Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
File:                     EdGf2unFPY0oseQcqROcM1VrpiU.mft (raw, json)
Hash identifier:          tUstmv+mEhzVFmA1oc1L2I7UPHqXGsJdQBVbuMgcYoc=
Subject key identifier:   42:CE:1C:6C:9B:55:02:19:5D:0D:2A:18:3E:CE:89:04:16:7F:2A:99
Authority key identifier: 11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
Certificate issuer:       /CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Certificate serial:       019746673C1F596DD45DA65D06095BA297F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
Manifest number:          09DA
Signing time:             Fri 06 Jun 2025 18:01:00 +0000
Manifest this update:     Fri 06 Jun 2025 18:01:00 +0000
Manifest next update:     Sat 07 Jun 2025 18:01:00 +0000
Files and hashes:         1: EdGf2unFPY0oseQcqROcM1VrpiU.crl (hash: fzzt2DRmZ3ezYmAsVshCIWDMSaDImmpB18nnbYIcrVg=)
                          2: hjbzdQG0z4fmkgxJ5yW_AFN2Z3I.roa (hash: FIaXEpRqjmfrs5VrZ6nFL+BtqxgLq2lRPch8+CMAMWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:67:3c:1f:59:6d:d4:5d:a6:5d:06:09:5b:a2:97:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
        Validity
            Not Before: Jun  6 18:01:00 2025 GMT
            Not After : Jun  7 18:01:00 2025 GMT
        Subject: CN=42ce1c6c9b5502195d0d2a183ece8904167f2a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:31:75:f0:a7:6a:c3:43:20:96:b3:72:e8:
                    3c:dd:d5:89:7e:f5:15:f2:cc:68:42:af:0e:3f:38:
                    83:c6:67:7b:29:56:9a:27:2a:4d:43:8e:f5:c9:fe:
                    11:69:77:0a:86:59:d9:bc:08:98:ec:6a:25:d5:43:
                    f7:81:54:1a:fb:a9:82:a2:56:ab:2d:7e:23:06:fa:
                    34:48:99:dc:b9:7c:f9:45:f7:3b:b8:c4:8a:f6:b1:
                    aa:08:23:87:79:4d:41:98:66:63:02:a3:be:d6:32:
                    e1:5c:31:4f:3d:5d:9d:5a:2c:6f:c6:18:11:7e:16:
                    8c:47:b5:f4:bf:b3:3f:c8:37:53:80:dc:3f:f7:97:
                    b1:91:1b:25:ca:31:83:7e:2d:09:84:fd:d2:1e:7d:
                    a1:0f:a8:20:16:97:48:be:98:d9:21:a0:9d:be:b1:
                    65:78:ba:bd:2e:4a:82:c1:17:c0:30:e1:9d:b9:43:
                    c5:a7:61:7a:8f:85:ab:72:54:40:f4:2e:3d:49:c3:
                    ec:d7:ef:86:e6:d5:c6:18:aa:d8:63:66:12:5c:d4:
                    e2:c7:3d:a5:a7:bd:9b:ad:c2:d9:c3:9c:20:24:0a:
                    a3:c0:e1:c1:b3:ac:a6:97:f7:d1:f6:de:38:51:54:
                    bb:b8:fd:fd:08:c1:34:95:54:2d:0e:ff:23:2c:73:
                    57:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CE:1C:6C:9B:55:02:19:5D:0D:2A:18:3E:CE:89:04:16:7F:2A:99
            X509v3 Authority Key Identifier:
                keyid:11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:86:d0:dc:93:78:08:7b:7e:5e:96:18:1d:60:19:a9:03:18:
         e7:7b:8f:46:37:4e:a1:ab:ae:38:aa:8c:8a:27:9d:cd:eb:d7:
         64:0f:97:1b:b0:21:36:12:f8:77:25:c8:23:4d:b5:c7:48:9b:
         3a:a8:77:f7:ec:79:25:ee:b0:81:8b:51:5d:96:cb:45:31:90:
         b4:28:31:6c:5f:bc:ec:28:36:92:41:88:73:76:6f:9c:a4:c4:
         72:9a:a9:f9:29:27:f2:08:1f:3d:81:9d:fe:b5:42:60:92:c5:
         61:bc:fa:dc:19:4b:5c:7e:e1:28:af:c8:f6:df:2a:66:c3:33:
         fa:02:e0:66:f5:03:29:f1:00:17:19:8f:dd:d1:fb:8a:01:01:
         08:18:73:2a:27:aa:f2:a1:bb:d6:42:24:64:39:77:b7:cb:09:
         bf:8e:6c:94:0d:3c:66:0f:e9:2c:76:4a:d6:67:d1:9c:36:24:
         9d:96:71:f5:75:ea:e4:39:3a:09:63:96:f6:2c:ac:65:29:8d:
         45:5b:83:45:94:db:8a:fe:8b:c1:3d:6d:25:7d:fd:e4:2d:9d:
         50:a7:a8:5e:81:b5:78:94:4e:b7:fb:68:f6:d0:5a:42:14:af:
         68:04:98:1d:a3:3d:6f:1f:2c:74:e9:42:c1:f9:a6:eb:98:ed:
         63:35:43:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:24:00 2025 by rpki-client