Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
File:                     zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft (raw, json)
Hash identifier:          tR1g7375i3cAsSUVzl0jtT0PJQjzhxlbXZaLZSbpwoQ=
Subject key identifier:   36:E7:0E:F4:B4:1E:53:EF:20:5D:65:F0:8C:4D:78:D4:D5:6D:EC:D4
Authority key identifier: CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
Certificate issuer:       /CN=ccd7947ec83136ef9446316235686a9102562c44
Certificate serial:       019758A4722BEFC93174102CEB9BE9A5A802
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
Manifest number:          1586
Signing time:             Tue 10 Jun 2025 07:01:01 +0000
Manifest this update:     Tue 10 Jun 2025 07:01:01 +0000
Manifest next update:     Wed 11 Jun 2025 07:01:01 +0000
Files and hashes:         1: bAP-TBQ5pEJ6ltrNXIaTzwmPogo.roa (hash: nUUK6FuI8w+YNPfI7VAOpoMsSE7nA2QmJZlOaRIBwQw=)
                          2: zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl (hash: TY/+2s44lsIBTZXiug6SIYKJiLDmNFDTfJ+nBUR0o/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:a4:72:2b:ef:c9:31:74:10:2c:eb:9b:e9:a5:a8:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd7947ec83136ef9446316235686a9102562c44
        Validity
            Not Before: Jun 10 07:01:01 2025 GMT
            Not After : Jun 11 07:01:01 2025 GMT
        Subject: CN=36e70ef4b41e53ef205d65f08c4d78d4d56decd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b1:65:a3:b2:e1:f1:28:1d:97:7b:9a:87:97:
                    e1:01:43:77:b7:59:33:30:75:bd:2d:52:77:f6:b9:
                    c0:e2:41:35:80:15:0c:da:5b:8e:2c:3d:0c:44:e7:
                    3b:21:de:da:13:4d:ab:d0:7f:08:ad:55:26:a1:85:
                    5e:25:48:60:83:9f:6f:84:d4:2e:62:3d:8b:77:fa:
                    bf:19:f4:aa:27:d7:4a:1b:02:17:18:36:05:a1:a9:
                    5a:e8:d6:e0:b0:bf:10:10:f8:74:1c:45:5a:f0:13:
                    cc:7d:96:be:1e:d9:3a:0c:d0:c4:7a:92:ad:c3:de:
                    c4:50:e8:e4:b5:25:46:97:7e:b0:28:4e:f6:2b:c7:
                    78:54:37:97:ef:f3:25:59:1c:a1:37:60:4c:c9:71:
                    72:97:ba:68:3c:bc:9b:ea:1f:c7:7a:4f:52:13:a8:
                    a7:dc:49:bd:b0:11:e8:95:a6:b1:fb:62:1b:fb:5a:
                    f5:31:b9:77:2f:64:c3:32:9a:f1:e5:80:4d:be:b7:
                    de:65:84:35:3a:ce:51:46:79:f3:f1:7e:95:35:0f:
                    b9:2a:f7:e4:92:df:c4:2a:79:7a:19:78:dc:b1:ad:
                    bd:b0:a6:69:00:5a:c4:9f:ac:80:4b:60:eb:21:f8:
                    7c:3c:01:4b:0e:90:8f:23:fb:50:52:09:93:86:be:
                    91:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E7:0E:F4:B4:1E:53:EF:20:5D:65:F0:8C:4D:78:D4:D5:6D:EC:D4
            X509v3 Authority Key Identifier:
                keyid:CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d3:b7:63:07:75:27:67:0a:c9:45:8a:3e:18:f9:8a:3c:e9:
         c9:71:3c:bf:0c:fa:78:a2:49:11:f0:5b:e8:6d:3b:5f:f1:f4:
         7b:b3:19:db:a8:16:c5:4d:65:48:e5:0e:ac:a9:9c:dd:86:b6:
         52:67:1e:72:3b:5e:5b:7c:28:bc:c8:7f:68:20:5d:45:9b:1e:
         d7:8c:2b:f6:52:18:a0:01:6a:95:16:59:2f:1f:36:b7:b8:82:
         76:c9:78:36:52:fd:ab:3f:cb:54:ef:8e:89:27:f6:31:84:bc:
         40:10:c1:c3:2a:7b:1b:c8:24:87:ca:63:b1:f2:30:46:0b:07:
         b1:89:9f:40:17:31:c6:49:1b:63:de:65:9b:14:e5:3c:bc:91:
         f8:38:8e:11:b2:bb:93:46:8a:1e:ba:25:fd:15:6a:bd:18:a0:
         0d:ee:0f:76:e6:f7:8b:6d:1f:52:cf:07:93:fe:cb:68:b8:07:
         e4:41:73:ff:52:92:8a:ca:4d:74:7b:63:4b:fd:de:f2:4c:f0:
         0e:b4:8f:ee:d4:ed:cd:cd:a7:52:77:f8:7b:69:01:63:91:d8:
         aa:12:99:64:0f:a1:10:9c:e0:23:cf:5f:93:2a:29:bf:ee:db:
         80:34:47:ba:69:1f:0f:15:50:e6:95:a5:4a:50:45:7b:25:ea:
         63:ba:07:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 09:27:51 2025 by rpki-client