Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
File:                     t6x4DrIELIxXABtl7xVub1kxI5s.mft (raw, json)
Hash identifier:          txZ/yrhDZ2vdkaxrDU9VjqvUCcFDXy9LvB54rIiTg/4=
Subject key identifier:   A8:10:3E:B8:76:26:50:F5:D9:66:A8:EA:D3:D9:94:16:5D:4B:9A:9F
Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
Certificate issuer:       /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Certificate serial:       01976026A02C47D1C0B1A65F2B22D8BEBAE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
Manifest number:          0E88
Signing time:             Wed 11 Jun 2025 18:00:33 +0000
Manifest this update:     Wed 11 Jun 2025 18:00:33 +0000
Manifest next update:     Thu 12 Jun 2025 18:00:33 +0000
Files and hashes:         1: jop9I76IYZwBELNaT-ZQAcQ49rU.roa (hash: r++agSStViQ3qw07RB4HAaR5ym/8f71PVZva/QwS050=)
                          2: t6x4DrIELIxXABtl7xVub1kxI5s.crl (hash: 93Es9kGMTbNLlPOZW1S4UpJniv+2QhnmhSdJ8LfRKig=)
                          3: v7txDad3obC4fM89n81NhQg4Yeg.roa (hash: SQrktdz+pjDoi2qLtFhS7eNuomu/ooHtDXvC3qLXy1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 18:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:26:a0:2c:47:d1:c0:b1:a6:5f:2b:22:d8:be:ba:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
        Validity
            Not Before: Jun 11 18:00:33 2025 GMT
            Not After : Jun 12 18:00:33 2025 GMT
        Subject: CN=a8103eb8762650f5d966a8ead3d994165d4b9a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9e:59:45:5a:b0:83:01:14:1d:3a:34:c0:fe:
                    e1:65:f6:fe:2f:31:3d:00:cf:c6:15:0a:9d:b4:78:
                    98:78:d9:84:da:c7:de:44:7d:bb:da:29:4f:7a:4b:
                    87:4a:3c:ab:08:99:73:d4:32:ba:d1:16:e4:3b:83:
                    a2:29:66:4f:0b:97:46:86:f0:69:37:76:b3:8b:dd:
                    c3:4d:64:de:c0:e4:a1:0e:a6:74:7f:46:b1:08:be:
                    2e:bd:3e:02:3c:40:b7:d5:b5:94:c1:dd:eb:b6:55:
                    7a:d6:26:f8:78:56:d8:92:dc:cd:9a:de:eb:60:d7:
                    83:4e:6c:af:43:f5:3f:a7:4f:90:e3:6e:21:26:b8:
                    ff:c5:b2:05:00:c5:aa:f7:b5:1b:46:cc:2a:75:c9:
                    cf:d7:1d:db:ce:c2:e6:1b:51:d7:d7:32:a9:ae:5b:
                    c3:5f:83:67:99:53:eb:7e:f3:1c:02:5b:d5:0e:df:
                    6c:e6:98:15:8c:5d:8a:ab:30:b1:3d:75:25:14:23:
                    14:f8:12:6a:ae:12:83:cd:2c:62:ff:7d:d4:68:61:
                    23:1e:c1:db:70:4b:5f:14:81:8b:22:23:a6:f4:46:
                    0a:1d:e6:97:1d:f3:da:25:dc:4d:7e:6b:a3:3e:19:
                    6e:a3:fd:57:95:18:2e:ec:5a:b7:8a:48:3e:fc:c5:
                    69:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:10:3E:B8:76:26:50:F5:D9:66:A8:EA:D3:D9:94:16:5D:4B:9A:9F
            X509v3 Authority Key Identifier:
                keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:70:26:92:9b:11:f5:af:78:d2:fd:78:a1:8e:86:23:00:32:
         5d:a0:53:91:54:9f:e9:ca:fb:18:30:54:56:5d:bf:88:cc:d2:
         bb:bc:5e:fa:77:25:86:b6:24:ab:cd:65:3c:48:55:b6:6a:d9:
         ff:ce:f9:98:1e:53:4b:45:71:4b:34:39:4d:3a:24:54:6e:a0:
         f3:26:97:87:6b:b7:48:f5:86:57:91:47:b4:99:b7:1a:3a:91:
         16:9b:78:65:f3:46:41:1b:e0:d2:11:89:3e:54:87:cf:dd:f9:
         ec:af:b7:ac:8d:60:2b:ba:22:3e:81:e7:80:22:18:26:5d:80:
         6c:99:4b:63:81:37:be:3d:65:26:4c:fc:5c:69:fe:71:c1:c5:
         81:13:f4:64:4f:d0:f5:44:b6:8d:a9:86:d1:19:62:0a:26:30:
         c5:7c:e4:5d:3c:df:78:d3:51:7b:5a:dd:2b:e5:60:86:6e:87:
         be:ac:12:31:fd:54:d6:7e:60:6d:ce:26:6a:ec:8e:ce:35:08:
         ee:61:ce:cb:59:38:30:00:42:1b:59:f2:02:49:c8:6d:ca:5e:
         42:eb:7d:e8:4b:31:28:d1:99:d2:b1:e8:aa:63:01:7e:ca:2e:
         fa:d6:3e:c3:e7:2b:58:96:11:de:d2:81:9e:f2:a0:0e:7b:90:
         97:cf:6d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 03:30:07 2025 by rpki-client