Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
File:                     xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft (raw, json)
Hash identifier:          rVI1uIR+D5OEHWwY/NQEqO1+l3aaqVnnB5V4xW+ngLY=
Subject key identifier:   81:DE:94:36:9F:53:E2:AA:A9:63:9B:E2:2C:F6:FD:76:E6:BF:76:9E
Authority key identifier: C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14
Certificate issuer:       /CN=c4acc9e2999647d801d4606ec94d6b721f7a6414
Certificate serial:       01974D0E21A170187749868FEDD9CEF662DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
Manifest number:          0139
Signing time:             Sun 08 Jun 2025 01:01:01 +0000
Manifest this update:     Sun 08 Jun 2025 01:01:01 +0000
Manifest next update:     Mon 09 Jun 2025 01:01:01 +0000
Files and hashes:         1: DErHItNq7nABZO58YjUcqRebihE.roa (hash: ubfaZz+JuneQdJw4LkjXBWrUt9hJpsUiv6JFIG/nn8s=)
                          2: xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl (hash: otmGk4h3NQGQXu6RgE4x1RVkJxWTTljIFeIk5OItbtc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 01:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0e:21:a1:70:18:77:49:86:8f:ed:d9:ce:f6:62:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4acc9e2999647d801d4606ec94d6b721f7a6414
        Validity
            Not Before: Jun  8 01:01:01 2025 GMT
            Not After : Jun  9 01:01:01 2025 GMT
        Subject: CN=81de94369f53e2aaa9639be22cf6fd76e6bf769e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:64:57:77:44:44:8c:16:72:8d:6f:d9:8f:c8:
                    57:52:1c:62:c3:87:4d:d5:a8:06:77:05:37:eb:ef:
                    85:9d:62:ef:27:03:5d:a7:b2:02:dc:6d:e8:bf:c4:
                    ca:25:02:d6:1b:32:5f:34:fa:7c:8a:a7:77:b0:ff:
                    ee:9c:e2:97:c7:4a:1c:8d:3d:40:6d:84:97:a0:ce:
                    6b:12:05:b8:a6:53:a3:82:ef:b3:19:cf:99:e7:d4:
                    81:e0:95:07:e4:45:8d:71:9a:db:e0:16:32:9e:ea:
                    86:11:90:ca:f5:83:e2:de:02:63:c6:f9:8c:34:39:
                    13:7f:53:24:15:10:87:49:33:fa:c3:4c:38:86:55:
                    bd:54:65:34:24:ab:20:69:dd:61:0a:94:c8:68:e7:
                    16:8e:7c:37:d4:67:81:02:c1:c7:b7:e7:6d:4d:f9:
                    fd:16:d3:d9:4d:9c:e2:79:ae:9b:5c:2c:0f:d9:7a:
                    3c:49:27:b7:0e:15:3b:69:d1:74:18:5f:5b:5c:a1:
                    f1:a7:1f:d7:23:6d:b6:df:59:1f:4e:ee:df:f2:0b:
                    9b:6c:9a:c2:b6:56:96:fb:56:dd:83:ae:43:0e:49:
                    51:4d:f7:d2:7b:fb:06:bb:1f:65:f3:4a:63:56:bf:
                    72:d9:fe:33:fa:29:ad:5e:b5:6a:64:d5:79:14:21:
                    6a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DE:94:36:9F:53:E2:AA:A9:63:9B:E2:2C:F6:FD:76:E6:BF:76:9E
            X509v3 Authority Key Identifier:
                keyid:C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b9:37:75:16:16:45:96:49:c3:3c:ff:49:81:f6:93:66:51:
         48:3e:18:f2:06:b2:b0:f6:c9:5d:7a:1d:ab:52:f1:2d:3d:b7:
         4b:79:3e:fe:5d:e1:dc:65:0b:57:0a:1f:8b:b2:9f:5e:4a:1e:
         ae:5d:11:2a:c2:cf:c3:c5:08:94:16:e3:67:de:6c:86:14:b3:
         bc:94:89:ac:c1:ca:86:25:91:a7:d1:fb:0b:cc:71:f3:fa:3a:
         dc:5a:db:f6:17:69:41:79:f6:86:4b:5a:bd:e8:39:17:4f:d6:
         76:5a:51:fa:e4:c5:7b:69:08:18:f2:4a:21:04:78:18:ae:00:
         01:92:85:1c:12:55:a7:5a:41:1b:bb:9f:74:b4:c5:4c:c9:a6:
         12:fc:b8:f1:54:36:20:b1:bd:d1:53:6e:e4:0d:73:41:83:76:
         f2:17:99:c6:b7:3a:fb:7d:a0:b8:1b:dd:4c:12:2d:f0:bd:05:
         0a:9a:aa:da:c6:2a:11:7d:92:c4:2b:09:8a:31:f2:22:6f:1e:
         41:7c:22:3f:bf:ee:5b:74:89:02:02:77:96:c3:ee:f6:25:ac:
         14:3b:5b:7e:d9:95:77:66:09:fe:f7:68:88:76:59:4a:38:42:
         99:f2:0e:6a:33:af:a5:6d:b5:cf:5c:3d:47:85:89:49:27:37:
         4e:85:53:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:24:09 2025 by rpki-client