Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.mft
File:                     bXoBv9NLsT37elNXId7EAc2TEtk.mft (raw, json)
Hash identifier:          ZITNK4qPrUNgpo32BMbRUdpDfhuChdNWrqzZqboOgDM=
Subject key identifier:   33:94:29:88:08:31:2F:84:D2:C9:2E:D3:01:E5:3D:F9:BC:CA:A8:FE
Authority key identifier: 6D:7A:01:BF:D3:4B:B1:3D:FB:7A:53:57:21:DE:C4:01:CD:93:12:D9
Certificate issuer:       /CN=6d7a01bfd34bb13dfb7a535721dec401cd9312d9
Certificate serial:       01974AE84ABFF1E0CED5819C4B5FBFFC4F45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bXoBv9NLsT37elNXId7EAc2TEtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.mft
Manifest number:          0E7E
Signing time:             Sat 07 Jun 2025 15:00:26 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:26 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:26 +0000
Files and hashes:         1: J1daZ0b9QqDyeaqVSA6rdJN33m0.roa (hash: m2mGCz+ed0huZCoFC3yQqfv0T01L6xVokVoZSaSYXMo=)
                          2: bXoBv9NLsT37elNXId7EAc2TEtk.crl (hash: VzUzf3JqSfgkaAUp5pdobqVwgA4LGA+05seykwaVJ4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bXoBv9NLsT37elNXId7EAc2TEtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:4a:bf:f1:e0:ce:d5:81:9c:4b:5f:bf:fc:4f:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d7a01bfd34bb13dfb7a535721dec401cd9312d9
        Validity
            Not Before: Jun  7 15:00:26 2025 GMT
            Not After : Jun  8 15:00:26 2025 GMT
        Subject: CN=3394298808312f84d2c92ed301e53df9bccaa8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:95:f9:84:d1:9a:ed:c6:20:c1:f1:b0:46:04:
                    19:af:eb:dd:5d:fa:d3:fa:72:76:9d:93:4c:54:48:
                    50:f9:1e:14:73:b1:11:99:78:fb:d1:8d:5e:bc:e0:
                    6b:01:48:3a:45:de:5f:e3:0d:17:ea:44:95:cc:dd:
                    46:03:68:14:aa:a2:e1:b8:6b:69:14:a7:6a:34:b9:
                    17:14:cb:00:0c:03:19:b6:4f:75:10:ca:48:36:85:
                    ff:89:fe:cb:f9:86:2e:9e:8a:09:1f:eb:ec:80:4f:
                    6c:0a:b5:2e:49:c7:cc:db:48:42:11:d9:ab:4e:27:
                    9a:1f:65:ad:02:0b:3c:00:50:8f:0c:26:3c:a8:96:
                    28:37:1b:0c:9e:07:54:5c:1f:c7:2a:eb:5e:df:c3:
                    f3:b4:5f:11:70:5f:ff:5a:14:30:ab:61:6e:59:8f:
                    b0:14:6e:dd:1b:24:88:d6:f8:58:46:51:29:38:a9:
                    02:6f:47:81:ad:9d:b7:38:d7:5d:b3:15:91:5e:e5:
                    b3:eb:55:63:62:da:a8:e0:ec:80:d5:b0:89:cd:7f:
                    33:44:1c:2f:a1:d3:b8:1b:36:49:f4:89:f7:2b:00:
                    4c:f2:b6:a0:56:c9:32:b4:27:ff:f8:ea:45:d6:52:
                    1b:a4:9a:14:f4:dc:74:d5:43:4f:bc:09:ce:a4:71:
                    d2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:94:29:88:08:31:2F:84:D2:C9:2E:D3:01:E5:3D:F9:BC:CA:A8:FE
            X509v3 Authority Key Identifier:
                keyid:6D:7A:01:BF:D3:4B:B1:3D:FB:7A:53:57:21:DE:C4:01:CD:93:12:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXoBv9NLsT37elNXId7EAc2TEtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b9:2f:cc:b8:92:ba:2b:65:98:c8:64:c6:88:26:c8:3d:00:
         0e:10:4b:20:ec:80:75:e2:cd:19:4c:13:3e:4b:bc:f2:df:0e:
         42:b6:89:dc:65:cc:c7:0a:a9:ff:47:66:c1:84:ca:e4:04:9b:
         a0:cc:31:63:c1:ed:9f:86:8c:fe:ab:b6:32:75:95:3e:9f:d2:
         62:75:a1:74:fd:ec:43:ca:11:c7:44:4e:e9:9a:e1:2a:e7:d2:
         c8:09:35:c4:fb:dc:f3:71:b6:80:37:9a:88:10:49:22:b3:c6:
         d6:97:d5:10:a1:a8:93:54:34:4d:cd:67:30:e8:29:9c:a5:94:
         4f:21:77:d1:04:e0:c9:d9:31:83:76:09:7f:83:00:0b:58:72:
         b5:19:c8:17:4a:53:a9:b9:9c:67:6d:bb:a4:40:81:c9:e4:b9:
         7a:c2:71:12:ff:95:01:54:99:2c:18:f4:04:ce:c6:13:83:32:
         8b:6c:dc:44:d6:4b:85:13:9d:f5:29:33:5a:82:15:ee:16:8d:
         1e:73:99:5f:fd:ef:7c:ef:63:ee:cb:14:54:b3:a2:0d:2b:a8:
         16:fc:bd:bc:4a:31:23:df:c3:8c:23:3d:8b:17:2d:11:30:fb:
         b4:7d:e6:a6:9a:3f:5f:76:e6:9f:02:35:c2:b6:5c:ec:f5:86:
         2a:c8:23:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:57 2025 by rpki-client