Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
File:                     2e_p029fiP3wR0LEFAx1MgkKt3A.mft (raw, json)
Hash identifier:          qmeZxhrXMIbAzz2HFJBZwQeq1VoUrHaMjpGNHXjsJuQ=
Subject key identifier:   87:FA:C0:6F:6B:C4:57:87:0D:ED:E4:9C:6F:0E:8F:FA:34:14:C5:60
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Certificate issuer:       /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial:       019746D4E8B6D0EC1A8228E7892C8A7DF2C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
Manifest number:          0CCE
Signing time:             Fri 06 Jun 2025 20:00:47 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:47 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:47 +0000
Files and hashes:         1: 2RMmrpcDTc2PvNu5TNTAOyHaouI.roa (hash: XLm+GnfjmWK96gEaM9T+jWpkcJJsItx27t0lDAfnu+M=)
                          2: 2e_p029fiP3wR0LEFAx1MgkKt3A.crl (hash: rMfy+dzExk/R7VGmhVUHY6EbOYE5xPpKM8swqmjWOos=)
                          3: 8P6Z9Cx8SWSZTkyVumdiUHtewDA.roa (hash: TjOKj4a+PWeCDJb76vAZsC0563BFTc5omsFst4XIgOg=)
                          4: E0pkIzW9n-bHG2zbp1MoMQVm048.roa (hash: B3BqiJI6fxLnY50JHLDClRKLpgrtgt/Wjoy5/3OG5qU=)
                          5: Pk3Y8bmZ9v5bN1_6zxU4UYzAM4s.roa (hash: So1EWdtcEMDdLT99zqpyRyyrElAoZiXcpiXiUbqjYGI=)
                          6: T3lOjSmIziIpwPqfAzGQ-tEJwGg.roa (hash: YO3FHvImLTgWUXMun1aA53LmlRiB4Zb65q5ChwHuYqU=)
                          7: TAvnbGlGOHQkn1H4mmfTjMAonig.roa (hash: 5j2f3QIcoZ3w0v7OOhYxuDlG33ihkkRcN0bfLfGC5dU=)
                          8: qXJMsidJ81j9tR3h2UK1FDbmVxg.roa (hash: HLh56C+v712lFsjl7b6ehYsyReTygh+t6WH5+oMMUUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 20:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d4:e8:b6:d0:ec:1a:82:28:e7:89:2c:8a:7d:f2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
        Validity
            Not Before: Jun  6 20:00:47 2025 GMT
            Not After : Jun  7 20:00:47 2025 GMT
        Subject: CN=87fac06f6bc457870dede49c6f0e8ffa3414c560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5c:ba:37:60:13:ee:32:a3:b5:fb:fb:1e:31:
                    eb:8c:a5:30:98:16:26:7b:34:15:8e:c9:ad:60:f1:
                    dd:cc:06:12:bd:fb:80:d1:b8:58:08:54:0b:99:3c:
                    50:cd:84:bf:d3:3f:2e:b8:4d:cd:cc:aa:f1:f5:5e:
                    31:6f:95:bd:7c:41:c0:b5:f0:23:8d:c3:2f:20:56:
                    4e:ff:94:4b:6c:f5:ac:79:68:c1:ef:77:df:84:5a:
                    cc:2a:18:8e:f3:70:36:8d:ce:51:96:af:8d:a8:14:
                    35:3d:f3:27:11:e6:de:a0:bb:f0:93:c7:68:13:72:
                    ed:0b:a2:e7:29:35:f2:71:06:83:c1:e9:3b:f7:84:
                    43:1e:01:70:97:a2:09:da:5f:e7:f8:1c:6d:9f:7d:
                    30:ca:5b:3e:b3:49:61:2b:d6:c6:8d:fc:8a:c3:34:
                    5f:92:59:0c:ca:6b:15:01:9c:30:93:da:36:ee:c4:
                    56:42:84:bf:37:4d:03:7b:a6:1b:2c:8c:b8:ad:f0:
                    20:b3:40:d8:09:5d:c5:94:16:26:c9:7b:fd:bd:96:
                    63:8d:bb:6f:6b:ea:e8:fe:5d:98:6d:68:75:7f:2d:
                    96:03:6b:b0:1d:46:c5:5a:e2:3b:f8:2c:e4:59:ba:
                    77:86:bf:b1:28:ef:8a:57:e8:4c:b4:17:b4:ac:05:
                    fa:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FA:C0:6F:6B:C4:57:87:0D:ED:E4:9C:6F:0E:8F:FA:34:14:C5:60
            X509v3 Authority Key Identifier:
                keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:86:50:3c:31:3d:91:38:70:0d:b8:9e:c5:b2:e8:c8:35:87:
         3f:a1:4c:92:48:f5:cd:97:df:7c:6b:38:88:df:c9:82:96:cd:
         55:37:f3:e9:49:99:15:21:d0:cf:8e:77:72:2d:91:f2:5a:5e:
         f7:71:df:e1:ac:b1:12:04:38:87:97:35:7d:06:30:24:54:ae:
         f8:70:04:bb:0b:a8:36:fa:3a:8b:18:cf:7b:1e:d1:24:91:f9:
         df:12:a0:df:2e:3e:6d:21:ec:a9:58:df:f4:f1:48:ab:52:e3:
         19:eb:19:ec:c6:46:92:36:86:35:30:d8:85:53:ff:e8:10:06:
         66:a8:b6:14:7c:ca:3f:b5:e4:dd:72:42:0c:9e:59:16:84:98:
         b7:6c:5e:73:8c:89:21:60:c9:3a:c6:e0:31:53:9b:9b:26:0a:
         ed:3b:86:9a:59:7f:0e:05:ef:56:b3:a4:d5:57:48:06:09:fd:
         e8:27:9a:23:62:97:08:74:e4:8e:d9:25:76:ea:c6:1a:49:df:
         80:13:4b:b5:bb:ef:a3:84:9e:99:7f:9d:ed:71:21:23:04:83:
         c5:1d:0c:81:d0:c2:9c:7c:4c:c1:a5:7f:1f:bb:17:fa:9f:76:
         58:bf:dd:a2:8e:c8:0c:59:19:cd:bc:1a:6a:95:aa:2b:a2:20:
         87:6a:85:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:06:04 2025 by rpki-client