Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
File:                     haz7mtOlDOFTMc_066iLzAe3ooI.mft (raw, json)
Hash identifier:          R6GKzH6xAay+rup9bnpgmQ0O7qw9oYEBaGG3JQfkCFs=
Subject key identifier:   25:04:06:0A:B0:61:DC:D1:90:4F:8B:4B:41:5F:C0:15:55:AE:F9:F7
Authority key identifier: 85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
Certificate issuer:       /CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Certificate serial:       01974B1F243C44792DD902778E42B7E57117
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
Manifest number:          0500
Signing time:             Sat 07 Jun 2025 16:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:21 +0000
Files and hashes:         1: GNR7fo6zYUZ0aZ61h9x_BF8llVA.roa (hash: CFopZ6dmtVSvrmIdzz/ovM49rlPrGJS+jY6gLGQSqVo=)
                          2: haz7mtOlDOFTMc_066iLzAe3ooI.crl (hash: q1apb36Se5Et03zStYPUkd86GgFFt/cxyX4+qkUMHnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:24:3c:44:79:2d:d9:02:77:8e:42:b7:e5:71:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
        Validity
            Not Before: Jun  7 16:00:21 2025 GMT
            Not After : Jun  8 16:00:21 2025 GMT
        Subject: CN=2504060ab061dcd1904f8b4b415fc01555aef9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7b:38:d4:94:d2:96:6a:ae:8f:66:49:1e:82:
                    27:4d:bb:17:ae:07:44:d0:07:5d:a7:71:21:7e:52:
                    aa:57:3b:bc:eb:75:5a:ed:2c:64:45:53:ab:8b:e1:
                    d9:68:dc:2d:94:87:1d:86:c7:ec:a8:48:93:a7:14:
                    c3:1d:a4:af:21:3f:9b:a4:24:76:e7:40:5d:bc:8e:
                    82:31:71:f3:82:43:ff:7c:fe:0c:89:10:27:64:67:
                    cb:32:d5:e7:d8:4e:2d:87:ee:fb:b0:78:d9:e0:28:
                    b3:dd:74:b6:be:72:d6:a5:f0:77:e3:d1:b6:b2:a6:
                    e8:2b:61:da:f9:15:b7:cc:a9:19:4d:f4:2e:85:a0:
                    ca:19:7e:1d:7a:8a:5d:9f:9d:16:7a:c3:3d:3a:d9:
                    67:b8:39:c6:80:a7:d5:99:71:1b:1a:3e:c6:a2:db:
                    88:c1:80:90:da:c7:58:39:bb:53:71:07:e2:8d:63:
                    43:22:f5:6c:c7:0d:e1:67:b7:58:72:ce:b8:7d:99:
                    6b:ca:c4:a8:9d:53:32:ab:b1:22:33:1f:9f:7c:80:
                    39:1f:47:54:c1:62:8e:e0:6d:16:ba:60:ca:ab:93:
                    cc:ff:d8:88:ce:7d:b8:ea:54:e0:5d:ca:10:82:00:
                    0c:0c:51:3a:d7:6d:18:f4:cf:23:1c:ec:17:89:8e:
                    38:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:04:06:0A:B0:61:DC:D1:90:4F:8B:4B:41:5F:C0:15:55:AE:F9:F7
            X509v3 Authority Key Identifier:
                keyid:85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:b5:00:e2:d9:86:6d:0b:49:5c:75:7a:ff:d1:fc:17:53:0e:
         8e:76:cc:3d:74:22:9b:59:83:d9:d9:e5:9f:fc:1c:2e:e6:07:
         d7:fa:4a:21:b1:20:c7:21:c2:d8:a6:e8:32:35:08:77:96:5f:
         8c:4d:c1:63:e8:31:98:e0:33:e2:40:00:48:7a:35:9f:a3:94:
         f4:76:73:95:4e:80:af:82:45:f5:89:00:fe:00:0c:4e:2c:d2:
         c6:3d:35:b8:8d:ef:d2:6e:20:1b:cd:df:f2:ce:2f:2f:59:19:
         50:25:9d:ce:c5:10:e3:96:3b:95:2d:df:6e:1b:fa:e1:b5:c4:
         5b:89:cb:b9:f1:1f:04:07:a9:1f:d9:4c:53:a2:8c:a0:07:46:
         0f:4f:ca:a4:3f:75:25:b7:a5:ae:5c:00:b1:45:7d:c4:88:c0:
         b0:b1:ab:2e:7b:33:5a:4f:3c:0f:ec:d1:5a:41:32:cd:34:7a:
         31:41:8d:c9:98:e9:3e:59:b8:46:c1:02:62:45:56:3c:12:59:
         80:c6:11:75:af:68:40:aa:25:1a:09:36:ca:67:3a:ea:e6:78:
         ea:5b:ad:81:14:49:73:de:02:88:b5:97:ca:60:d3:16:52:59:
         f1:d9:56:57:9f:ca:8d:f6:2f:a0:5c:31:34:30:9c:ff:99:05:
         01:91:cb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:56:59 2025 by rpki-client