Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
File:                     RFc3PhpobWtZ7oXcN4mdBlMThuU.mft (raw, json)
Hash identifier:          eSULtuRbId0hgPQjPNgtFA62REJbaCZ0Z2nJ1sBaBoc=
Subject key identifier:   62:A2:90:CC:DD:AD:01:51:E0:4F:6A:CE:A8:16:FA:8C:0A:C9:9A:FD
Authority key identifier: 44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
Certificate issuer:       /CN=4457373e1a686d6b59ee85dc37899d06531386e5
Certificate serial:       01975724117609882FF4792C091EBE39EEF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
Manifest number:          0303
Signing time:             Tue 10 Jun 2025 00:01:10 +0000
Manifest this update:     Tue 10 Jun 2025 00:01:10 +0000
Manifest next update:     Wed 11 Jun 2025 00:01:10 +0000
Files and hashes:         1: RFc3PhpobWtZ7oXcN4mdBlMThuU.crl (hash: 19EXEDmHVgHU+ZVMfjYIrc784xV/SnAeDJrCr6YhfxA=)
                          2: XMirD3qG50TrikmGR0PujWf3jjs.roa (hash: iR/AZzWdddK7a5E0N2BfP3yz4LyY5Uji67zQAihWnBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:24:11:76:09:88:2f:f4:79:2c:09:1e:be:39:ee:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4457373e1a686d6b59ee85dc37899d06531386e5
        Validity
            Not Before: Jun 10 00:01:10 2025 GMT
            Not After : Jun 11 00:01:10 2025 GMT
        Subject: CN=62a290ccddad0151e04f6acea816fa8c0ac99afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:00:af:3e:43:7e:9b:84:58:8d:cd:60:7f:1c:
                    56:d3:b4:b3:46:30:f3:1e:04:b0:0f:42:79:a0:d3:
                    a9:d6:e4:10:4c:a5:4b:4b:e8:05:4f:a6:0e:d2:d3:
                    a6:65:a6:0e:75:5d:52:e7:6e:3f:31:c1:77:c8:84:
                    30:1a:31:af:80:10:97:5d:5a:b1:a7:57:3b:cf:d1:
                    46:28:f7:db:19:50:72:a7:ef:c5:63:2d:1f:b5:ba:
                    14:b5:69:a4:32:e0:33:09:3b:d0:35:28:aa:c6:a0:
                    f4:56:e7:4d:40:a9:fa:ef:a9:bb:3b:42:13:a0:1f:
                    03:34:80:71:83:6a:f6:5b:1d:2a:f7:6f:7e:13:bc:
                    66:5c:17:0c:0f:a0:bd:59:2f:9a:ef:b0:06:6d:ff:
                    0b:59:1e:9e:9b:a6:36:4e:cc:0e:a9:ec:a1:20:13:
                    50:3e:43:ed:51:c1:4b:53:ca:5a:07:33:09:5a:66:
                    36:bc:b7:36:3b:f8:65:4b:ca:87:d1:11:1b:c6:9a:
                    17:08:c5:8d:fe:ac:21:18:90:58:6d:b7:72:59:a3:
                    1e:fa:f9:6d:f4:29:34:80:0d:92:89:b6:7a:36:9f:
                    6a:89:2d:73:a0:4f:8c:6b:ee:fa:f3:ee:53:97:8a:
                    67:3f:a0:81:a0:d3:47:ca:46:3c:bc:db:78:03:9f:
                    14:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A2:90:CC:DD:AD:01:51:E0:4F:6A:CE:A8:16:FA:8C:0A:C9:9A:FD
            X509v3 Authority Key Identifier:
                keyid:44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b0:15:6f:8f:0b:93:dd:d3:c0:4a:9f:40:69:4a:1f:d2:69:
         a1:81:07:6f:8c:8d:a1:a8:23:dd:63:a4:46:7c:4d:37:da:ff:
         ef:a7:04:0a:4b:e6:2d:2d:bf:34:ae:7c:54:8b:03:63:52:02:
         0b:0f:34:41:38:78:ee:06:26:30:40:1c:aa:9c:ab:83:f3:c8:
         13:49:4a:b6:53:fb:d4:11:b7:49:15:9b:fa:d2:31:f2:7a:0d:
         7c:38:6d:5b:e7:24:e6:71:7c:98:c0:0e:90:a8:fd:6b:bf:6b:
         ba:8a:9a:e2:da:28:94:f2:72:17:59:15:2f:f7:6a:15:56:d2:
         56:61:e3:25:e9:ba:b0:ba:26:99:8f:24:2b:9b:ff:e4:a9:40:
         ee:c4:36:11:d6:b1:7d:b3:ac:17:1c:64:9a:ab:3a:d4:66:f9:
         c3:fe:67:51:43:53:46:9f:83:e5:c5:3b:c4:a8:e6:bd:ee:25:
         be:b4:22:97:b9:07:56:8f:8d:0f:9f:6b:bb:0a:cd:f6:a4:55:
         c7:0f:1e:5c:e0:49:af:da:e1:7a:ff:43:ac:91:9c:f0:c5:aa:
         37:35:b2:09:7d:53:ff:76:89:57:6a:8e:26:d4:65:cd:29:76:
         45:05:2a:37:8e:05:a6:39:ff:67:5a:76:94:9e:ba:0d:1f:9b:
         12:97:70:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:39:46 2025 by rpki-client