Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
File:                     _JEop2LO62tZ9UMVaLwT_OQauhI.mft (raw, json)
Hash identifier:          LH+LODJa05XHWx75u3sktdZAYb0FLMkI9wc3kBCMRLw=
Subject key identifier:   1E:D6:61:89:17:56:F8:CE:CD:BC:53:31:68:21:FD:10:93:5C:2D:52
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Certificate issuer:       /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial:       01974A43E8A81BCDF49F72ED34129F0B7503
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
Manifest number:          03E1
Signing time:             Sat 07 Jun 2025 12:00:53 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:53 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:53 +0000
Files and hashes:         1: _JEop2LO62tZ9UMVaLwT_OQauhI.crl (hash: lcK+8w5tiPv5u1lxS9R0NorH+hWpj6X+ipdkqVRn5Hg=)
                          2: vrcnG3rPeIv-84eM3hfeiXZcqyA.roa (hash: JWLSZU8dWBcg2FNxy+Ts9gij4yT1i3JNXoLy/WJRhwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:e8:a8:1b:cd:f4:9f:72:ed:34:12:9f:0b:75:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
        Validity
            Not Before: Jun  7 12:00:53 2025 GMT
            Not After : Jun  8 12:00:53 2025 GMT
        Subject: CN=1ed661891756f8cecdbc53316821fd10935c2d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f4:c2:a6:11:29:43:7b:84:f5:ef:97:d6:4d:
                    26:63:9c:98:2e:d1:4f:c7:0a:2b:a8:d2:fb:d6:2d:
                    d9:9b:e4:05:b9:1e:61:14:c4:79:40:2a:34:73:08:
                    d1:85:f0:4f:70:46:e9:a6:6f:d5:d9:2f:f3:af:08:
                    10:4b:10:2e:06:d6:9c:6b:37:16:a5:d8:35:35:2d:
                    32:aa:42:b6:c3:be:ad:26:e8:e5:fc:33:20:73:3d:
                    12:7e:c0:a9:c9:c3:88:29:3f:98:c7:bf:19:e2:4b:
                    69:0f:5c:95:f2:36:f5:3f:ce:43:7c:85:46:ca:e4:
                    d2:1a:64:5d:2e:8e:93:82:02:48:16:09:3e:02:1e:
                    11:dd:25:2e:1f:45:5e:58:50:29:e0:8e:6a:11:50:
                    ef:64:a1:64:f9:be:de:db:13:98:e7:d1:e8:5a:90:
                    09:50:85:55:67:81:48:7f:81:a2:81:18:4f:d1:6b:
                    1b:87:0a:f7:b9:30:2a:e3:1a:cf:69:ae:9b:c0:b5:
                    20:c4:15:ca:69:ce:b8:dc:bd:82:6a:14:d9:84:18:
                    81:0b:6e:ff:97:32:89:f0:1b:b8:d6:a1:6d:a0:2d:
                    b0:0d:05:3f:0f:e0:15:62:fe:47:ef:6e:62:fb:9b:
                    40:09:38:de:7a:4d:0f:44:b4:75:6a:f2:a8:0b:ee:
                    1f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D6:61:89:17:56:F8:CE:CD:BC:53:31:68:21:FD:10:93:5C:2D:52
            X509v3 Authority Key Identifier:
                keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:24:95:4a:16:2d:1b:3b:c9:57:0f:37:51:5c:89:53:a0:5f:
         60:bc:e1:4e:93:57:1e:13:f1:ae:3a:c7:7f:b6:31:fc:23:42:
         dd:5b:a9:49:d9:ab:91:d8:20:11:bd:eb:d4:29:db:62:de:45:
         e0:64:4d:77:fe:ed:93:fd:0b:f7:49:b0:df:af:28:77:38:a1:
         b0:ff:56:a7:62:03:12:7a:2f:e5:ce:11:7a:73:51:c3:0a:f5:
         8f:06:28:8b:e2:73:15:c0:68:c6:e1:ea:0b:a6:79:11:7c:bf:
         47:ef:05:d9:1e:71:c1:20:d2:17:52:a4:8c:06:5a:a2:89:96:
         9e:48:a0:6b:27:73:b7:b0:c1:96:ad:95:33:98:7a:65:cc:69:
         bf:6c:cb:55:4b:77:d7:1c:27:7a:4c:ec:cd:46:0b:5c:6a:4e:
         66:2e:d3:87:39:db:29:b5:57:f1:8f:41:7f:43:81:5d:ef:da:
         8d:46:1e:93:78:da:a9:62:4e:e9:1d:ac:07:60:7c:e3:2f:2f:
         42:e2:2a:bd:6e:4f:6b:94:1a:b4:96:a0:30:05:a6:d7:81:de:
         bf:e6:3e:16:22:24:1e:f2:31:9a:b6:69:94:6a:f6:8c:2e:f8:
         db:36:81:20:4f:97:ea:65:64:90:bd:6a:3c:b7:a7:04:91:cf:
         0b:7f:28:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:08:33 2025 by rpki-client