Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
File:                     Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft (raw, json)
Hash identifier:          8r/OaeoXCajZCDiBI/AT8Q8YHZ+blvhdbO7UaD9DFcI=
Subject key identifier:   E4:1A:CB:93:00:DD:7E:3E:C8:23:65:35:71:C7:A6:B5:18:42:C2:23
Authority key identifier: 47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
Certificate issuer:       /CN=473f498592457859f26fb5a610b7b51ef52413f3
Certificate serial:       01975CEF0957E6B034EB8C0AAF1124EA6835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
Manifest number:          06FA
Signing time:             Wed 11 Jun 2025 03:00:58 +0000
Manifest this update:     Wed 11 Jun 2025 03:00:58 +0000
Manifest next update:     Thu 12 Jun 2025 03:00:58 +0000
Files and hashes:         1: Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl (hash: yO20j94pVXR2lX48N6CtkhWt0x/ooMV1jy3nIm7N5cY=)
                          2: gACLFbYoQuKSwULuZch33ylGIws.roa (hash: Y3WJDNbjsbnqFHsgE1qqfoHZxL80KWaLyz825fwkstQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:ef:09:57:e6:b0:34:eb:8c:0a:af:11:24:ea:68:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473f498592457859f26fb5a610b7b51ef52413f3
        Validity
            Not Before: Jun 11 03:00:58 2025 GMT
            Not After : Jun 12 03:00:58 2025 GMT
        Subject: CN=e41acb9300dd7e3ec823653571c7a6b51842c223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:51:c5:6b:da:ea:06:6d:6d:dd:a7:44:25:92:
                    fb:61:39:a9:b0:e9:ac:40:5e:c1:42:98:7e:15:7d:
                    2d:e3:30:86:14:d3:6b:2d:30:bc:6f:dc:f3:b3:dc:
                    2e:7a:e2:ec:6e:55:36:33:5d:a8:51:a2:50:01:aa:
                    56:06:96:17:4e:10:17:04:3c:49:1d:9c:e4:3c:d3:
                    32:04:b1:7e:e5:86:fc:7a:d6:ce:56:39:9c:9a:1b:
                    ce:3c:eb:33:a2:2a:a5:3a:d3:c5:ac:16:fc:db:a7:
                    ed:9e:0e:bd:7d:26:7d:e0:85:35:dc:7d:ef:76:80:
                    e7:5b:35:e3:35:db:75:85:c6:71:7f:a0:60:bb:0d:
                    f3:67:f2:80:05:d8:53:82:b1:5c:8b:ef:2e:97:6b:
                    a8:19:a4:28:35:2b:a8:7e:ec:12:86:ea:60:47:d9:
                    ec:1c:3e:1c:af:e7:a8:37:be:cb:7a:04:fc:14:35:
                    6e:db:6d:7c:a1:c1:6a:b0:5e:98:8c:ea:51:bd:f9:
                    af:a6:0e:32:69:65:c7:0d:4a:87:b9:f1:ea:7f:10:
                    be:89:56:85:c6:00:90:d8:dd:76:ae:ae:02:ae:ac:
                    82:27:9f:cb:57:92:76:b3:9d:5b:c0:af:01:64:4f:
                    1d:f2:e3:71:14:e6:b7:ee:23:b6:00:05:0a:c4:48:
                    1e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1A:CB:93:00:DD:7E:3E:C8:23:65:35:71:C7:A6:B5:18:42:C2:23
            X509v3 Authority Key Identifier:
                keyid:47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:04:f1:5e:f8:ea:b9:06:3d:11:ff:78:90:44:89:f2:f7:53:
         9a:13:eb:fa:1f:3d:c3:e1:9c:e0:59:df:7b:71:43:55:dd:8e:
         55:f2:63:40:33:c4:2b:32:a4:c3:0b:c2:8b:58:2c:f5:66:18:
         6d:9d:3e:bf:52:ec:be:63:6e:2d:73:ef:5e:eb:40:02:16:98:
         86:30:1d:39:3f:74:92:09:2f:17:d7:1d:f0:a6:f8:10:26:bb:
         ae:25:fe:80:65:58:a4:44:2a:1a:cd:7b:b9:6f:d6:a3:8f:77:
         65:28:85:a9:05:40:9d:31:79:9e:f6:7a:6c:33:00:90:65:64:
         10:00:9e:08:8a:19:02:e0:bc:2b:33:ed:52:e7:f2:d0:41:1f:
         0e:81:41:3f:45:14:a9:34:12:64:ae:82:cd:87:c5:27:2a:2f:
         b6:97:38:02:68:0b:ec:44:25:1d:98:ba:c3:e2:a7:b3:42:ee:
         88:f7:ac:35:a9:3a:a9:49:3f:b5:bb:31:b4:24:57:01:11:5e:
         0c:dd:40:3f:a0:66:a3:eb:3a:67:53:aa:01:5a:f4:b2:bd:7e:
         5c:5d:de:3a:f4:0b:b7:2e:c9:a0:e5:de:51:19:14:09:e9:53:
         70:25:40:73:38:16:04:f8:be:6c:69:73:ce:41:84:8c:69:ec:
         c1:14:93:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:11:12 2025 by rpki-client