Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
File:                     gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft (raw, json)
Hash identifier:          WndxQE9/ZBNYmmCPJa5X/5RYm7xZ5tOyVy0SLfvB74U=
Subject key identifier:   09:4B:FC:03:10:C2:9E:27:23:11:00:C9:E3:63:FC:B2:39:AE:81:C9
Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
Certificate issuer:       /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Certificate serial:       01974BFB69CE8C23A2B3332BCAC9AD3C640C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
Manifest number:          0D05
Signing time:             Sat 07 Jun 2025 20:00:57 +0000
Manifest this update:     Sat 07 Jun 2025 20:00:57 +0000
Manifest next update:     Sun 08 Jun 2025 20:00:57 +0000
Files and hashes:         1: 8eWD8Ql-1KtgIOkNC8YKuoueCck.roa (hash: r76wcz0I4RjQIe4PO8q2P9lP7fbFaLdOJ6XIYZNCtEg=)
                          2: ClDShRWVAJsP6NoIbSAj2Ahd24Q.roa (hash: vntq+Z6Tbd8s/QqwS6T999xv/EcabW8VhdgxR1iSPhU=)
                          3: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl (hash: yAM7WVVy+wuz+P9J/RiVlG+avaBlLIrHhiDUYbnEKd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:fb:69:ce:8c:23:a2:b3:33:2b:ca:c9:ad:3c:64:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
        Validity
            Not Before: Jun  7 20:00:57 2025 GMT
            Not After : Jun  8 20:00:57 2025 GMT
        Subject: CN=094bfc0310c29e27231100c9e363fcb239ae81c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f8:98:94:db:20:96:37:86:2b:03:56:a8:e7:
                    fc:f2:f5:d9:26:f0:47:7f:f8:92:26:1f:b2:1e:94:
                    95:73:75:10:c2:79:bd:00:e9:ea:5b:27:e2:44:68:
                    ad:65:60:36:fa:b9:9a:29:bd:89:d8:e1:47:7b:0c:
                    d5:f7:df:ea:d5:9f:7b:fd:2e:8c:b9:fb:c2:4e:e3:
                    4e:8f:f6:e5:f5:08:68:40:8b:1d:4b:b0:d1:98:09:
                    b0:83:d7:8d:93:e5:1a:ee:94:ee:0a:c9:ec:68:42:
                    7c:6b:e1:5c:d6:0f:f3:7c:25:3e:ed:7e:a2:5c:9b:
                    73:23:84:cb:1d:2c:ce:e7:46:2f:ae:d6:1e:9b:28:
                    ae:eb:a8:64:b9:0b:92:67:53:27:91:03:2f:ee:7e:
                    56:a3:cf:34:d4:12:0c:20:b6:86:5f:6f:0f:98:93:
                    9e:2b:12:88:0f:ee:b7:a4:d1:fe:e8:f0:18:5b:ac:
                    b2:98:b2:22:fb:df:be:e6:8c:20:21:9e:74:9d:47:
                    0c:96:56:40:53:5b:8b:8c:22:ce:28:6b:33:53:1d:
                    4c:c9:17:f0:9f:ee:1b:35:02:b2:4d:c2:15:0b:57:
                    bd:71:6f:d6:0b:93:13:ba:a4:f4:f5:08:cb:f4:6f:
                    2a:e6:00:25:c7:cf:a9:7c:6f:c7:e1:9d:9b:50:52:
                    11:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4B:FC:03:10:C2:9E:27:23:11:00:C9:E3:63:FC:B2:39:AE:81:C9
            X509v3 Authority Key Identifier:
                keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:62:b6:d0:5c:22:3a:80:48:95:fd:67:b9:ec:69:53:67:a8:
         81:04:d8:66:eb:60:ed:eb:fc:d7:3e:66:42:2b:77:ca:71:92:
         4b:dd:e7:58:c5:60:4e:83:73:20:2f:fc:f0:2e:3d:d2:2d:8b:
         13:24:67:af:9f:6f:3d:d9:1e:f8:c4:7c:3d:4d:b0:ae:16:0b:
         3d:7c:51:73:42:f3:b8:a8:e7:8f:1f:04:81:97:b2:a2:a1:5f:
         31:8a:1d:86:36:ba:d7:29:21:a2:e5:af:53:3a:3f:c0:21:ff:
         aa:96:e1:33:56:8b:b8:88:65:61:a5:cb:66:20:a0:7b:d8:b7:
         71:3d:d3:b1:7c:e4:c1:f3:75:f7:92:e0:58:1e:57:93:e0:cb:
         92:b5:d9:c7:c8:44:a5:b4:6c:a7:e6:0f:04:95:cc:8b:1f:ee:
         e1:4a:20:20:c3:91:8e:98:c4:f2:3c:fe:ba:c0:e5:bd:72:e4:
         c5:04:99:28:3f:e0:1a:3e:37:08:2f:d1:93:39:e4:50:20:9e:
         8f:3c:b7:69:cf:2c:8a:f0:16:51:50:51:74:20:87:59:b8:39:
         f3:6f:38:5a:bf:4c:51:74:84:77:71:ce:8d:f3:d4:f1:9c:ad:
         00:2b:bb:79:d0:de:cf:92:c9:c5:28:22:fe:76:f6:cc:a7:f9:
         1a:85:02:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:41:04 2025 by rpki-client