Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
File:                     e00xqxjkH42VmgnVVmDdMqqcRfc.mft (raw, json)
Hash identifier:          oFCmw71W8ZUAJZpCbV1ofvgffTC9qvaL2NIO+Sq9Qck=
Subject key identifier:   5C:21:A4:DD:79:05:9A:5C:40:47:D2:8E:A9:A5:46:44:8A:7A:AA:06
Authority key identifier: 7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
Certificate issuer:       /CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Certificate serial:       01976C61D4A39859C93E2026C145417196E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
Manifest number:          02E8
Signing time:             Sat 14 Jun 2025 03:00:40 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:40 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:40 +0000
Files and hashes:         1: 5Ks6R6ANPOuqDi6voNhJGuCZMW8.roa (hash: rJBWopYkkYdyW3mSVPW+i2geLeI7RuDFMOG3B57hJQA=)
                          2: DkUOS-7Geo49d0Nh-2-IQuK04LY.roa (hash: U+IaFC9jrzPW5vZBo+Ho3GIYBe2Y+qIpZI+pYfAAT+8=)
                          3: ZrxnG1C1FryXGDgGVHP4j_G9QZs.roa (hash: xouRXEuk6K8cHqqLO1rnwMj9V1h5gZu/jzWeOqab6Tc=)
                          4: e00xqxjkH42VmgnVVmDdMqqcRfc.crl (hash: Ten+5Fc91Zm1WjWau/5gesylIhDG8h1NJaIi655Uxw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:61:d4:a3:98:59:c9:3e:20:26:c1:45:41:71:96:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
        Validity
            Not Before: Jun 14 03:00:40 2025 GMT
            Not After : Jun 15 03:00:40 2025 GMT
        Subject: CN=5c21a4dd79059a5c4047d28ea9a546448a7aaa06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4a:f4:ad:f4:11:3a:0e:65:be:cc:73:77:e0:
                    63:29:e0:40:71:91:09:97:6d:a8:55:ff:c0:a9:75:
                    25:c6:b5:88:f5:ab:d5:ed:ec:28:c5:f1:0b:a5:3b:
                    fa:e6:2a:d4:b3:b4:44:c4:5f:e4:76:26:72:79:ef:
                    fd:20:c0:f3:ce:83:f1:47:ad:42:f3:cb:ac:a2:e4:
                    5f:c4:13:a5:36:32:2f:15:84:43:44:23:63:c3:fc:
                    c3:ae:4f:0f:b2:0c:36:38:96:2f:84:9e:b9:97:0b:
                    6e:13:24:08:34:af:f4:1f:36:88:fc:a3:f0:33:ad:
                    a0:04:c1:9d:70:78:70:cd:7c:de:46:10:16:4d:f8:
                    af:10:f3:6a:2a:3c:27:71:75:73:08:23:ff:7c:d9:
                    e4:a4:98:74:74:3d:83:5a:d4:0f:7b:34:22:1b:d0:
                    a2:da:09:00:dd:2c:ce:b3:9a:cc:42:a4:04:36:86:
                    94:4f:d2:26:27:9a:ff:82:84:c9:bb:fa:3a:bd:a7:
                    86:ea:1e:ca:e8:84:28:c8:58:2f:22:75:52:ca:41:
                    02:49:a5:06:6a:57:ff:8a:6e:6b:57:c8:77:37:2e:
                    2a:59:56:78:3f:93:ba:2a:5d:b6:00:be:5d:07:57:
                    70:92:48:47:37:74:c4:e7:54:e0:4c:4a:37:f9:ac:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:21:A4:DD:79:05:9A:5C:40:47:D2:8E:A9:A5:46:44:8A:7A:AA:06
            X509v3 Authority Key Identifier:
                keyid:7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:3a:12:a2:e1:a7:73:52:47:ea:a3:81:34:7b:90:9c:09:c8:
         21:b2:c3:6e:36:dc:b5:c9:1e:fc:6a:5b:78:50:e7:27:3a:60:
         a2:7d:31:5c:1f:52:8a:a7:a0:dc:19:80:1d:87:92:7a:c1:4b:
         73:ce:30:2e:85:8e:3b:8a:03:3b:1b:4f:e7:29:cb:40:62:3d:
         a1:59:80:e9:1b:f5:16:ec:9d:c5:28:86:ed:ad:ce:f8:ba:b9:
         21:6a:87:44:96:a3:63:69:f7:fd:2b:9f:dc:a1:2d:e8:e2:2e:
         f3:06:da:82:8b:8f:5b:64:fd:a2:9a:31:a0:fc:26:33:fb:c3:
         23:ce:b6:91:0d:a1:a5:30:ac:88:a0:9c:6d:ed:d5:cc:ab:e7:
         07:eb:97:59:51:f4:c5:3d:20:7e:d9:41:5f:0f:2d:ab:60:b7:
         d0:c0:a6:33:c4:cb:99:28:f6:de:fb:e6:63:43:f8:4c:20:f1:
         fd:c7:68:00:ff:f7:03:02:f1:68:b7:41:4c:8b:eb:49:97:d2:
         79:c9:e7:b8:28:b2:79:3c:01:9d:c2:50:16:68:71:f0:fa:d2:
         c0:78:34:6f:25:4c:61:e8:83:29:b3:ca:0b:7f:6b:49:77:c1:
         a1:14:cf:f4:43:f1:3c:87:4c:df:ed:85:1c:6d:53:d4:b5:63:
         9a:22:7c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:48:13 2025 by rpki-client