Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
File:                     rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft (raw, json)
Hash identifier:          rySlEATE+vKk27qVcgmdkqU7FQ/pLJbd9McXJMmaWkk=
Subject key identifier:   5B:0E:69:40:A2:B1:35:46:02:E3:93:2A:68:BA:45:05:13:96:7D:5D
Authority key identifier: AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
Certificate issuer:       /CN=ac987fa1f363ed8d8178282c6748081dcc342803
Certificate serial:       01975FEFBC6DD77B61EFFDFD68180BC0E890
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
Manifest number:          09C3
Signing time:             Wed 11 Jun 2025 17:00:36 +0000
Manifest this update:     Wed 11 Jun 2025 17:00:36 +0000
Manifest next update:     Thu 12 Jun 2025 17:00:36 +0000
Files and hashes:         1: FtRwgK_I9t-YF_sE7UyodoqDTX4.roa (hash: Dqn0JGEobLwx+9jJ1AESQC6JXGtHX+GiTsykBk6YE2c=)
                          2: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl (hash: 7347iydp9j2Ln0uIVs5gHZS3kPgsVkYtMEByb3m74pE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:ef:bc:6d:d7:7b:61:ef:fd:fd:68:18:0b:c0:e8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac987fa1f363ed8d8178282c6748081dcc342803
        Validity
            Not Before: Jun 11 17:00:36 2025 GMT
            Not After : Jun 12 17:00:36 2025 GMT
        Subject: CN=5b0e6940a2b1354602e3932a68ba450513967d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e5:4f:4c:9c:56:7a:90:69:e8:fb:3c:ea:2b:
                    56:96:23:59:c5:0f:32:af:7e:b4:0d:79:ea:31:42:
                    c1:ef:9a:be:59:5b:65:30:d7:5d:b6:05:f3:7a:be:
                    ec:fb:73:af:bf:e9:d5:81:63:bc:b6:5b:2d:ed:f3:
                    6a:08:62:8d:4d:16:11:7b:0b:0a:e5:78:48:0d:54:
                    e0:f8:03:40:4e:bf:38:bc:0f:31:a3:e4:56:87:45:
                    24:bc:ed:f8:f0:a3:c4:17:f7:9f:5a:0c:ac:18:a7:
                    27:92:3b:a0:f7:fa:01:1f:11:6c:37:8f:12:72:0b:
                    74:62:60:ab:21:b7:2f:70:c9:3b:f7:b6:86:43:df:
                    3f:d0:c4:31:fe:d7:bc:08:f7:d2:ce:72:d4:0a:cf:
                    fb:ef:fd:85:83:f6:89:28:84:6e:92:af:ed:ee:c5:
                    34:b7:4a:99:bd:be:fb:7b:cb:7f:ad:90:c6:19:8d:
                    4c:12:b7:d0:25:d0:67:2a:9f:cd:81:d4:fd:45:45:
                    ec:20:3e:07:af:0d:2f:8e:ad:bf:c1:6b:d2:04:f5:
                    b3:4f:23:49:58:c4:33:69:88:5d:20:cc:21:c8:52:
                    dc:96:e5:4e:ca:fc:fc:55:45:b5:20:58:a1:82:ab:
                    af:9b:38:fa:b7:40:5e:eb:b3:f0:d2:b4:ea:75:2e:
                    39:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0E:69:40:A2:B1:35:46:02:E3:93:2A:68:BA:45:05:13:96:7D:5D
            X509v3 Authority Key Identifier:
                keyid:AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:92:ed:80:27:03:02:0d:57:3b:e8:bf:6f:36:f2:c4:75:60:
         10:d6:ad:6e:70:87:65:5b:b0:17:6f:92:04:a5:08:e3:a6:92:
         5c:ef:aa:df:56:6a:dd:4a:0f:ce:7a:60:bb:09:d1:b0:af:15:
         45:58:53:c8:32:07:da:e7:ae:ed:37:27:08:6a:3d:e5:ff:63:
         e3:7e:3d:98:9b:57:df:44:69:fe:d6:95:36:9b:f9:c7:e5:d9:
         88:ce:e9:d3:56:95:79:3b:27:55:f6:07:8c:1f:b5:a6:7c:4d:
         d7:a7:62:7b:7a:8b:bf:96:bb:2e:92:cd:eb:f0:ed:ef:e4:2a:
         17:66:0e:b3:70:ab:71:19:8c:d4:b8:a0:ad:ef:de:ef:de:19:
         96:b4:71:d1:6b:62:24:cd:26:6c:24:c2:b6:ba:eb:68:76:5a:
         2f:77:8b:85:d2:f0:76:b6:8d:95:56:fa:7f:7f:ea:67:5d:3c:
         f3:21:13:80:cb:f8:7c:e3:68:e8:03:c1:0f:fe:01:33:ad:fd:
         6f:b6:c7:6f:2f:b0:b8:2d:3f:cb:2a:6e:eb:b7:25:c1:af:8d:
         39:1e:85:3c:04:61:b1:da:5e:fe:61:d2:0f:5f:b2:aa:94:7f:
         45:ba:f5:b2:d4:88:c7:1e:0b:24:6a:3d:57:05:ca:71:de:d0:
         0e:27:d0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:26:21 2025 by rpki-client