Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
File:                     mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft (raw, json)
Hash identifier:          tUvqjtIk80sZ6IjMJF/3KLbwk6+pzkFec7Oak7k1YqA=
Subject key identifier:   B8:E7:5F:70:40:DD:8B:8B:5B:BC:FB:71:E3:F7:FD:79:E4:32:4D:CB
Authority key identifier: 98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
Certificate issuer:       /CN=987dccf5068829329cdac51d5d190fe1089cde9e
Certificate serial:       01975BDCB1716066D2F9EA13EE7A84A8AA49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
Manifest number:          0EA1
Signing time:             Tue 10 Jun 2025 22:01:19 +0000
Manifest this update:     Tue 10 Jun 2025 22:01:19 +0000
Manifest next update:     Wed 11 Jun 2025 22:01:19 +0000
Files and hashes:         1: R9XjDqsU1i45aj3QGrLZJm2Xbtw.roa (hash: eXfXK6CNN8vKlZOgITSmIbCpVEoWMFvA24LwX+sXHCg=)
                          2: mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl (hash: 3uspFky7GUbmiQgoDz5dgEmLm2k0AYp/4ky0j8cNTSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:dc:b1:71:60:66:d2:f9:ea:13:ee:7a:84:a8:aa:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987dccf5068829329cdac51d5d190fe1089cde9e
        Validity
            Not Before: Jun 10 22:01:19 2025 GMT
            Not After : Jun 11 22:01:19 2025 GMT
        Subject: CN=b8e75f7040dd8b8b5bbcfb71e3f7fd79e4324dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:89:b8:3a:78:e6:7a:47:95:ce:46:b4:d3:6f:
                    5f:8d:1e:8e:18:a3:30:89:e6:71:38:1f:6c:bd:6a:
                    40:35:2b:a7:c8:09:34:e5:65:0e:25:37:99:cd:9c:
                    bc:92:af:c9:97:43:e1:8f:98:e4:3f:54:11:ab:76:
                    66:e8:6b:19:55:72:e9:4c:87:c2:5a:3e:74:ff:ab:
                    7a:47:08:dd:e5:ba:f8:3c:06:6b:87:25:d0:9f:81:
                    4c:e9:92:cf:f7:a6:47:16:db:77:6d:52:a4:10:6e:
                    df:6a:26:ef:f4:a0:c6:e7:25:e7:c6:c4:96:ca:06:
                    af:de:67:1c:40:18:16:d0:92:12:6a:13:5a:60:9a:
                    41:6e:ce:a6:e8:db:cf:7c:fa:1c:7f:15:6b:5f:a6:
                    4a:5d:05:67:81:bc:f0:3e:a7:a5:ef:be:28:91:83:
                    b9:e0:8d:42:b5:69:1c:ae:5e:ff:77:55:04:fb:b8:
                    d6:4d:57:95:d5:2e:b5:76:03:cb:19:fb:32:76:bf:
                    76:f1:00:34:f3:84:87:bb:d8:62:40:6b:b4:79:a0:
                    b6:76:77:8d:ee:30:78:6c:31:ed:ea:e5:4e:92:47:
                    67:a1:99:30:02:98:82:97:27:98:aa:82:10:f2:9a:
                    9e:65:2b:7f:d9:7d:1c:a8:e1:93:ff:ef:da:94:3e:
                    21:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E7:5F:70:40:DD:8B:8B:5B:BC:FB:71:E3:F7:FD:79:E4:32:4D:CB
            X509v3 Authority Key Identifier:
                keyid:98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:d7:2e:a4:a2:f9:3b:15:39:fa:5d:02:92:ac:36:7d:65:1e:
         27:cd:5e:ce:fd:00:92:53:e3:58:71:71:98:b2:d4:17:2b:37:
         d4:2b:43:77:44:b6:4e:f7:71:3e:f0:00:fd:db:15:8e:e5:96:
         9b:1c:45:5d:26:a7:fc:37:a7:47:43:e1:02:57:b3:a9:81:5a:
         b8:37:e6:e6:a3:e5:12:e4:48:4d:61:2c:ca:7a:c2:e0:26:70:
         0e:3a:72:97:20:49:1d:a4:52:a4:4a:1f:c6:63:68:af:12:2e:
         a1:8b:b4:48:a5:f5:8a:59:fd:f0:05:bf:d3:9f:b7:a5:e5:42:
         ea:43:c0:1c:1a:a3:2c:d6:a4:70:f8:1b:63:95:64:11:90:68:
         5c:2e:0d:6f:11:66:16:82:13:61:a1:f4:50:30:86:f6:0d:f3:
         2e:b0:22:01:a4:90:9c:e4:83:11:51:27:12:72:74:51:1a:e1:
         97:59:a5:e6:96:73:53:18:8b:ab:5d:06:42:6e:a9:8b:86:d2:
         6d:41:e3:bd:79:54:c6:20:09:c8:c2:46:83:6a:c5:c4:38:e8:
         7d:09:70:be:a9:87:23:a1:46:c1:41:4e:e8:f0:84:b7:5a:8c:
         11:61:d4:18:98:1a:7a:63:db:55:4d:91:13:bf:46:a7:f5:7d:
         15:0e:47:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:31:47 2025 by rpki-client