Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
File:                     cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json)
Hash identifier:          5O9Y3N4QUbP7rMb9X4GFV4aUBuO+C05Uofojt2iY0lE=
Subject key identifier:   AF:98:BB:FD:73:54:28:FC:F3:80:68:88:37:90:B7:7C:45:64:F5:98
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Certificate issuer:       /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial:       01976BF42A24D2206983E9B5F2FFB7DE9834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
Manifest number:          0306
Signing time:             Sat 14 Jun 2025 01:00:53 +0000
Manifest this update:     Sat 14 Jun 2025 01:00:53 +0000
Manifest next update:     Sun 15 Jun 2025 01:00:53 +0000
Files and hashes:         1: KIBPt_IHF6y4uJMTevu1k0aU37E.roa (hash: xnu5MWsk10XHvOorhDM/6K8KY5BqTo0pp6Ckq1C4ML0=)
                          2: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: lE7Jj9qkZ5nzWGY9WdKd+fiBDi2oNkcP+FO0gETgf1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:2a:24:d2:20:69:83:e9:b5:f2:ff:b7:de:98:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
        Validity
            Not Before: Jun 14 01:00:53 2025 GMT
            Not After : Jun 15 01:00:53 2025 GMT
        Subject: CN=af98bbfd735428fcf38068883790b77c4564f598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8f:0d:27:8e:5a:bb:30:e6:e2:44:cf:bc:6f:
                    01:9a:5f:3e:76:78:fd:28:12:46:c8:fb:ac:7c:03:
                    0e:bb:c7:5f:c3:89:e9:c4:7a:13:a4:05:d0:2d:ab:
                    a6:92:18:65:2d:41:68:f7:4d:ea:2f:1a:e1:26:a1:
                    e9:9c:56:d6:ac:da:10:29:c7:be:2a:83:79:c3:8d:
                    10:9c:d0:58:ed:4e:87:28:d2:0c:ba:8f:47:93:b1:
                    f2:91:25:e6:23:e9:38:34:f3:07:bf:82:a8:53:0f:
                    db:ce:23:df:53:c8:0a:0a:7f:8a:c3:5e:83:b8:dd:
                    32:46:0f:5a:e3:6a:85:06:5e:9a:fc:20:ba:29:8a:
                    77:c3:a0:a7:2b:f5:9d:96:fc:36:f5:9a:54:67:02:
                    3d:c7:7e:36:e3:23:8c:17:6d:fc:01:2e:49:33:09:
                    39:01:b0:85:8b:4c:fb:84:9b:0c:de:cd:f2:3c:28:
                    11:4b:cc:b0:ad:ec:58:b4:dc:e8:6c:f2:ee:44:87:
                    9c:99:0c:c1:ab:79:0e:68:fe:c5:52:b8:86:04:39:
                    de:08:7c:a0:66:06:78:95:91:ff:ab:85:3e:ec:0d:
                    fa:04:12:d4:b0:3a:8d:bd:66:df:b9:f1:ac:e8:ce:
                    86:8d:37:4c:1b:6d:6a:a8:fa:99:d9:03:60:1f:74:
                    d7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:98:BB:FD:73:54:28:FC:F3:80:68:88:37:90:B7:7C:45:64:F5:98
            X509v3 Authority Key Identifier:
                keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:bd:25:86:da:7b:47:90:1e:91:2f:a1:b1:52:9f:39:36:91:
         cd:a5:93:ea:e3:de:b7:93:d8:43:91:ce:d0:f3:b0:03:a5:fe:
         59:64:16:50:d7:94:fe:7e:b8:24:2a:49:ab:02:f5:31:08:bf:
         19:60:55:64:e6:6c:22:19:e9:49:4c:47:6f:8d:cd:5f:c7:75:
         8f:53:30:6c:67:98:5c:b7:22:1f:d2:8e:0d:ae:40:e3:2f:1b:
         cb:72:47:aa:09:b8:a1:f2:9e:d6:48:55:81:ad:87:47:04:aa:
         b0:a7:26:de:2b:81:1d:71:e0:aa:b2:40:3d:59:8d:81:28:58:
         9a:2d:2c:a3:3a:00:a8:53:71:17:c2:a5:67:05:7c:cb:b6:77:
         92:ae:f9:6b:de:0f:90:f8:11:8c:03:8a:03:fd:3a:cb:4d:38:
         b3:c0:1a:47:98:3c:58:d0:61:84:a1:9f:da:f5:47:a4:68:9c:
         81:43:62:ba:1f:da:44:21:4f:50:c1:10:86:0d:05:dd:59:29:
         d0:ca:14:3c:85:f8:aa:d5:c2:a9:3f:7e:eb:a7:c6:a8:b6:3a:
         bd:dc:83:67:c2:fa:21:3f:be:f6:1e:53:29:3f:ff:e7:bc:7e:
         e4:6e:9b:ad:fc:93:9f:32:ee:d2:67:a0:cf:8b:33:85:d2:ea:
         32:4f:3e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:54:58 2025 by rpki-client