Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
File:                     ctjb6kAj1p9H-JvSCC__skZt0qU.mft (raw, json)
Hash identifier:          S8rBoa7b1qBN437k5U2u+z7DxUIrvGugJpvJpPLXjZo=
Subject key identifier:   69:B8:F7:1B:BB:B4:4E:6F:10:B1:68:7E:86:1A:D5:E7:C1:26:AE:3C
Authority key identifier: 72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5
Certificate issuer:       /CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5
Certificate serial:       01974D44DD61734F12375F84553699FCE0DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
Manifest number:          073D
Signing time:             Sun 08 Jun 2025 02:00:48 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:48 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:48 +0000
Files and hashes:         1: Egv_COpkQ4qE0m0lj_BQmNwIMRA.roa (hash: 7o6c3PTeF8AIq/25Q6USnosQEeLS7MscdEHZbwRxm6I=)
                          2: ctjb6kAj1p9H-JvSCC__skZt0qU.crl (hash: IPePEuXXSVfgk8n/6WQHikkTPZu1vku8tjKJ3OH0DJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:dd:61:73:4f:12:37:5f:84:55:36:99:fc:e0:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5
        Validity
            Not Before: Jun  8 02:00:48 2025 GMT
            Not After : Jun  9 02:00:48 2025 GMT
        Subject: CN=69b8f71bbbb44e6f10b1687e861ad5e7c126ae3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ec:ad:3d:ae:42:52:94:ea:15:31:e2:08:bd:
                    a5:70:2b:8f:66:6e:54:10:38:70:9b:88:f4:f0:a8:
                    9c:cc:0c:55:6d:c4:25:35:c0:4f:55:86:ec:61:26:
                    61:ed:3e:c3:e2:63:45:ca:a6:02:62:a6:89:54:64:
                    a2:d9:aa:d1:a9:2c:81:8e:99:9c:bb:80:67:16:cc:
                    ca:35:b8:a6:98:8b:84:74:ee:12:25:5b:93:99:41:
                    4b:9f:d7:0c:0f:96:4b:91:35:36:6b:ca:2b:3c:a0:
                    56:c6:02:e4:98:32:fd:5f:c1:97:23:ea:4b:b0:74:
                    5e:4c:6e:96:4a:ba:ee:87:e5:21:22:3d:c6:26:82:
                    f0:d2:8f:07:d1:ba:98:30:c1:35:0d:39:bd:80:13:
                    f8:c4:36:55:49:8e:5f:8d:b5:5b:55:e4:75:46:ef:
                    42:82:fe:98:b6:0e:82:58:f7:02:98:03:ae:1b:ed:
                    f3:93:5d:0c:f9:fd:c4:5e:92:69:bc:c1:7d:5f:3f:
                    b6:02:4c:7b:22:34:47:7a:0a:4d:f5:5f:6a:da:49:
                    f0:30:c8:d1:fc:78:49:07:fe:46:44:cf:e7:7c:69:
                    ad:fb:38:51:00:8a:0e:db:08:7a:13:0e:91:10:7d:
                    cd:e9:14:d1:96:10:84:f0:0f:0f:63:cb:7d:ac:9e:
                    0e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B8:F7:1B:BB:B4:4E:6F:10:B1:68:7E:86:1A:D5:E7:C1:26:AE:3C
            X509v3 Authority Key Identifier:
                keyid:72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f9:08:59:d4:d7:48:0a:7d:6d:b1:76:21:69:11:ce:04:ca:
         1a:11:7a:48:49:68:2e:71:77:d5:4c:3d:ee:ed:b7:dd:ce:f7:
         84:f5:57:03:62:94:84:d3:45:4e:d8:40:23:19:ee:c8:19:d3:
         54:05:3a:82:1c:a0:59:b1:fe:08:6d:07:4d:9d:00:39:ba:a4:
         a5:f4:35:a0:6f:b5:0c:50:14:0b:e2:19:7f:9a:8c:e9:1a:7f:
         f0:90:c7:73:6a:4b:2f:4c:92:c2:16:8e:5f:0e:69:a8:ae:ce:
         43:b7:97:da:81:ce:a5:95:af:68:b8:e6:52:cb:f7:dc:ef:e4:
         1a:2c:6b:12:f9:8d:c5:67:35:c8:d9:d1:47:e7:00:6d:52:35:
         94:60:d0:2c:db:55:85:8d:d7:59:64:05:22:2c:4e:55:7d:b2:
         2e:7a:f4:34:ba:42:5a:bd:fe:1f:6b:11:3d:78:e2:e5:7a:7e:
         7d:06:98:66:56:8e:2f:33:6a:fa:07:35:4b:48:57:03:e7:8a:
         71:a6:e7:02:b8:24:e5:97:fc:73:20:52:69:f7:66:0c:63:d3:
         96:84:ea:90:3c:92:7c:f2:ea:5e:1c:7a:33:bd:19:de:9c:d1:
         07:b4:cd:cc:90:d1:73:29:68:c3:00:9f:87:02:f7:7a:62:99:
         8e:18:51:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:44:56 2025 by rpki-client