Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
File:                     E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft (raw, json)
Hash identifier:          Y4n3ZPAnqENDiYhmd1MulG2bsmSUIhIbZtOj6Gv6KVA=
Subject key identifier:   9C:61:B2:B1:21:D7:4B:BB:25:5C:E9:C7:4C:7D:4C:A7:A7:1C:41:CE
Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
Certificate issuer:       /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Certificate serial:       01973D6421C09B4E7138DA8B0D63B2459286
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
Manifest number:          0804
Signing time:             Thu 05 Jun 2025 00:01:01 +0000
Manifest this update:     Thu 05 Jun 2025 00:01:01 +0000
Manifest next update:     Fri 06 Jun 2025 00:01:01 +0000
Files and hashes:         1: E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl (hash: eZnJJB9qIH+47P6v7uGiS5WpCnYp+QFAzB6zpNiLNh4=)
                          2: JwyhTY3gBjH_DHx6X1gPB4EC1Hw.roa (hash: Y38jvMStrd7/OGI8zyUcvfpz5v5z/NCYXMUYLkJSmbY=)
                          3: R6G1cXur2zKERbdd7daCrZ1h_hs.roa (hash: 5NT8h5q4KtrnouiY1SYAj++irMZW9IEfJcr79qAbGG8=)
                          4: TJ7wCyZ9vINQHYhKwMadhJQnS2Y.roa (hash: W0rX13j2lIPxoSYnlVy329KsXHfzz1cOXW8K7nI1NDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 21:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3d:64:21:c0:9b:4e:71:38:da:8b:0d:63:b2:45:92:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
        Validity
            Not Before: Jun  5 00:01:01 2025 GMT
            Not After : Jun  6 00:01:01 2025 GMT
        Subject: CN=9c61b2b121d74bbb255ce9c74c7d4ca7a71c41ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:e5:7e:fb:f2:97:dc:5d:0c:80:d4:0d:be:
                    7a:73:f6:6d:89:45:8c:bd:b7:05:43:88:d5:68:f7:
                    cd:9c:af:3a:1d:30:8e:a2:3c:fb:68:d1:51:70:2a:
                    84:23:6d:74:aa:96:16:ae:ba:f0:be:85:5e:aa:8b:
                    b5:04:1e:67:2e:48:4d:b2:eb:2f:8f:d6:13:c2:90:
                    79:58:03:80:7f:de:e2:08:d2:12:5c:1d:6e:f1:7b:
                    fd:0c:3e:ad:6d:75:b8:d2:1b:b5:2b:8f:89:2a:05:
                    5d:3f:80:ad:c3:35:10:45:fb:31:83:fd:42:31:c1:
                    1f:f4:46:2a:31:26:1f:32:46:8e:cf:f6:19:37:b1:
                    f6:44:fb:f0:29:45:9a:74:ba:18:e2:02:e1:d9:5d:
                    2a:a4:33:7c:b9:1b:83:cf:48:ed:d0:56:1d:35:45:
                    08:f3:69:f7:77:7b:59:73:7d:95:a3:da:4a:e9:3c:
                    17:80:de:b5:99:1b:36:4d:7a:dd:65:a1:62:1d:2b:
                    fd:ee:27:64:0a:9a:8c:61:95:46:75:00:d4:bc:11:
                    82:e7:50:f2:e9:bc:45:26:ec:8a:85:30:7d:da:36:
                    f8:08:2f:9a:6d:93:b2:58:88:db:b1:79:76:61:04:
                    cb:42:77:1f:f6:11:6c:aa:a9:2d:2a:88:62:97:2f:
                    dd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:61:B2:B1:21:D7:4B:BB:25:5C:E9:C7:4C:7D:4C:A7:A7:1C:41:CE
            X509v3 Authority Key Identifier:
                keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:dd:e2:65:c2:00:1b:e6:4e:d3:8c:ac:1b:04:41:c7:65:c4:
         c0:06:96:80:11:a1:c6:fc:81:13:8b:4f:72:9f:f9:0d:36:3b:
         04:80:ab:f7:48:b7:87:bf:a0:c9:2a:0a:0f:2d:a8:51:15:f7:
         19:1e:78:46:99:fc:f3:cd:2d:3e:5b:c2:10:47:28:30:ea:98:
         c7:06:de:6b:5d:e0:18:37:b7:d7:d3:74:14:87:eb:03:47:c5:
         a0:9a:56:73:91:bb:5e:53:f2:f0:11:26:fb:cd:79:8e:61:84:
         f7:c7:72:a6:0e:ab:b2:f7:27:5f:02:f7:56:a9:59:6e:4b:ce:
         78:07:db:0b:05:1c:de:64:ad:2b:d0:d3:fd:51:db:25:79:14:
         04:3d:73:4c:46:d1:5e:17:b4:fc:03:8b:48:da:98:55:e2:91:
         05:2b:7e:47:bb:0c:d8:6e:ef:3c:f1:e1:4b:da:5f:f9:8c:17:
         c5:58:e3:df:6e:8f:f7:87:d5:bd:01:59:38:81:84:81:8d:dd:
         9d:21:3b:bd:2b:08:ca:9a:eb:da:b6:42:b5:66:c8:38:db:85:
         c7:47:96:13:b2:4b:19:fe:2e:f8:f5:f4:06:87:dd:ed:f1:4e:
         64:c1:26:51:11:e1:1b:fb:64:ce:00:68:d5:b3:15:cf:d6:de:
         87:04:29:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 05:17:58 2025 by rpki-client