Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
File:                     eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft (raw, json)
Hash identifier:          7B9XFF8/zp7Xbte/6Qj636CHFQjEgzCbyajVI+23UY8=
Subject key identifier:   35:F2:AD:BE:C5:DA:C8:DC:F8:87:38:1B:AF:6A:DE:9A:B2:21:D5:08
Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
Certificate issuer:       /CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Certificate serial:       019750B41599720580CF724223232B7E426C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
Manifest number:          0A2A
Signing time:             Sun 08 Jun 2025 18:01:08 +0000
Manifest this update:     Sun 08 Jun 2025 18:01:08 +0000
Manifest next update:     Mon 09 Jun 2025 18:01:08 +0000
Files and hashes:         1: 5ie8JF4KKXSrM93JlPn2dV4V6Yw.roa (hash: voEtz6mEruRpxmdJ50z2YHPNPHZIPj+18ktBBGi8uuc=)
                          2: eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl (hash: q4jjuzXF0QNR9u09cruPsLfhFVoJMwRue/SZEAD3JCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 18:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:b4:15:99:72:05:80:cf:72:42:23:23:2b:7e:42:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2
        Validity
            Not Before: Jun  8 18:01:08 2025 GMT
            Not After : Jun  9 18:01:08 2025 GMT
        Subject: CN=35f2adbec5dac8dcf887381baf6ade9ab221d508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e0:f1:a5:e2:4c:01:e2:2b:01:69:8f:1d:be:
                    ac:31:08:66:02:29:aa:15:85:ab:6f:03:35:3a:d7:
                    19:98:97:9d:c9:71:33:c0:9f:4e:21:65:b0:b0:cf:
                    8d:3f:01:23:bd:71:e0:0e:46:6d:fc:d8:3b:4f:8d:
                    76:2f:cc:5c:3c:1f:49:1a:56:ef:30:30:15:11:bc:
                    54:d4:b2:5b:15:b2:be:e9:90:b5:fc:a3:88:61:83:
                    3b:5b:0b:23:41:e1:44:bf:9b:d2:79:fb:7b:14:03:
                    b9:d7:64:ab:65:70:ca:d9:03:b7:d6:d7:f5:84:95:
                    19:f1:1e:f3:04:d5:81:6b:d3:40:39:97:39:bd:e3:
                    3a:bf:bc:8a:37:0b:9d:ab:31:5d:38:d6:aa:34:73:
                    2e:00:67:5f:49:5c:be:02:ee:a9:1f:a3:bd:7e:59:
                    67:82:7f:c4:85:be:6a:c8:c0:38:2e:13:ee:c7:8d:
                    d0:82:83:6d:ad:01:c2:e3:47:d0:d6:bb:e7:3f:83:
                    16:5f:e9:05:14:02:e6:65:53:34:7b:e9:7c:5c:34:
                    90:93:1e:e7:5c:32:82:cf:30:16:8b:02:cf:3c:26:
                    c0:01:14:4a:f8:b3:fb:a4:ab:c6:bc:30:8d:dc:56:
                    4d:9f:c1:93:82:c6:aa:b4:1f:4e:f9:da:00:40:63:
                    56:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F2:AD:BE:C5:DA:C8:DC:F8:87:38:1B:AF:6A:DE:9A:B2:21:D5:08
            X509v3 Authority Key Identifier:
                keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:30:3e:57:46:78:87:11:8e:7c:93:71:19:16:2d:96:4e:85:
         de:69:05:17:34:94:72:8a:52:16:25:16:6e:9d:e5:77:c0:13:
         4c:a5:9f:5f:6c:a1:01:49:13:c8:27:06:94:21:01:16:20:e8:
         23:b7:2d:d8:4b:1d:3b:e3:1c:d1:75:d0:87:04:0e:76:db:68:
         58:35:bd:bc:5d:36:d1:63:c2:2f:fa:ac:3f:e4:3e:72:30:77:
         4a:a6:e4:b1:7d:2e:7a:5e:30:a3:b7:61:5f:ac:57:fb:b3:f5:
         53:e5:20:17:e9:d3:79:4c:a0:35:97:70:80:e6:01:6a:ac:48:
         f2:51:d1:42:08:f1:da:69:ee:fc:59:b4:88:4b:70:b5:2c:e0:
         1d:6a:27:42:c6:d3:dd:bd:95:01:85:57:84:ea:bf:e1:e5:02:
         b4:74:97:84:ca:81:e5:aa:6f:ac:f5:f2:fc:6b:65:51:d6:9b:
         95:f4:67:3f:f3:3f:4d:cb:a3:99:be:8d:7d:47:65:31:7d:71:
         f1:20:6c:97:4c:9e:d0:4a:c9:ca:1b:24:48:f2:c6:e0:2d:32:
         ba:56:66:5f:42:92:e2:0b:05:d7:8a:d5:a7:69:ec:eb:18:03:
         c9:c1:86:3e:95:e0:2d:a3:af:2f:94:5b:95:c8:d7:df:c5:c6:
         77:fa:ee:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:21:21 2025 by rpki-client