Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
File:                     x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft (raw, json)
Hash identifier:          dv5JO66cvTaVd7tO+qPeDBmMDlBMiqrKHQM4KTB/cs0=
Subject key identifier:   DA:E2:BC:43:54:C2:A3:B4:C5:5A:24:2D:70:A2:C1:36:4C:27:0E:8C
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Certificate issuer:       /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial:       0197469EB3323CADF4E4E580F9C3617C4B82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
Manifest number:          11C3
Signing time:             Fri 06 Jun 2025 19:01:34 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:34 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:34 +0000
Files and hashes:         1: ORZQ3TzlAnbqpUbLBvAypexe6yo.roa (hash: Yedmm0b14/xeLz9/IuhulJeoi6LG8nDdvf2zdmYeKsI=)
                          2: bHvrcJVM0y_8UrKAkmAx19ngbcE.roa (hash: 4t/UW5F2VPqOIt+6Vl0Kdb4c0JMpjSNkucxjES6YCqM=)
                          3: x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl (hash: If407a0W8OJRxXn0JfbU37UJP6+R1emUlHExCI74lqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:b3:32:3c:ad:f4:e4:e5:80:f9:c3:61:7c:4b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
        Validity
            Not Before: Jun  6 19:01:34 2025 GMT
            Not After : Jun  7 19:01:34 2025 GMT
        Subject: CN=dae2bc4354c2a3b4c55a242d70a2c1364c270e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f7:73:bb:8d:eb:e6:b4:60:4b:5b:2e:79:06:
                    fe:d4:65:e7:d0:2a:68:f5:b2:07:66:02:46:6f:1b:
                    13:77:0c:82:8d:2a:38:a1:56:28:e8:56:55:10:d1:
                    60:da:55:61:54:d4:f9:45:62:f1:31:b8:53:66:3a:
                    de:fa:66:a5:e5:3f:66:3d:2e:03:7f:32:46:ef:19:
                    ad:7a:7d:e6:9c:0b:f5:62:c3:11:53:82:32:9e:6d:
                    b5:3f:24:50:17:06:32:f6:db:7c:76:e9:0a:b9:6d:
                    91:1a:c4:10:cf:71:a9:1e:35:92:2a:cb:b1:97:d8:
                    97:ca:c4:b6:35:d2:55:b1:98:c8:b6:8d:31:41:52:
                    1d:d4:6d:7d:d1:73:37:30:fb:5b:87:fc:09:f8:b6:
                    af:99:f6:e6:f7:19:85:fa:d2:4c:3f:c0:46:78:86:
                    0a:f5:36:a4:69:8d:ec:c8:36:69:94:bb:8d:6a:f7:
                    4a:8e:6e:13:e6:bc:b4:1e:f7:3a:d7:13:d3:54:7b:
                    0d:f6:4a:b8:d6:81:21:17:49:9c:89:c1:b7:c0:61:
                    61:e0:3e:4a:54:ce:3f:70:eb:7f:9a:a9:44:58:1d:
                    b5:6e:e0:5f:d1:54:d7:94:9f:83:ae:97:85:77:af:
                    76:2e:d0:6f:b8:6c:a2:98:e7:cc:c6:f2:07:3d:9a:
                    3f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E2:BC:43:54:C2:A3:B4:C5:5A:24:2D:70:A2:C1:36:4C:27:0E:8C
            X509v3 Authority Key Identifier:
                keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:68:70:66:fc:03:8b:ea:c7:6d:78:ea:72:6a:ad:71:68:d6:
         bc:bf:7f:38:f6:2a:d3:15:9c:e3:8c:fd:fa:de:56:d9:ab:4a:
         61:cc:a8:d3:4a:32:12:7c:af:bc:9c:08:36:d2:1f:78:3d:fe:
         f4:57:d1:e9:cb:b0:06:f9:14:85:af:99:9d:75:d3:28:a4:ea:
         a2:27:db:33:ba:b0:94:ac:c7:ae:2e:69:50:e8:d3:2c:d9:0c:
         e2:f2:5c:45:c9:43:a5:e0:23:1e:d5:0e:63:ec:b5:db:c0:5e:
         44:e2:2d:cc:1c:55:a2:8d:97:12:cf:a9:46:7a:7d:b6:74:b8:
         f0:3e:41:0c:7c:58:f2:3f:2f:1e:58:5b:04:36:c2:8e:90:b1:
         2d:8d:5a:98:69:8c:86:cb:8a:6e:0d:36:cd:b5:db:29:95:3a:
         84:4e:8e:d2:2a:fa:ec:16:ea:3c:7c:38:4a:08:43:82:fa:21:
         fc:9e:7a:fa:df:7a:4a:40:71:b7:19:13:b4:c7:8e:93:c3:97:
         f4:d9:f3:91:1a:ad:36:24:10:4d:d2:db:ba:33:4d:88:4d:a8:
         a4:b7:90:f8:2c:a6:c2:84:c0:e4:b8:53:ef:b3:ce:5f:a0:d4:
         35:67:52:4f:a4:5c:34:7f:d6:f4:30:9d:09:57:f0:70:de:9e:
         d7:01:9a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:53 2025 by rpki-client