Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
File:                     E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft (raw, json)
Hash identifier:          6p5kvNM6DK5DDtK5oxOkldJH0WwZEv+TqqHCQZd5OWE=
Subject key identifier:   9E:85:77:EB:CC:56:B9:FF:6F:A0:AE:04:1C:1C:D1:73:9A:29:CF:C4
Authority key identifier: 13:40:10:E4:39:8D:FD:6E:19:F4:5B:51:3C:22:C1:EC:A3:33:11:F8
Certificate issuer:       /CN=134010e4398dfd6e19f45b513c22c1eca33311f8
Certificate serial:       01974C3210404888A068C7DFC57380FFAB80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
Manifest number:          09CE
Signing time:             Sat 07 Jun 2025 21:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:38 +0000
Files and hashes:         1: AkOZiNxVhUaQoLKipRlB_hZtuhU.roa (hash: OT/u98f/Om9ZIYFZJdTTw+++YqbpQpzo4KPrsjLuAbM=)
                          2: E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl (hash: v4AObGoYoU1qCMlj2EmESTzyDCN8IGbKv1EJWuG6QCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:32:10:40:48:88:a0:68:c7:df:c5:73:80:ff:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134010e4398dfd6e19f45b513c22c1eca33311f8
        Validity
            Not Before: Jun  7 21:00:38 2025 GMT
            Not After : Jun  8 21:00:38 2025 GMT
        Subject: CN=9e8577ebcc56b9ff6fa0ae041c1cd1739a29cfc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a5:12:0e:3e:af:09:7c:e4:90:b3:fa:6f:f9:
                    5c:e7:13:ea:db:1e:4d:ec:43:46:89:0b:91:7b:ef:
                    94:b5:b9:31:ce:82:a3:71:09:fc:c5:dd:49:13:df:
                    73:c7:d2:70:56:51:92:07:5d:c2:2c:26:b4:9d:9d:
                    45:33:2b:cb:bc:98:68:13:65:01:68:6d:f7:77:00:
                    8d:af:84:be:75:e4:1d:c3:87:28:d4:4a:68:0e:4a:
                    5a:fa:1e:27:98:c6:c1:20:78:f6:d1:c7:b0:84:d1:
                    08:20:a0:4f:1e:81:75:75:fa:ee:18:0f:29:2a:58:
                    9c:b5:63:0c:ff:a3:a4:87:f9:0d:d7:6c:b2:26:ee:
                    6f:68:a3:d9:fd:d1:06:26:0a:f1:eb:2a:90:e4:40:
                    b1:0c:b0:20:9a:41:c8:51:fc:6c:e4:ed:62:bd:da:
                    81:15:1d:9e:b3:36:e0:2e:6d:dd:ba:84:49:7a:f6:
                    24:22:19:4a:cb:57:2f:b5:ff:a9:ad:15:e1:73:3b:
                    8f:9f:ad:e2:95:0a:72:f3:46:9b:8d:99:56:d0:8e:
                    74:3c:41:07:76:21:61:79:74:d0:b2:aa:30:0a:13:
                    dc:5c:9e:1c:ad:ae:d7:52:9e:8d:45:3c:0c:c5:15:
                    ee:24:25:82:46:17:b7:e8:a6:38:35:49:a2:d8:ce:
                    49:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:85:77:EB:CC:56:B9:FF:6F:A0:AE:04:1C:1C:D1:73:9A:29:CF:C4
            X509v3 Authority Key Identifier:
                keyid:13:40:10:E4:39:8D:FD:6E:19:F4:5B:51:3C:22:C1:EC:A3:33:11:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:bc:72:88:ad:af:84:32:b6:51:19:98:94:1b:79:c3:4a:15:
         3d:a8:3c:2b:50:7d:48:9c:34:a7:2c:c5:19:da:dd:bc:bb:7e:
         c2:9f:61:96:44:1f:8a:10:a2:5d:7b:98:79:df:a6:cf:05:21:
         a0:0d:ee:3c:bc:62:a6:f6:ee:94:34:f0:43:47:66:51:92:73:
         1e:c6:17:f4:b8:3a:7c:fa:fc:16:16:eb:9c:2d:ff:14:8f:6e:
         fd:38:57:9e:f0:03:5b:a0:eb:64:d6:50:81:92:bb:0e:24:ae:
         16:96:5d:0c:2b:96:45:b2:3a:a9:dc:96:d7:00:6c:5a:ec:a6:
         70:d8:ab:85:9d:a1:70:17:7b:94:fe:2f:8f:e3:23:e0:20:81:
         76:01:63:dd:70:da:3d:d2:9a:e2:ec:e8:e1:4a:f4:7c:3c:96:
         9d:38:0c:8b:79:76:c4:5e:27:5d:cd:cc:38:2c:69:36:b9:19:
         ef:02:c5:76:2b:f3:e4:fe:2e:76:f1:0e:c8:2d:84:9e:4f:2f:
         e2:b4:1b:07:f9:ee:2a:2c:bd:a8:f0:b3:f8:d3:3a:6d:ed:50:
         d3:ee:26:f0:21:18:43:b3:d3:e8:0d:73:b0:a3:40:1c:cb:31:
         6c:33:1b:b0:16:c8:48:b4:c2:9f:2d:3c:24:a5:4e:02:c1:72:
         47:d4:69:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:42:40 2025 by rpki-client