Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
File:                     rcpuVKzQJs76NitCJ7iQgcClAEk.mft (raw, json)
Hash identifier:          oARpSxWyqRCdSTJzUvexMzSDj22dBqFAiga3ddtfKYQ=
Subject key identifier:   40:E4:90:A0:3F:09:57:4B:5E:6B:45:59:40:E0:6F:6A:E1:EA:E2:DA
Authority key identifier: AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49
Certificate issuer:       /CN=adca6e54acd026cefa362b4227b89081c0a50049
Certificate serial:       0197481E4B41EFEAF03B50F2B62D79148887
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
Manifest number:          02DA
Signing time:             Sat 07 Jun 2025 02:00:34 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:34 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:34 +0000
Files and hashes:         1: nH-mLa1nqtF7NuWi_AxaaJ7rrpE.roa (hash: k+SK+iFUjD8k3G8uFqdLPMVQgq2VY/v5iPwBM07SwqU=)
                          2: rcpuVKzQJs76NitCJ7iQgcClAEk.crl (hash: 5qicb61Tdf4AfSJJQrGMrg7yn+5BR0C6BtXMN6sOfDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:4b:41:ef:ea:f0:3b:50:f2:b6:2d:79:14:88:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adca6e54acd026cefa362b4227b89081c0a50049
        Validity
            Not Before: Jun  7 02:00:34 2025 GMT
            Not After : Jun  8 02:00:34 2025 GMT
        Subject: CN=40e490a03f09574b5e6b455940e06f6ae1eae2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:15:03:cd:24:03:c7:8c:12:12:c4:8f:f0:97:
                    9c:76:13:28:48:9b:9b:12:a9:20:31:91:7a:2e:f3:
                    d3:00:07:8b:97:dd:a4:c3:09:38:48:3c:12:2c:bf:
                    93:f6:b2:2a:5c:01:c8:42:6a:ec:dd:bc:21:56:fc:
                    b7:bb:8f:dc:19:fb:cb:4a:a7:8b:f9:95:97:cb:27:
                    46:a5:7d:b9:ff:4d:64:c7:78:63:82:34:9d:d4:1d:
                    bf:2a:ef:6b:eb:9c:bf:e8:bc:df:57:9a:f0:b0:5a:
                    72:c4:4a:de:39:32:2b:97:80:1c:c0:79:59:37:0d:
                    fe:88:00:02:fb:0b:b6:cf:be:f2:74:62:52:f6:3f:
                    41:94:a9:05:dc:d1:f2:95:1c:28:b4:1e:fc:cb:6f:
                    02:91:cd:bf:f6:d7:5d:ab:b0:18:7a:86:a9:44:23:
                    49:9e:87:fa:15:2a:14:c3:10:ca:57:42:d3:7d:f1:
                    92:32:f3:59:07:9f:a7:b4:84:60:fa:48:10:e5:4f:
                    03:b6:fb:4c:1b:c7:a3:15:30:c6:dd:33:88:34:97:
                    7e:c7:16:91:1a:10:ba:d4:71:97:0b:cf:bf:a1:d6:
                    a4:bf:05:06:c4:28:a5:de:36:35:46:a9:f7:7a:dc:
                    2f:3e:27:7e:b3:37:a4:1a:ec:eb:f0:0a:a8:68:4b:
                    ed:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E4:90:A0:3F:09:57:4B:5E:6B:45:59:40:E0:6F:6A:E1:EA:E2:DA
            X509v3 Authority Key Identifier:
                keyid:AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:44:41:7c:f6:31:f2:89:1f:54:90:31:51:34:3d:cd:2f:60:
         a3:fb:ae:00:00:32:e8:f7:33:c5:17:b9:a7:4c:c0:96:5e:4e:
         a7:80:ff:46:c1:56:70:16:72:5f:68:2a:bd:ba:d1:0e:af:23:
         a6:a5:09:b0:fc:5c:1e:b0:b0:9f:9f:3a:15:45:43:e3:09:17:
         fa:f9:61:fd:26:f4:9f:ef:33:73:35:85:24:4e:2e:34:48:5a:
         67:e7:20:4e:2d:e5:ee:8c:3c:dc:23:fb:56:c3:62:6f:89:fe:
         61:a4:19:28:41:77:fe:25:ab:22:3f:b8:39:62:41:b8:48:bc:
         55:fc:29:df:64:93:ca:49:5e:75:b9:5a:d7:26:e8:61:31:bb:
         f3:25:e2:5e:5e:49:ca:03:d3:ae:b5:50:41:67:f8:e0:d8:ab:
         9c:c4:d0:2f:50:c5:d4:5a:6e:16:ef:35:3f:46:0b:a0:c3:a6:
         58:f4:6c:03:0f:46:ca:59:7e:75:4a:2a:b6:5e:17:aa:e2:72:
         06:7e:b5:74:f2:3f:23:84:68:15:bd:12:09:5f:73:c2:50:ec:
         e3:1d:c3:c5:1b:77:02:de:1d:cb:c9:98:25:68:06:97:ce:dd:
         ac:29:7c:fe:bb:a5:f8:91:18:40:98:b2:e5:c2:c0:6b:f5:e8:
         93:d9:40:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:42:40 2025 by rpki-client