Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/MlWeB9Y4jdKvdTVl6SU9aC-T694.mft
File:                     MlWeB9Y4jdKvdTVl6SU9aC-T694.mft (raw, json)
Hash identifier:          /nNRWgUY4jTBHhMHWpXOcEKfu4h/u2xBa5g1gRRalyk=
Subject key identifier:   EC:38:DD:D6:EF:3C:73:C0:7D:05:8F:F4:96:0E:DB:9B:75:BA:17:78
Authority key identifier: 32:55:9E:07:D6:38:8D:D2:AF:75:35:65:E9:25:3D:68:2F:93:EB:DE
Certificate issuer:       /CN=32559e07d6388dd2af753565e9253d682f93ebde
Certificate serial:       01974666B650342AAACC228E453D045E9EDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlWeB9Y4jdKvdTVl6SU9aC-T694.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/MlWeB9Y4jdKvdTVl6SU9aC-T694.mft
Manifest number:          0AD3
Signing time:             Fri 06 Jun 2025 18:00:25 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:25 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:25 +0000
Files and hashes:         1: MlWeB9Y4jdKvdTVl6SU9aC-T694.crl (hash: GXlq3vsiRfxf2tVB3fWZKg1xV67PVx0iwI7joNgBQ6U=)
                          2: T69lzJMivaoqkIjYcLrgOdTOnrA.roa (hash: 0Ssr+TPBD7HcausVt5jkHNvBIqeqcRP2h1WDFhHFN7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/MlWeB9Y4jdKvdTVl6SU9aC-T694.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/MlWeB9Y4jdKvdTVl6SU9aC-T694.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MlWeB9Y4jdKvdTVl6SU9aC-T694.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:66:b6:50:34:2a:aa:cc:22:8e:45:3d:04:5e:9e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32559e07d6388dd2af753565e9253d682f93ebde
        Validity
            Not Before: Jun  6 18:00:25 2025 GMT
            Not After : Jun  7 18:00:25 2025 GMT
        Subject: CN=ec38ddd6ef3c73c07d058ff4960edb9b75ba1778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fc:a2:1a:9b:cf:70:92:c5:b7:7e:fd:ac:f2:
                    e6:93:6b:6a:62:30:46:36:ac:78:22:37:d2:db:e4:
                    9c:42:7b:6c:72:d6:4d:81:0d:15:00:9e:b3:73:4a:
                    e2:9b:16:89:00:a9:61:40:6e:d8:df:77:c5:ed:fc:
                    a4:05:41:a1:0b:54:79:1c:2c:2c:69:ed:73:02:cd:
                    41:e6:38:a1:8c:34:98:0e:15:a3:63:4a:4c:75:7e:
                    ac:83:91:d0:be:bd:bd:0f:38:50:6b:35:82:8e:e3:
                    ea:ed:f3:01:71:1a:b5:e5:ab:a2:45:af:ee:3f:49:
                    ae:df:d0:d9:48:4c:3e:19:fa:c5:fc:8f:36:7d:03:
                    10:d7:3a:ff:fe:26:03:64:19:2c:20:c2:86:c7:bb:
                    dd:35:61:17:3b:bb:b2:68:9a:fe:9d:a1:6c:11:8a:
                    d0:0f:35:7a:84:d6:e5:80:cc:82:1c:c7:7e:1d:f1:
                    a0:8a:18:57:80:4d:8a:05:e3:8c:6f:30:8f:a1:fb:
                    0b:a0:40:0b:18:a0:96:eb:b3:a0:77:79:01:3d:40:
                    fa:03:7a:6b:c6:c9:b3:e5:92:c9:f8:ca:65:b4:24:
                    4a:65:8e:4e:60:49:0e:4a:c1:9d:48:7a:ad:80:fa:
                    99:80:11:47:ce:6e:64:81:5b:d0:e7:e1:96:c6:89:
                    20:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:38:DD:D6:EF:3C:73:C0:7D:05:8F:F4:96:0E:DB:9B:75:BA:17:78
            X509v3 Authority Key Identifier:
                keyid:32:55:9E:07:D6:38:8D:D2:AF:75:35:65:E9:25:3D:68:2F:93:EB:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlWeB9Y4jdKvdTVl6SU9aC-T694.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/MlWeB9Y4jdKvdTVl6SU9aC-T694.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/MlWeB9Y4jdKvdTVl6SU9aC-T694.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a6:e8:7a:0b:8a:cf:8c:43:3d:08:39:ec:02:3d:24:33:b1:
         0f:8d:99:9f:c2:35:6d:89:f7:7a:0e:70:6d:df:73:08:59:70:
         4a:53:1f:c3:d6:79:f9:22:e5:72:dc:5c:89:95:c1:00:3c:9b:
         c9:a3:43:5d:35:a2:c5:f8:de:e8:13:50:11:61:5f:e9:f3:6a:
         53:a1:8f:e6:d5:20:03:1c:e9:30:c3:71:43:e8:57:fc:64:0a:
         4b:85:f1:cb:bd:39:af:f3:9a:56:b6:78:bb:f7:6c:1d:83:15:
         e3:b6:42:77:2a:d3:ee:47:af:ab:ee:18:e5:80:8c:e1:0a:58:
         4b:cc:76:30:d5:39:23:52:c9:d7:0f:43:e3:f7:8c:d5:9a:b3:
         f8:65:19:e7:bd:1e:36:50:3a:00:95:d9:26:20:8c:1f:15:74:
         fc:c9:01:b7:18:48:67:97:82:98:f3:88:7d:b8:6c:01:76:de:
         2f:c0:42:ee:12:fe:d7:69:ed:b4:a5:37:4a:cd:56:9f:38:6c:
         de:1b:02:dd:15:c7:c3:67:1b:e7:1c:6c:c7:1b:8c:ac:03:4f:
         ac:25:73:68:09:39:67:e4:e6:57:10:84:32:8c:ae:d1:7c:f9:
         0a:52:66:81:90:66:92:64:0f:b6:b8:cd:39:cb:9e:6b:e5:0b:
         4e:cb:51:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:25 2025 by rpki-client