Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
File:                     I399sDMxTEc82hlODfefHDddo_Q.mft (raw, json)
Hash identifier:          OO2I64WI/+ReW8pxZbuXyVh38EwUtnujOIyaK6RNOoI=
Subject key identifier:   A3:DF:96:92:34:8B:8B:8C:9E:EC:1A:FF:78:11:67:15:8E:3B:1A:AF
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Certificate issuer:       /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial:       01974AB1C852C0FCB30E5D0A98E47DE9D1C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
Manifest number:          15A2
Signing time:             Sat 07 Jun 2025 14:00:54 +0000
Manifest this update:     Sat 07 Jun 2025 14:00:54 +0000
Manifest next update:     Sun 08 Jun 2025 14:00:54 +0000
Files and hashes:         1: 1-Bi08UyF5kDlTfAFEBLTv3vJUyE.roa (hash: sX+xxidCxJKw0arEwxAVgO2x+NsuL6KJIlJ1Hn044sM=)
                          2: I399sDMxTEc82hlODfefHDddo_Q.crl (hash: wcydMywJAIFpR5C8O8cT1FboCGu/GGxpVYMFWrPMyUM=)
                          3: VgCSXxbwzehn2ctSfBXyaKDQ0Qk.roa (hash: 6Cl3czJ3E1ejtDJ1h93PG7gjPFWMjRN0AsAbI/7uYt4=)
                          4: arYUP1gbgyJFh2KnJse2NHTC8nY.roa (hash: gMvEEEnqx+cQ6kaNmIe6f/glsXRGqS/Z0CsHnGPR7YI=)
                          5: eVw30aYw8PRhfFZw4dMd0Whk59A.roa (hash: JkDjfjPCyMxcq4MYYOfAPVOc6bE+PI6e43zkk8H6tQ0=)
                          6: shquK-USeN_EkxoNGdS2ZgkNKE0.roa (hash: BzVyA8GUWdfG25Lls/AIfXgaXvL4LtidvyHSI6ihPwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:b1:c8:52:c0:fc:b3:0e:5d:0a:98:e4:7d:e9:d1:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
        Validity
            Not Before: Jun  7 14:00:54 2025 GMT
            Not After : Jun  8 14:00:54 2025 GMT
        Subject: CN=a3df9692348b8b8c9eec1aff781167158e3b1aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ea:64:41:bc:e6:8d:62:7a:d7:35:b2:63:9f:
                    b2:5a:09:17:3b:53:80:21:25:89:13:e2:32:f7:9b:
                    28:5e:87:5d:58:f4:25:85:4b:49:32:8c:d2:2d:e7:
                    94:77:8b:71:73:f1:7b:35:60:e2:2c:90:85:92:a3:
                    90:89:21:87:41:53:67:77:f7:2c:f2:d2:0f:2d:5a:
                    92:cd:77:b7:61:07:c6:1e:5d:5d:b1:0e:5f:67:ff:
                    0e:1e:6c:0b:f5:68:ca:b9:a1:7b:cd:d5:0a:84:85:
                    db:4d:70:f5:0e:8d:b5:9b:ed:be:83:64:73:1d:40:
                    39:27:55:4a:a5:dd:20:5f:8e:d0:52:45:c1:7c:be:
                    73:36:4e:e3:97:d2:ed:1e:3e:bd:23:67:e9:34:09:
                    96:79:2a:06:04:f5:f9:78:11:42:11:fd:aa:d1:a3:
                    00:db:95:6f:12:9e:fb:2c:7d:af:39:56:41:9e:e7:
                    83:ec:8f:e0:b0:58:b5:35:70:6a:bf:7a:2d:a4:c6:
                    38:ae:9f:59:89:47:52:f5:51:ea:d1:23:b3:71:bb:
                    ec:a1:36:f1:22:40:a5:a5:35:0f:08:c6:bc:68:5a:
                    8d:d3:b2:11:0c:4a:1c:db:f7:f2:fe:b3:be:c7:8c:
                    34:33:c9:30:a1:e3:40:09:06:f6:96:40:d9:85:f3:
                    97:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DF:96:92:34:8B:8B:8C:9E:EC:1A:FF:78:11:67:15:8E:3B:1A:AF
            X509v3 Authority Key Identifier:
                keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:74:bc:04:81:d4:2f:d2:eb:cb:2c:c0:cd:63:04:b2:16:5b:
         fd:de:95:f3:46:4b:a5:d3:ce:ff:83:f3:6f:1d:f7:7a:54:21:
         90:42:50:56:e5:b8:76:6d:9c:2c:51:71:49:0b:45:40:e3:c6:
         f1:86:19:3d:5f:15:79:f6:7f:a5:17:cb:b4:8b:d7:c7:a8:90:
         9d:72:dd:1b:27:2f:09:18:5e:e3:02:e2:47:01:c5:f1:bc:91:
         12:9c:75:15:3f:45:cd:b8:a8:a8:ea:e7:54:d5:73:8e:2a:61:
         15:be:ef:e1:ba:8a:16:cc:9a:61:9d:9e:22:95:cd:72:12:38:
         a9:18:c9:0e:64:cf:31:d3:df:1a:73:9a:50:89:d1:c1:bc:5d:
         7d:ca:c2:fb:50:33:71:01:9f:09:67:78:ff:5c:83:cb:c0:50:
         94:ac:54:d6:a0:56:2b:46:67:63:99:96:6c:0e:eb:61:5d:6c:
         35:d4:07:63:24:82:60:76:8a:76:98:16:f6:c3:a7:50:39:6b:
         cf:39:ec:8e:e9:ef:7f:06:38:56:69:b0:09:a3:7e:dc:5d:c9:
         ef:a4:d6:e0:d5:e4:9d:9d:0b:40:52:78:f4:68:b1:5a:58:12:
         58:20:55:76:c3:b3:55:70:0c:fe:22:33:93:44:93:a8:aa:74:
         e6:00:87:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:49:32 2025 by rpki-client