Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft
File:                     E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft (raw, json)
Hash identifier:          sOBlrn8sqoOTB3v+2UVO4GzpyGnKXUw1KUfz148EBLQ=
Subject key identifier:   F4:48:D1:38:C2:D6:44:FD:04:0F:A3:8B:03:81:22:4C:C7:93:0F:B4
Authority key identifier: 13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3
Certificate issuer:       /CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3
Certificate serial:       019753EB93B4EB76F090F9A4D381FC555E22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft
Manifest number:          0D0A
Signing time:             Mon 09 Jun 2025 09:00:37 +0000
Manifest this update:     Mon 09 Jun 2025 09:00:37 +0000
Manifest next update:     Tue 10 Jun 2025 09:00:37 +0000
Files and hashes:         1: 8uZf_YXrnrFcX5OGm1hy0aMncrA.roa (hash: FJ+rC+vSFCLpeii+a3s75dE3+VofCsTHLoOQv8k1S8Q=)
                          2: E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl (hash: gnI45lso2U2AaMHyxWzu8ncXHw/ifIjaNn6LVEYsYLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:eb:93:b4:eb:76:f0:90:f9:a4:d3:81:fc:55:5e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3
        Validity
            Not Before: Jun  9 09:00:37 2025 GMT
            Not After : Jun 10 09:00:37 2025 GMT
        Subject: CN=f448d138c2d644fd040fa38b0381224cc7930fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:b4:b5:01:b5:6c:db:8c:0c:4d:9b:23:44:
                    32:65:8b:57:a5:d5:f4:5c:7e:32:fd:ba:f5:a2:b7:
                    56:6c:c5:5a:61:fe:d7:ae:ec:5e:45:cc:2d:0d:3b:
                    0f:81:8d:b8:57:e9:1c:b6:70:d0:e4:76:d6:57:06:
                    fa:61:50:be:56:00:5d:3c:53:6d:c8:02:96:14:3e:
                    4d:dc:2e:a0:b4:71:5e:33:bc:71:33:bc:c8:d6:31:
                    68:d2:ae:e4:f4:e6:84:23:0d:8c:e7:5d:fa:66:8e:
                    33:8c:41:38:70:1f:be:be:82:d2:21:4d:94:ec:20:
                    9a:10:59:6b:45:b7:db:92:55:58:16:5e:ea:09:ca:
                    d7:bd:c3:8a:36:3f:98:ce:cb:83:44:ad:b3:9b:d1:
                    3f:79:95:a6:e5:12:26:bd:5c:be:b5:2e:f4:64:a2:
                    6f:91:05:77:db:b2:be:00:08:51:fe:5e:3a:ae:b5:
                    44:6f:c3:38:1c:01:9f:82:da:60:b9:71:ce:9c:fd:
                    1a:b0:47:d5:fb:60:df:72:51:b2:9d:e6:4d:f6:bc:
                    f4:08:5b:f3:ab:ea:a5:c3:9a:27:42:cd:8d:d0:e3:
                    3e:1f:e4:b8:20:1f:2f:24:7e:b8:8d:12:8f:1a:2c:
                    e3:97:17:80:93:8b:86:87:1c:bd:b2:3e:bd:40:a3:
                    0d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:48:D1:38:C2:D6:44:FD:04:0F:A3:8B:03:81:22:4C:C7:93:0F:B4
            X509v3 Authority Key Identifier:
                keyid:13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e3:de:6c:04:a7:52:77:6b:f4:4f:b0:36:b8:20:11:96:64:
         c6:4e:c4:1a:66:66:83:f3:fe:c1:2e:71:6d:31:1b:4f:58:ef:
         a1:f3:43:77:81:eb:84:e4:70:47:b1:b0:22:4b:fb:c2:a4:fa:
         00:a1:47:d0:b0:5e:5d:99:8a:72:09:58:be:07:5e:20:8c:86:
         cb:5a:34:40:9e:7a:13:50:59:f2:17:39:a0:c5:f8:77:d9:35:
         dd:70:b8:f0:b7:87:67:0d:cf:59:a6:2f:d3:da:00:1c:58:77:
         2c:02:08:7a:4a:fa:af:19:b0:c3:b2:b0:35:c3:37:b0:6c:d9:
         fd:55:5e:42:34:bc:27:c1:a0:e1:82:3d:71:f5:ef:f6:70:e5:
         35:b5:ac:94:90:84:6f:4a:cd:c6:67:e7:37:f8:be:c7:26:b8:
         98:1d:5e:08:12:19:fc:65:dd:52:91:2e:c8:94:10:d7:04:e4:
         e0:78:76:e7:dc:0f:e3:b1:fd:26:2d:a8:f9:ab:e9:90:83:77:
         67:17:93:bc:01:af:31:e5:e6:e6:21:8d:a8:27:0c:15:06:6a:
         f5:59:88:cc:c5:30:b5:25:1a:f6:71:67:c0:29:f5:ec:1e:58:
         62:f7:0f:70:a1:f7:09:46:a7:c8:b2:84:11:07:5b:a9:6e:a0:
         ec:97:7b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:39:32 2025 by rpki-client