Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
File:                     eUif00bnIUhmFZrC8OycmQxPFLk.mft (raw, json)
Hash identifier:          dPWTjMkhFJF3NhIA/ECpG6UBN8yu9viNjCZ8t0I/l0U=
Subject key identifier:   31:7F:63:A3:49:8F:AD:BA:E4:AA:7F:B4:3A:CA:7A:91:E5:7B:2F:B7
Authority key identifier: 79:48:9F:D3:46:E7:21:48:66:15:9A:C2:F0:EC:9C:99:0C:4F:14:B9
Certificate issuer:       /CN=79489fd346e7214866159ac2f0ec9c990c4f14b9
Certificate serial:       01974D7BECE5ABC8B87F23412F59D15CFF86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
Manifest number:          03DC
Signing time:             Sun 08 Jun 2025 03:00:56 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:56 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:56 +0000
Files and hashes:         1: YbVpJmm5d19rM-zYZeA0ZWdtDMg.roa (hash: l5rWO723DVA6iEz8C5Lvzh9vlRYqelqcHe5HXOP/cpM=)
                          2: eUif00bnIUhmFZrC8OycmQxPFLk.crl (hash: zxi4bvF4mBId5ycxXLCGHcPBalJcb8kEm4E6cQZNmh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:ec:e5:ab:c8:b8:7f:23:41:2f:59:d1:5c:ff:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79489fd346e7214866159ac2f0ec9c990c4f14b9
        Validity
            Not Before: Jun  8 03:00:56 2025 GMT
            Not After : Jun  9 03:00:56 2025 GMT
        Subject: CN=317f63a3498fadbae4aa7fb43aca7a91e57b2fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:17:d8:d7:73:55:c0:89:f7:f3:5d:48:af:
                    34:46:ad:51:43:0d:c7:7f:46:db:09:f9:f1:89:c6:
                    22:07:db:db:bd:5d:7a:ff:9f:5a:62:65:fa:f4:39:
                    ba:4b:cd:8b:31:05:70:29:fd:8f:83:69:44:8e:81:
                    2e:c4:43:8d:8a:a9:7b:45:d9:55:2d:f0:b3:5e:32:
                    84:14:b4:ac:6f:1c:07:e3:1c:03:03:5b:56:fd:09:
                    c4:19:91:c0:4d:43:73:64:64:40:d6:2d:72:5e:62:
                    d8:e9:5f:59:1b:31:6f:9d:97:4e:aa:7a:46:fb:aa:
                    dd:3c:fc:8a:05:81:59:a1:73:9a:ac:32:af:82:2c:
                    65:d8:fb:ce:0a:82:c9:e2:2f:aa:b5:0e:bf:92:74:
                    4c:d9:01:45:00:70:1d:81:83:74:41:6a:90:cc:7a:
                    96:1b:93:cc:84:89:35:f0:55:92:68:f2:7f:a9:c3:
                    2a:d9:88:23:6c:17:0c:12:2b:87:4d:c0:24:27:bc:
                    8b:0c:8b:0c:ff:53:88:dd:9c:96:be:2c:79:37:90:
                    b1:3b:ef:34:0e:c5:32:80:f6:02:4f:bb:ed:7f:f4:
                    08:04:33:6b:4f:b2:d4:6c:95:12:08:61:6f:c2:45:
                    23:d8:ae:ba:18:32:21:7c:4c:84:f1:f3:be:e8:c6:
                    33:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7F:63:A3:49:8F:AD:BA:E4:AA:7F:B4:3A:CA:7A:91:E5:7B:2F:B7
            X509v3 Authority Key Identifier:
                keyid:79:48:9F:D3:46:E7:21:48:66:15:9A:C2:F0:EC:9C:99:0C:4F:14:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:03:c0:af:d4:3d:14:99:4c:b1:68:70:0e:ca:9a:3c:f9:b3:
         35:56:f0:05:c9:d6:52:14:6e:42:79:ff:e5:13:35:f5:7e:97:
         5b:44:5e:cb:c5:5d:dd:6b:b7:d7:65:69:8e:0c:70:75:08:eb:
         20:39:04:01:df:07:0a:88:b1:f2:e8:a2:02:9a:83:8d:28:cf:
         c7:26:df:eb:ce:0f:8d:70:f3:e9:3d:1a:38:12:2b:e4:e9:97:
         1a:37:a3:b3:29:c4:d4:0e:c6:34:a4:f9:12:29:3f:ac:6a:a1:
         5d:f6:ed:dd:d3:69:cc:7c:e3:30:92:be:91:0c:07:17:33:f6:
         25:91:b8:30:44:58:f6:ca:51:43:e5:39:08:74:de:20:1c:df:
         26:26:ec:8b:bf:43:ba:e0:f3:45:ba:5f:15:30:4c:c0:fb:13:
         89:07:fa:23:95:03:e0:52:92:5f:72:5f:df:88:55:b5:20:d3:
         a1:10:93:0d:b6:21:1d:b5:f8:08:69:d6:db:2f:f0:d5:1e:22:
         1f:2e:a0:16:78:f7:1e:65:4e:83:72:58:df:60:91:12:78:be:
         4a:b7:fc:19:98:ac:2d:f5:9c:47:72:53:00:93:88:27:8e:88:
         96:f6:61:74:ec:ed:cc:1a:c8:5c:e0:ba:52:b9:60:ed:84:8a:
         65:56:fe:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:25:12 2025 by rpki-client