Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
File:                     aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft (raw, json)
Hash identifier:          AMROJvSp/QyLh3Tc9nlXVBE3osuTCmLSfenw/IcnvOA=
Subject key identifier:   7E:3F:DB:45:4E:F9:4C:80:3C:C9:CD:5F:3E:25:F9:EF:AD:42:B5:E2
Authority key identifier: 69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7
Certificate issuer:       /CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
Certificate serial:       0197488C9158B85BEEF41F48CB58CEEDBDD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
Manifest number:          147A
Signing time:             Sat 07 Jun 2025 04:01:01 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:01 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:01 +0000
Files and hashes:         1: ARb5ZPDad5FfTT7dZ8xHZ7gMy6A.roa (hash: 8snm/YmhdjNlAruJqhnmmmr90GFSb4amikZSdNm3KvA=)
                          2: aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl (hash: jZcklMoV9Jfp3cGjHfgbZGiG3PlzNnt2U/bMhlhvGVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:91:58:b8:5b:ee:f4:1f:48:cb:58:ce:ed:bd:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
        Validity
            Not Before: Jun  7 04:01:01 2025 GMT
            Not After : Jun  8 04:01:01 2025 GMT
        Subject: CN=7e3fdb454ef94c803cc9cd5f3e25f9efad42b5e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:38:46:32:51:e8:f6:f9:db:a7:72:aa:87:c7:
                    c9:27:09:5d:5a:31:38:02:ff:74:30:d8:cf:93:09:
                    60:75:0f:60:0e:84:79:00:14:8f:ed:9e:e2:f8:59:
                    85:1c:ac:85:4d:1c:d0:49:65:6d:fa:01:e3:51:fa:
                    a1:de:12:63:d8:52:67:36:2d:3c:1c:46:e4:09:42:
                    e3:bb:51:4e:90:fa:c4:84:da:fe:4d:a9:a8:46:b1:
                    a0:07:80:2c:b8:ae:a2:64:b2:da:c5:21:72:53:52:
                    29:51:67:ea:a5:3b:ad:cf:20:05:bf:53:3f:89:fc:
                    da:6e:81:6b:c5:82:93:28:37:91:61:ee:b9:91:ac:
                    cf:00:98:94:6d:29:de:20:cc:83:45:0a:c0:94:fd:
                    75:d8:3f:9a:f3:11:6e:b8:3c:8b:cf:4d:b1:a9:59:
                    10:2d:ad:84:3d:5c:8c:cf:61:03:99:8a:ec:ce:fd:
                    31:b3:43:c4:36:c7:4e:94:82:3d:04:8b:1b:09:43:
                    19:7c:1f:a3:c8:4a:9e:78:c1:5e:c2:fb:3c:51:1c:
                    50:f8:00:9e:72:a6:54:85:9d:b4:7e:13:e9:f9:11:
                    a2:60:72:b5:c1:f8:26:e2:11:5d:ad:6f:53:bb:f7:
                    39:43:69:d0:5d:b5:fb:83:67:49:46:57:22:18:61:
                    06:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3F:DB:45:4E:F9:4C:80:3C:C9:CD:5F:3E:25:F9:EF:AD:42:B5:E2
            X509v3 Authority Key Identifier:
                keyid:69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:51:8d:ba:bc:b8:d9:84:09:68:5a:49:e2:b4:35:d3:ca:19:
         e3:ed:d8:bf:20:c5:f3:c8:42:29:cf:62:75:a8:c1:ea:d9:e2:
         81:8f:01:40:91:76:cb:b7:f3:30:ef:ee:05:d2:8b:38:79:61:
         04:e1:da:89:81:45:bd:83:e0:87:4e:5d:6c:72:12:6b:e0:da:
         e3:a2:73:b5:8c:ae:26:98:1c:61:eb:11:ee:e2:4c:d8:68:73:
         61:da:01:60:13:39:9e:3c:05:e4:3d:47:ff:10:97:77:1e:35:
         f5:c2:f7:a9:66:a9:8c:7e:eb:a6:c5:92:9f:e9:c3:dd:26:d4:
         15:6e:05:78:66:74:21:d8:c8:ba:41:c3:90:8d:f8:79:3a:ea:
         2f:bf:57:22:54:4c:5e:8d:d1:35:1d:a0:ff:fb:a2:06:d6:12:
         5f:03:e7:0b:1d:b7:31:35:8f:71:0b:b4:c9:e9:b1:e7:d3:a6:
         d7:76:0e:0a:08:47:ea:9c:99:26:19:af:5e:6a:d0:28:3a:53:
         9a:84:37:8e:55:2c:30:89:be:ef:62:19:04:f8:4f:de:e5:a9:
         75:ea:8d:30:e2:f4:63:02:30:fa:51:33:ea:b1:75:13:97:05:
         4d:24:76:4a:81:5a:49:43:54:6f:de:0c:0c:2f:7e:cf:93:0a:
         66:3c:63:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:07:11 2025 by rpki-client