42:
                    5e:b6:9e:96:cc:81:f5:04:c5:78:a7:d5:48:3d:2a:
                    a7:24:de:06:f5:96:21:cd:20:58:3e:fa:5b:f5:6f:
                    aa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A2:EB:61:65:94:CC:FA:CE:F6:DC:62:92:41:2C:C1:DE:64:1C:41
            X509v3 Authority Key Identifier:
                keyid:B7:F6:46:DE:41:40:72:FC:1A:B7:6B:1B:2C:9E:08:B9:BD:21:A8:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:b9:dd:2d:5f:fb:b0:0a:1e:53:cf:55:18:3b:fc:a8:b5:12:
         54:b3:3a:40:c8:3e:10:89:18:61:5a:ea:86:81:0a:5e:06:51:
         76:bd:85:32:8f:7c:a4:37:02:cc:55:51:32:10:d0:30:a0:c2:
         7e:6a:50:17:0a:cf:7b:67:2b:57:e4:87:a2:e4:90:a6:03:b3:
         8b:3f:db:cd:3c:3e:58:06:b7:ce:8a:79:80:ab:0e:87:c8:e2:
         d1:cf:a8:67:87:64:cf:b5:20:cf:37:91:ff:ae:9e:b7:d0:7a:
         63:ad:6c:5a:84:7d:c1:df:52:68:fc:3b:41:95:f8:f5:fc:3f:
         d4:f6:3c:7c:a9:1d:f5:95:c3:a2:0f:ac:2b:bc:31:46:b8:cc:
         26:e0:c9:bf:cb:b9:8c:a9:e2:4c:79:8f:b7:60:83:c4:51:97:
         06:78:84:85:f6:eb:d0:20:17:da:1a:93:03:51:d5:96:8f:64:
         e4:f7:ae:b9:e3:b7:5d:48:f2:f2:ac:0c:44:8a:e2:8c:ec:d1:
         00:8a:2c:f6:a0:01:61:56:73:86:e2:a9:12:2d:8d:eb:17:c8:
         39:f4:08:07:3f:34:9d:e4:67:18:2e:43:47:3a:fd:8b:49:a9:
         16:39:f5:73:60:1d:ed:c8:37:6e:68:53:ae:34:81:c8:de:27:
         95:73:38:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:46 2025 by rpki-client