Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
File:                     KYOEG8CfH9T-PemRAWwLcSb7pS4.mft (raw, json)
Hash identifier:          7c8v4NgcpHar/pY8Rbd6IQ8fkYvjfd7vq8gtCUO6Y2w=
Subject key identifier:   C1:58:F0:D7:BD:8D:5F:8D:00:33:2F:A5:4B:34:85:F9:9D:54:E8:29
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Certificate issuer:       /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial:       01974D447B596692F82E7530320436A075AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
Manifest number:          0DA7
Signing time:             Sun 08 Jun 2025 02:00:22 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:22 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:22 +0000
Files and hashes:         1: 8L44IrkkvnWwO7YzdGP90TGDjSg.roa (hash: CEFaAsOLSJVrCdoCjPllcGxEqTE9RA4Tw9wSIQ0mmME=)
                          2: KYOEG8CfH9T-PemRAWwLcSb7pS4.crl (hash: oVvb6quQ4noCZj4yHZVN+A8UB+38JuHhMtqo+VJEHjc=)
                          3: pLFppFwWIfA_W9uCMBC8y8BR8ts.roa (hash: dbla97+OI8Jm8+2WXqrvaQmGEN37T1/jOIGIxTsBgg0=)
                          4: tG9g7Co1XH6U8tZyoXMC-RjzpsI.roa (hash: f5hLHvCO22cXuPn8MfVWI6zy/RfS3YcwLYdVmDvuy/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:7b:59:66:92:f8:2e:75:30:32:04:36:a0:75:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
        Validity
            Not Before: Jun  8 02:00:22 2025 GMT
            Not After : Jun  9 02:00:22 2025 GMT
        Subject: CN=c158f0d7bd8d5f8d00332fa54b3485f99d54e829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:88:ef:7e:57:94:ce:45:ae:ca:61:18:a1:
                    51:95:f1:8f:15:35:f1:78:9d:31:cf:7c:d7:f8:6a:
                    55:9d:f6:16:5b:3c:95:87:6a:f8:ef:82:9f:db:38:
                    56:3c:2c:ec:a9:ae:68:71:16:8c:cf:3d:01:eb:fd:
                    78:8c:c4:30:d9:bd:24:96:bb:96:24:39:f7:9b:32:
                    23:17:82:38:ad:60:5d:f5:ac:32:59:e0:b3:48:2f:
                    25:c4:fa:dd:11:fc:00:12:4e:7d:bc:1b:79:40:6b:
                    1b:d1:f1:8d:e8:59:95:13:66:6b:62:17:97:80:b8:
                    de:5c:46:14:28:1e:18:0f:92:61:ef:e0:ce:4e:9a:
                    4d:fa:ce:8d:62:94:99:2a:80:94:69:60:0a:99:51:
                    a8:6e:f8:2e:4f:14:4b:e5:e0:21:0d:d2:f1:96:11:
                    35:7e:33:f9:9c:a8:86:0b:1b:3f:00:2d:a3:fe:88:
                    69:cf:9e:06:b3:41:77:a4:50:fa:aa:b3:27:29:2c:
                    a2:62:bb:f9:7f:e6:bc:f8:ea:85:05:ad:cb:bf:7b:
                    30:25:05:6a:55:b1:6a:87:45:bb:f9:39:e4:49:de:
                    fc:24:6e:52:55:01:e1:59:c2:6d:ce:f0:4c:e0:0b:
                    73:99:7a:14:b7:34:39:8c:f9:74:0d:3d:06:e1:88:
                    f5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:58:F0:D7:BD:8D:5F:8D:00:33:2F:A5:4B:34:85:F9:9D:54:E8:29
            X509v3 Authority Key Identifier:
                keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ca:36:a2:7c:7f:a6:de:8f:5b:fd:4c:9d:c3:1b:e5:48:05:
         5a:59:a3:2f:2b:32:a9:65:91:c9:18:9d:ed:3c:8c:33:d6:d0:
         49:20:b2:82:05:c5:97:1b:89:5a:0b:18:ec:b7:07:e7:e1:91:
         ae:e3:e8:ef:46:4c:ec:27:11:a6:2c:54:e3:07:28:df:ce:c4:
         c2:c7:07:4f:8b:83:e9:b3:98:f0:11:61:2d:03:6a:22:43:26:
         64:c9:07:0c:de:c3:d1:9f:59:93:14:e5:c9:cb:1f:e1:de:6f:
         0f:29:a0:7c:31:fd:4a:38:49:2f:fb:5c:2a:b2:35:17:f4:71:
         b2:1b:cf:a4:b3:75:51:c2:67:ef:06:4b:b3:05:e1:3d:73:ae:
         92:a4:8f:5b:4f:2f:bd:3e:2c:fb:8b:bc:50:3c:74:a2:71:7c:
         6d:26:e9:6b:2b:b5:0e:90:b7:4e:5e:c3:ea:e7:54:cf:b5:85:
         d0:4d:72:95:4d:96:30:37:d8:4c:cf:d8:5f:5a:3e:26:69:37:
         08:31:a2:a2:c1:e4:35:c2:62:50:07:e3:50:8d:56:51:2c:ba:
         ff:f1:33:be:0e:5c:24:69:e5:7d:d2:1e:1f:59:99:e5:87:58:
         87:10:3a:db:bd:6f:86:fc:c5:60:f4:34:2d:45:5f:88:d1:28:
         53:2b:26:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:22:22 2025 by rpki-client