Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
File:                     hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft (raw, json)
Hash identifier:          LmDa6seN05fJADugdlCg/QEIJv8dmVq2BvuR4sg2kF0=
Subject key identifier:   2C:9E:49:43:6C:F6:07:5C:DD:1F:41:17:C7:2B:46:90:63:A5:FB:90
Authority key identifier: 85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB
Certificate issuer:       /CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb
Certificate serial:       01974742A9287B701AD3F11745A8CAF0C1F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
Manifest number:          05E2
Signing time:             Fri 06 Jun 2025 22:00:40 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:40 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:40 +0000
Files and hashes:         1: gBy9cD3j_tP--kqjiHxj-BEz2w8.roa (hash: GWls9v+X93Qb6tijazZ0OBt3/3oq/+caZQ2/zTy7cZA=)
                          2: hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl (hash: w8uwtU/45FPlo6lzvrR5dBcD/Ipo9UsOHqOnl6e+piU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:a9:28:7b:70:1a:d3:f1:17:45:a8:ca:f0:c1:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb
        Validity
            Not Before: Jun  6 22:00:40 2025 GMT
            Not After : Jun  7 22:00:40 2025 GMT
        Subject: CN=2c9e49436cf6075cdd1f4117c72b469063a5fb90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dd:20:07:54:cf:8c:6f:c2:5d:ce:6b:61:a3:
                    24:62:25:77:b6:65:02:c2:62:9a:f3:31:c7:7d:66:
                    e1:d0:4d:56:3a:87:5e:4d:64:49:77:69:51:e2:78:
                    3e:6d:8b:d4:63:c3:9d:72:2b:ce:c9:11:cd:fe:8c:
                    a3:94:65:31:c1:c0:5a:10:af:86:e3:13:94:bb:fd:
                    ef:de:c0:08:a6:82:65:8f:88:55:05:c2:54:34:30:
                    d2:96:d0:c5:cb:50:2e:ac:f5:f8:ee:8a:c4:1a:51:
                    fa:bd:ae:21:c5:9d:ce:ab:b8:9e:bf:a7:9e:cc:4c:
                    ee:8c:22:e3:d7:19:e4:b1:6d:d4:bd:67:9a:91:af:
                    ae:52:72:15:67:31:b9:9a:a2:a8:97:4d:ec:08:e1:
                    cc:4e:ac:f7:14:dc:d9:09:dc:6b:9e:da:96:fb:74:
                    af:23:32:81:0a:c6:56:64:5f:c3:eb:cb:99:15:9e:
                    b0:53:02:45:14:ca:d2:cf:a1:1e:96:e8:03:3f:41:
                    f5:80:08:82:08:ba:b9:3b:23:8b:36:14:46:16:08:
                    4b:f5:89:01:f7:13:b8:46:bb:4c:03:d1:2d:0a:1f:
                    5c:72:86:fa:ff:11:8b:85:f0:99:6e:de:f4:94:df:
                    16:53:68:ea:02:93:9c:14:f3:47:e1:5b:62:1a:82:
                    df:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9E:49:43:6C:F6:07:5C:DD:1F:41:17:C7:2B:46:90:63:A5:FB:90
            X509v3 Authority Key Identifier:
                keyid:85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:62:50:4d:7b:46:87:07:d2:00:4d:10:b5:6b:66:af:c2:01:
         33:f4:ca:ca:ac:e4:73:b1:ab:11:09:71:34:81:96:f5:14:ce:
         24:09:e5:5d:d8:66:b8:5e:c4:2c:89:05:f0:fc:bc:3a:8c:db:
         83:21:3d:89:88:ff:b3:16:eb:a9:a1:fd:dc:4a:a0:4c:26:8d:
         10:e5:1c:f9:e4:72:4a:34:f6:bf:cd:7e:06:62:f7:b1:2c:c2:
         22:5f:25:cd:8c:4e:31:f0:3a:67:38:c7:df:4d:d0:6f:59:3e:
         82:0d:29:49:a6:84:57:c8:19:33:71:f2:4a:2f:b5:da:46:f1:
         7e:e3:9d:e7:b3:b0:45:04:20:74:77:67:ef:33:70:e8:3f:6b:
         fc:99:d9:07:e3:d1:99:3b:02:f1:f6:7e:ff:8a:9d:8f:ff:7f:
         8b:15:14:7e:36:d3:a6:46:a4:d2:d4:c0:62:bc:65:75:c3:92:
         8f:6a:39:14:cd:3a:f5:01:02:53:22:3e:07:87:0c:5b:f3:fc:
         2d:af:8f:c1:9b:53:08:05:fa:eb:fc:88:b7:db:d1:d0:72:74:
         98:b8:49:da:34:f1:6e:b9:bb:05:7b:04:09:55:cc:2d:34:51:
         cd:67:f0:ac:24:89:13:45:5e:15:01:58:f2:3d:5f:f7:6e:b2:
         96:61:3f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:41 2025 by rpki-client