Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
File:                     zxuxqgyTt5GML9JDO0HCHXnUTao.mft (raw, json)
Hash identifier:          /ipXWJH5vrJt4/jbVOr/KnfR6BmtEAXaj5jrOz+dANM=
Subject key identifier:   E0:81:69:5B:BE:3C:97:F8:B0:A0:14:D5:87:F6:06:3F:82:5A:ED:D4
Authority key identifier: CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
Certificate issuer:       /CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Certificate serial:       01974E20B9A63EF1521794430D4145F9D503
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
Manifest number:          0A44
Signing time:             Sun 08 Jun 2025 06:00:56 +0000
Manifest this update:     Sun 08 Jun 2025 06:00:56 +0000
Manifest next update:     Mon 09 Jun 2025 06:00:56 +0000
Files and hashes:         1: 6FMleRn7QE-uKMdEakcsOaCZ1ss.roa (hash: mcv6vhN3tb3ONM9bZ3O2URAWmhAYPv+UUje7yYCRo5U=)
                          2: zxuxqgyTt5GML9JDO0HCHXnUTao.crl (hash: G3lj7v5akM91FYgaxE+rZYKvraUn/P3BKEqwp4lmE44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:20:b9:a6:3e:f1:52:17:94:43:0d:41:45:f9:d5:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
        Validity
            Not Before: Jun  8 06:00:56 2025 GMT
            Not After : Jun  9 06:00:56 2025 GMT
        Subject: CN=e081695bbe3c97f8b0a014d587f6063f825aedd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bc:b0:50:e0:21:15:de:18:21:e5:82:f8:82:
                    87:fb:48:23:61:10:1a:d7:e6:bd:69:1a:5f:3b:e9:
                    0c:08:da:df:9f:fa:13:54:44:85:d9:90:72:8e:e8:
                    96:f0:fd:77:f6:2e:c4:12:84:24:90:af:8d:32:ad:
                    e2:b9:a5:f7:c1:27:d2:4c:12:a0:55:85:04:a9:87:
                    66:24:5e:22:95:52:0b:cf:51:ac:2d:20:10:e3:b5:
                    9a:90:a4:13:3f:88:6e:46:7b:40:79:a9:0b:be:09:
                    3b:43:71:c3:4d:31:ac:86:ae:0e:8b:50:b3:d8:69:
                    ee:39:e6:04:73:a1:91:0d:f6:7b:37:c6:b9:73:8b:
                    e8:d9:e9:7d:a3:b7:c6:a1:53:2d:42:0f:54:2b:51:
                    72:c1:4e:0f:28:da:d4:6e:12:b4:2b:e7:2a:80:ac:
                    ae:db:59:ae:cd:22:36:86:dc:59:1b:0d:5c:eb:af:
                    89:7f:ad:86:84:89:ee:1f:fc:83:97:22:2d:de:d8:
                    cd:9d:65:80:94:9a:b1:ed:c4:bc:97:43:f8:82:28:
                    80:33:38:5c:a6:49:fe:c4:5d:0f:d1:26:0c:6c:15:
                    23:f0:20:03:ea:8d:51:a8:c9:f2:83:56:ea:f9:a9:
                    38:13:19:7c:f6:09:91:2a:37:8e:45:df:98:55:0e:
                    f6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:81:69:5B:BE:3C:97:F8:B0:A0:14:D5:87:F6:06:3F:82:5A:ED:D4
            X509v3 Authority Key Identifier:
                keyid:CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a2:c4:08:61:86:1c:09:cc:d4:38:c2:52:44:33:28:f1:9e:
         2a:8b:d5:d4:22:79:33:f2:1e:11:73:6b:c5:3d:69:50:f6:98:
         a2:2a:2f:54:9e:3c:a3:26:b5:11:ea:8e:ef:a7:5f:6b:6b:3a:
         db:a3:6f:cc:7e:fb:56:75:95:1d:12:bc:6a:77:03:7c:db:ce:
         37:44:5b:e3:6c:1d:cd:9f:4d:df:16:fd:cf:9b:36:9b:1d:c5:
         b8:71:d8:b8:0a:9a:ed:a5:c8:8e:57:bd:4b:3f:48:71:22:83:
         08:98:00:df:9c:00:bf:2f:2d:c3:85:a9:b8:67:3d:d5:c7:9f:
         0b:50:b8:98:b4:09:f5:9f:03:f0:4c:2b:60:c9:94:91:d2:04:
         bd:33:2c:d1:ce:4f:aa:80:39:cc:c8:1a:41:e5:bf:4d:51:31:
         8b:77:9e:51:83:38:30:88:83:22:b7:31:85:45:f6:5d:b3:e7:
         d5:d1:be:0a:69:ac:62:ac:05:b4:ed:ca:ae:de:ad:8d:6b:2c:
         69:2b:24:02:d4:7f:44:fe:09:f2:c9:54:bb:e5:59:9b:58:54:
         9d:31:f4:00:97:2b:a4:1f:fc:64:83:22:f2:0f:c5:15:4e:5c:
         7d:c4:00:82:a1:8e:cc:b4:97:d4:5c:df:ff:49:47:ba:56:3d:
         dd:ca:77:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:09:55 2025 by rpki-client