Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
File:                     TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft (raw, json)
Hash identifier:          0Al4awCsbyrwIl+gYc25sAS8HpfTAgJGwhV2qONNVwk=
Subject key identifier:   30:1E:2E:F2:C7:CB:F8:3D:2E:39:BA:0C:79:3C:47:20:94:0B:62:A0
Authority key identifier: 4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75
Certificate issuer:       /CN=4d2f4d108ac184bd1b532ff88fc6644ade16da75
Certificate serial:       0197470C18405BC24AB761AA971E51BACA71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
Manifest number:          0903
Signing time:             Fri 06 Jun 2025 21:01:04 +0000
Manifest this update:     Fri 06 Jun 2025 21:01:04 +0000
Manifest next update:     Sat 07 Jun 2025 21:01:04 +0000
Files and hashes:         1: I7ruHZ7I_t5FamkSP1UVHK-D1aQ.roa (hash: 0bp5i/w7MdfWSRoD3vMh3eYqQ/2+5IAaWheLS0shHT0=)
                          2: TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl (hash: shIOW7mJw7SeU5K6EJqzw/fDy9qIHliqpBCvOYI8WVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0c:18:40:5b:c2:4a:b7:61:aa:97:1e:51:ba:ca:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2f4d108ac184bd1b532ff88fc6644ade16da75
        Validity
            Not Before: Jun  6 21:01:04 2025 GMT
            Not After : Jun  7 21:01:04 2025 GMT
        Subject: CN=301e2ef2c7cbf83d2e39ba0c793c4720940b62a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:22:41:00:81:d3:93:60:51:84:95:65:35:68:
                    1a:4f:e0:bf:6e:f6:e1:66:6d:fd:6a:3f:40:d6:2d:
                    80:c1:78:be:00:aa:f2:84:84:81:b4:5f:bc:4f:90:
                    d2:da:44:1e:49:a3:e0:c6:5b:f9:74:81:0f:dc:5e:
                    c0:c5:bb:a0:19:b2:bc:f3:3e:94:ff:be:ee:b8:84:
                    ff:97:0e:f7:23:34:68:f6:90:e0:c9:da:5e:e9:f7:
                    70:73:2d:1f:0e:42:93:f9:f6:37:da:33:87:dc:ae:
                    e3:fa:34:3d:81:60:1b:8a:eb:14:19:e0:0c:df:3b:
                    51:39:8e:94:1a:7d:9c:b8:b7:d0:51:eb:83:14:31:
                    b8:68:e6:3a:7b:3b:2d:c9:58:0e:92:80:25:f6:66:
                    54:4f:f0:46:3d:39:c3:4a:f7:fc:bd:72:07:d5:6b:
                    52:e8:ce:05:00:b8:fc:7b:0c:57:c3:f1:71:ce:cc:
                    ab:32:cd:c9:95:6f:a8:99:db:82:a9:58:70:51:58:
                    51:db:e3:1b:b9:0e:7e:74:b4:2f:45:fe:0c:92:63:
                    d5:76:26:26:3e:f9:47:d9:db:5e:1b:ba:08:c1:52:
                    4c:94:5f:73:57:8b:83:1b:99:c9:a1:2c:cd:07:c4:
                    10:30:dd:ae:06:ff:55:d1:0c:2b:08:82:7f:ec:60:
                    8f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1E:2E:F2:C7:CB:F8:3D:2E:39:BA:0C:79:3C:47:20:94:0B:62:A0
            X509v3 Authority Key Identifier:
                keyid:4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:6a:10:c2:ac:90:12:e3:b0:11:ba:06:bc:ea:a1:ec:f9:da:
         48:69:a1:73:66:53:02:c3:4e:2b:14:2e:25:6f:19:93:24:03:
         c3:d6:c8:31:1e:8b:44:0b:7d:ba:ba:ba:d2:be:f5:49:8d:3b:
         61:b8:e8:69:99:3f:1d:98:57:37:4f:a0:8d:11:2a:3c:28:41:
         81:6c:19:91:bc:2e:dc:e1:fe:e4:9b:0a:bf:96:9c:d3:86:e8:
         3f:3a:9a:ab:2c:23:da:21:4a:03:41:35:dd:c6:97:e7:eb:ba:
         6a:3f:9b:c6:c6:d8:73:3b:3a:39:1f:0d:80:56:8e:e1:e0:21:
         6d:a8:a3:e2:87:ad:32:66:20:d3:e1:98:54:a9:81:67:b9:3a:
         bd:85:73:9b:6e:81:d4:10:ee:7b:12:4e:54:10:c4:ad:ff:95:
         c5:e6:33:2e:93:16:53:84:df:04:32:39:bb:1c:ff:5f:cb:ae:
         62:8b:36:98:ae:c3:c3:29:24:c5:04:20:98:fe:e4:e9:73:1f:
         3c:e3:fc:47:73:8a:72:ca:e5:b1:f6:7f:42:d9:3f:d9:84:d8:
         7d:d2:9a:4b:eb:52:15:8b:b5:a3:82:10:88:ee:46:5f:d0:23:
         06:b6:83:a1:60:10:d4:af:45:63:2f:ea:95:c6:e8:3d:0d:3e:
         21:02:43:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:17:43 2025 by rpki-client