Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
File:                     tCV3H5kv1037Bzbmla61nGr2fpM.mft (raw, json)
Hash identifier:          e6qNXGxd1e7DiWAPvG0X8cRlixtoV4Q2u7bG63nKfZk=
Subject key identifier:   B8:82:AF:1B:52:3A:E7:17:E0:37:73:DC:2D:5F:CB:C4:CE:64:20:3A
Authority key identifier: B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
Certificate issuer:       /CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Certificate serial:       0197469DA601639DF76D576A45D886B9B47E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
Manifest number:          064B
Signing time:             Fri 06 Jun 2025 19:00:26 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:26 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:26 +0000
Files and hashes:         1: Vw2yLSQ3LTxqIY-0jpawdHHYRZc.roa (hash: iTSHI+c9vyvdBq9ojdYKL9zsD6xY6XyH0HTCqL60iXA=)
                          2: tCV3H5kv1037Bzbmla61nGr2fpM.crl (hash: cH5qrBYr38hrvsIi5h0NbJPX1BkIUjQxiRpuAE8snDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:a6:01:63:9d:f7:6d:57:6a:45:d8:86:b9:b4:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b425771f992fd74dfb0736e695aeb59c6af67e93
        Validity
            Not Before: Jun  6 19:00:26 2025 GMT
            Not After : Jun  7 19:00:26 2025 GMT
        Subject: CN=b882af1b523ae717e03773dc2d5fcbc4ce64203a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:d1:c8:9c:b0:49:85:b7:ae:ef:dd:af:3b:55:
                    08:39:f8:e0:27:80:eb:0c:2e:44:30:de:18:ac:5a:
                    c4:80:2c:4b:23:a1:91:00:da:51:2c:a6:2b:98:5e:
                    d2:1a:2f:0a:91:85:b0:91:b7:d6:92:a6:e8:42:33:
                    31:82:d1:48:85:cf:6d:09:fd:35:ce:53:f1:2e:41:
                    f0:38:3d:f2:b7:06:7e:d7:74:55:96:6d:74:a4:29:
                    5f:fc:a7:6d:40:e6:32:38:fd:6e:92:59:b3:cb:2e:
                    79:db:b4:36:4b:93:72:04:1a:c3:b7:10:7e:b9:45:
                    d8:18:6d:18:93:d4:ba:7e:f8:13:04:c1:54:d9:07:
                    fa:73:77:9f:e5:05:af:bb:8f:e3:12:57:06:f0:51:
                    9f:db:bd:28:17:6f:25:80:77:45:fa:d3:cb:ed:c8:
                    7c:27:d1:b5:a4:16:ea:60:d3:70:03:39:5b:f1:3e:
                    4d:d3:da:78:56:8a:46:8f:ac:8b:59:83:54:5a:b4:
                    d5:00:ea:a7:23:1b:9a:b8:cb:8c:de:0a:45:e6:94:
                    de:2f:c4:c0:64:59:bb:b9:b1:b3:99:dd:38:60:41:
                    a0:84:a0:4b:cb:34:18:55:67:60:20:da:e1:29:b7:
                    de:27:f1:c3:99:be:04:de:78:a4:ec:c5:66:cc:53:
                    5e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:82:AF:1B:52:3A:E7:17:E0:37:73:DC:2D:5F:CB:C4:CE:64:20:3A
            X509v3 Authority Key Identifier:
                keyid:B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:48:81:67:03:fe:da:6b:47:3e:a9:02:9b:2b:e0:26:ac:8e:
         5d:f0:a0:74:e8:94:0e:6c:ec:28:1b:45:3f:4b:aa:3d:96:1c:
         12:6f:87:0d:eb:28:7a:66:74:ea:46:90:01:ea:3f:8d:6b:56:
         56:e5:1b:77:0a:65:0a:96:0b:04:3c:7b:73:d9:66:75:13:56:
         7c:6f:9a:e8:d1:2a:1a:d5:9a:b5:17:d2:70:09:4f:ca:28:70:
         15:3e:60:e6:74:80:2f:29:23:7f:64:34:df:0f:b7:f0:3e:13:
         ac:5b:d0:81:db:a2:8e:ff:f2:f9:e6:96:21:8c:6c:02:97:98:
         89:48:56:69:e3:ac:a7:83:62:d3:f8:af:7d:10:ea:4a:0c:63:
         b8:93:d0:01:0e:37:06:d7:f6:77:c2:0e:fb:ba:29:39:bd:f2:
         1a:4e:df:41:a4:14:57:5d:1a:5c:d8:68:23:5a:f0:fa:d3:0e:
         cc:e9:dc:77:ef:e7:0d:8d:3f:4d:ea:ca:3b:10:b6:15:04:b9:
         1c:77:fc:03:d2:be:ba:6a:56:95:fa:8b:23:88:92:8f:63:b3:
         df:55:d7:11:1f:a7:1b:46:27:00:0d:58:85:b3:d6:72:64:b0:
         97:01:ee:cb:f9:6f:e7:36:19:15:39:ae:7f:d4:67:cf:0c:8f:
         2e:10:41:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:29 2025 by rpki-client