Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
File:                     j6zLrHFHe5QOXNQQPj7uYdthWRU.mft (raw, json)
Hash identifier:          bce3mH7EUNobuq6jRNYWQ9sELQAtnyWy9KScLixaq9Q=
Subject key identifier:   42:E1:50:92:7B:2D:2F:D1:38:39:CE:64:AC:5F:90:DC:FB:8B:43:CA
Authority key identifier: 8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15
Certificate issuer:       /CN=8faccbac71477b940e5cd4103e3eee61db615915
Certificate serial:       019739BDC9E6A778E629D79D3EF5AFFA6C7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
Manifest number:          0396
Signing time:             Wed 04 Jun 2025 07:00:28 +0000
Manifest this update:     Wed 04 Jun 2025 07:00:28 +0000
Manifest next update:     Thu 05 Jun 2025 07:00:28 +0000
Files and hashes:         1: EKSKrQ1FbAZmq1KtPIW7Uy3IctY.roa (hash: QeMTexv2bHp61zdnXh2g6I+MqFr8HxGSohB7DT8On60=)
                          2: a44sy3HYySYYWzX1Xc0gD8ljcUU.roa (hash: mG+H6uo6FVVDTMv9HhWuPrvRA4BkbeYs8ovYondFREA=)
                          3: j6zLrHFHe5QOXNQQPj7uYdthWRU.crl (hash: cBKBX/YnsBcPIDDY5pZzF5Ybx6HXGr4yQeN7hLSgEBs=)
                          4: t_igGhLq7IzbkQZnR3SxFZTI3tA.roa (hash: 6dLogSW/OhD3Yu1E3Y4ZKNcTx1tRF0Y/a9V0hhFyQW0=)
                          5: wFmITchCOTh-4_pkSKxt-DBDXmI.roa (hash: 0czxK7spC8QNTMDj8fqbhsYijXl48ZLs3CZRQQWgFNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:39:bd:c9:e6:a7:78:e6:29:d7:9d:3e:f5:af:fa:6c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8faccbac71477b940e5cd4103e3eee61db615915
        Validity
            Not Before: Jun  4 07:00:28 2025 GMT
            Not After : Jun  5 07:00:28 2025 GMT
        Subject: CN=42e150927b2d2fd13839ce64ac5f90dcfb8b43ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a0:ee:6e:52:2d:90:e1:96:6b:85:54:95:e5:
                    d4:64:33:a3:5d:d0:2a:9d:d0:2a:e7:32:19:fa:21:
                    fa:ec:79:a6:50:13:78:82:7f:26:81:36:84:57:17:
                    73:e1:24:47:fd:eb:5b:e2:a3:53:ba:32:2e:db:c5:
                    8e:d5:73:8c:15:54:a1:20:12:fe:f9:23:28:48:03:
                    01:73:55:6d:a4:27:b7:e8:fd:1a:d8:03:b5:a0:8f:
                    6e:36:d7:00:22:e6:62:1d:fa:c3:d1:16:73:35:33:
                    c4:d2:3b:bb:3f:3f:be:06:6b:8b:71:c4:ea:73:ab:
                    aa:ed:16:2c:14:be:a8:42:49:59:6f:cf:24:83:2f:
                    f5:1b:0d:33:46:d8:0e:05:d8:3f:df:e6:35:db:f1:
                    bc:d8:0d:3b:b2:d3:7c:8a:27:9a:88:b1:d2:a5:d3:
                    ed:81:2d:6a:29:59:51:d9:f5:75:99:ce:80:a4:48:
                    38:33:e0:64:93:c0:58:95:22:61:ce:e1:02:96:55:
                    dd:c1:2f:0a:d6:fa:63:c6:07:64:00:a5:2f:45:f8:
                    aa:6f:b3:ba:28:9f:0c:22:fe:ba:d8:5b:bc:1b:11:
                    47:9b:96:fb:c5:36:8c:09:d8:96:5f:48:ea:d8:c7:
                    16:60:39:30:1b:6b:ba:e4:78:a1:4e:9d:9a:45:fe:
                    03:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E1:50:92:7B:2D:2F:D1:38:39:CE:64:AC:5F:90:DC:FB:8B:43:CA
            X509v3 Authority Key Identifier:
                keyid:8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:7f:ad:9c:e7:3b:24:d5:9f:fa:08:09:08:50:3d:91:97:c5:
         5e:a3:21:c1:72:15:46:fb:23:00:2a:8c:81:db:40:76:ad:67:
         a5:8d:4a:d4:ae:be:fe:ff:30:17:a0:fb:26:1d:9d:be:3c:04:
         00:3f:9b:b2:9f:4e:8c:ed:91:27:1d:b9:bd:d3:fa:51:98:48:
         04:e7:e8:bd:dd:de:80:ca:69:aa:6d:02:df:21:4c:07:d1:21:
         2a:ba:ba:54:d8:7a:d5:aa:74:20:e6:ed:01:1c:93:e7:39:2c:
         6a:92:25:ce:f1:d0:fa:2b:93:84:6c:70:ee:34:d6:00:05:87:
         2f:c6:7c:d8:c7:44:3b:61:c5:58:e5:26:44:03:e9:56:ba:f3:
         6b:e6:03:c3:e6:02:b6:76:8f:d4:45:d0:e0:50:5d:f3:32:10:
         16:e5:0d:18:3c:43:6b:76:40:b7:a5:41:78:aa:53:d9:bb:7a:
         b2:98:a6:2e:0f:f6:91:c1:bd:d2:d8:0d:e9:40:1c:fd:2f:ff:
         75:81:72:ce:63:00:5c:4e:dd:75:f1:c3:1f:69:08:e6:19:44:
         9d:b5:ef:61:55:aa:dc:1e:1e:e4:9a:51:14:24:eb:54:13:d2:
         a7:5a:b1:78:59:04:af:66:1d:03:72:cc:84:71:bc:14:ec:0a:
         90:c8:23:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:15:51 2025 by rpki-client