Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File:                     tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier:          /A59sPjZKghFRQr/4tuHUhKa55nu0DlPwZ8AC8aXyMM=
Subject key identifier:   03:F2:09:C2:A1:E5:98:7D:98:14:75:96:03:5C:41:D4:3D:9D:D9:6B
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer:       /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial:       0197470B8BAAD8D68E82CDC843588772AF4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number:          1185
Signing time:             Fri 06 Jun 2025 21:00:28 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:28 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:28 +0000
Files and hashes:         1: iP514Grfm7HoMaMSlriqRZUp57w.roa (hash: uxTzsQkoKG+2gHXofBTy3Sd+QDMMkyYiw3WNGMp0rf8=)
                          2: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: 53Hee039h+B1yQIBg8b+5uaqXtdRBZ7H5Ht82l2gtVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:8b:aa:d8:d6:8e:82:cd:c8:43:58:87:72:af:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
        Validity
            Not Before: Jun  6 21:00:28 2025 GMT
            Not After : Jun  7 21:00:28 2025 GMT
        Subject: CN=03f209c2a1e5987d98147596035c41d43d9dd96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8f:a3:43:85:31:b5:e3:87:00:fb:a4:f7:02:
                    5d:c6:5c:f2:b9:37:a2:4a:90:4e:e4:8b:a0:4d:fe:
                    59:3b:a5:61:f8:65:18:6e:96:2d:53:78:f2:60:59:
                    90:58:28:12:4f:51:4f:44:54:e9:b8:07:be:22:a8:
                    0e:e7:a7:4d:16:54:72:39:48:b3:01:71:f6:7c:81:
                    e4:dc:9c:93:c9:f3:a4:a5:c8:44:06:6d:37:e9:0e:
                    ed:3d:67:d6:89:38:49:1d:f9:cb:99:c4:de:c5:cb:
                    c6:6c:ce:a3:d6:11:11:af:fa:0c:7f:39:77:d1:8e:
                    79:84:96:8d:3e:34:0d:cd:08:18:96:a9:06:4f:4d:
                    b8:98:ed:63:c9:bd:ea:5d:d3:6d:e6:a5:9d:65:d5:
                    37:b6:59:b2:48:1b:0b:06:d5:be:92:78:9c:54:ca:
                    38:3e:5f:7d:e2:60:54:a5:6f:09:9c:47:b4:44:a3:
                    1e:0a:ac:f1:1f:06:35:4c:21:5b:b7:45:17:90:36:
                    15:b6:a1:cc:07:81:77:12:9b:bb:f9:fa:66:ba:54:
                    7a:cc:e7:ba:18:aa:fb:5c:91:85:04:b8:63:fe:4c:
                    7e:3f:a4:c6:98:4c:84:b5:79:e8:61:b0:b8:3f:62:
                    84:30:6b:05:35:58:f5:e6:b3:1d:2f:07:90:75:fb:
                    2b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F2:09:C2:A1:E5:98:7D:98:14:75:96:03:5C:41:D4:3D:9D:D9:6B
            X509v3 Authority Key Identifier:
                keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e3:f0:2f:48:93:01:1d:9e:dd:7f:0c:e1:56:5e:be:5d:8b:
         32:44:a9:09:7c:57:80:67:2f:75:93:f0:93:b5:d1:82:a7:0d:
         b6:42:63:fa:f4:47:74:f3:14:9b:d6:a5:6c:5a:97:6e:ec:0e:
         83:ee:c1:29:42:0f:a7:2d:77:06:f7:4e:ee:d4:f2:75:a3:dc:
         36:f0:03:ad:b3:42:cb:22:38:f5:21:7e:e9:fd:b2:39:b0:66:
         39:6a:cd:4f:d3:68:f0:e3:87:22:a9:6b:71:2e:4a:64:27:79:
         c3:b0:03:c8:14:e8:ae:4c:c4:20:60:63:74:48:0a:71:34:4e:
         2e:5c:8f:04:fb:7d:54:4b:3d:8c:58:cc:6c:40:4d:fa:21:ed:
         a4:de:2c:f8:c7:d4:64:10:18:25:d7:85:01:94:8f:70:4f:99:
         16:ac:9e:bc:c8:c5:9c:a1:e5:a8:b9:8d:08:e9:f3:d4:e7:f2:
         a6:5d:8e:8e:02:03:d2:66:14:68:f7:bb:54:ed:7e:eb:ca:44:
         9a:27:6e:ce:6a:d7:e4:2c:d1:17:bc:06:bd:42:40:1e:ce:48:
         4e:09:46:4f:bd:dc:05:f0:3b:73:5f:99:82:ca:6f:74:ba:08:
         70:2f:e4:a1:f4:af:3e:3b:26:0f:38:39:9f:e0:bf:9e:44:b2:
         b3:fd:db:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:14:44 2025 by rpki-client