Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
File:                     r7ALKTlueAM-26yv75hQsbDjUyM.mft (raw, json)
Hash identifier:          2AsNaXWQ/3JRe/U/8dLkZy5LVuZ60BRtsYQF772VzsQ=
Subject key identifier:   19:18:B2:70:68:E3:7B:D8:B7:C6:73:38:C7:9C:79:FC:45:44:6F:7C
Authority key identifier: AF:B0:0B:29:39:6E:78:03:3E:DB:AC:AF:EF:98:50:B1:B0:E3:53:23
Certificate issuer:       /CN=afb00b29396e78033edbacafef9850b1b0e35323
Certificate serial:       019751FD06B945B2F89DC280B5F4CD8FBF88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
Manifest number:          0E2E
Signing time:             Mon 09 Jun 2025 00:00:26 +0000
Manifest this update:     Mon 09 Jun 2025 00:00:26 +0000
Manifest next update:     Tue 10 Jun 2025 00:00:26 +0000
Files and hashes:         1: CY3YIBeeXy7d304leRk_84B6aOw.roa (hash: a5cqctkZKmbgtiXrSitwhHqbpFExqVK4hQecaTEUPK8=)
                          2: r7ALKTlueAM-26yv75hQsbDjUyM.crl (hash: KrbXgdSahfWKCNcEeoxO4G8LbLXCBs82qwn6dLYNmBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:fd:06:b9:45:b2:f8:9d:c2:80:b5:f4:cd:8f:bf:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afb00b29396e78033edbacafef9850b1b0e35323
        Validity
            Not Before: Jun  9 00:00:26 2025 GMT
            Not After : Jun 10 00:00:26 2025 GMT
        Subject: CN=1918b27068e37bd8b7c67338c79c79fc45446f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:31:de:ee:72:8b:68:78:97:d5:c6:2f:05:e2:
                    80:b8:5e:a4:9d:52:23:5b:5c:44:a3:a9:40:ae:d5:
                    9a:cc:a0:79:91:6d:e2:63:9a:8e:eb:d9:a4:4c:1e:
                    0d:17:06:e7:a4:c4:0f:97:36:47:82:aa:23:39:c4:
                    19:17:cd:6d:7a:14:51:62:52:45:84:34:27:57:7b:
                    aa:09:a5:7f:f8:ea:2c:25:58:31:96:35:ae:ac:31:
                    d0:6a:99:7b:fe:06:16:e7:b8:44:46:07:4c:88:8e:
                    65:a7:0a:ac:fe:f2:4e:0d:a0:e7:2a:c4:68:52:a4:
                    f2:17:69:b7:15:29:a4:09:80:60:3a:9f:60:7f:fb:
                    46:db:75:c1:b1:fb:b1:69:be:e1:32:70:92:da:62:
                    ee:e2:d1:d0:3a:15:57:a0:94:d3:bd:32:5d:78:36:
                    ce:ed:f2:4a:20:cf:d8:90:ee:1a:3e:4c:10:0c:a0:
                    f8:9c:9a:a8:3f:df:37:ab:5d:52:d9:04:d4:ae:07:
                    4a:ce:91:12:9e:b1:1c:94:00:e5:83:38:8e:15:b4:
                    df:f7:53:41:ef:1c:48:ee:80:74:bc:1d:f1:03:95:
                    46:f8:e3:83:2f:5d:3c:a0:c0:d8:ba:45:a7:3f:08:
                    93:c4:21:5d:3e:0e:09:42:78:7c:9d:f2:98:81:13:
                    3b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:18:B2:70:68:E3:7B:D8:B7:C6:73:38:C7:9C:79:FC:45:44:6F:7C
            X509v3 Authority Key Identifier:
                keyid:AF:B0:0B:29:39:6E:78:03:3E:DB:AC:AF:EF:98:50:B1:B0:E3:53:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:2a:4f:3f:17:8b:88:46:39:ab:cd:af:14:95:8f:fc:b1:49:
         3f:5c:a7:99:e3:07:ee:bd:74:14:da:3b:e4:d3:7d:2c:06:75:
         59:b3:01:6b:2c:e1:76:d2:7a:fa:19:27:7a:ab:d8:80:aa:a1:
         61:d5:94:a6:66:ed:22:c5:d1:70:f9:67:d3:2a:df:7b:6c:cd:
         8a:73:75:03:65:1c:0e:5b:e4:8d:a8:f8:15:ab:f8:33:6b:b3:
         a4:c7:4b:d4:af:34:6b:a8:43:c2:f3:4d:3c:97:b7:92:7c:55:
         6a:5b:8b:a1:4b:5e:81:43:f5:8e:fc:fc:99:2d:ff:37:6e:d0:
         b2:cf:8a:58:2e:1b:17:fe:5e:73:29:2a:8c:f3:86:29:97:dc:
         f3:ed:b6:b6:16:d5:8f:b5:2f:b7:c6:c2:68:95:c3:33:b6:08:
         2c:95:66:10:5c:22:6d:8f:e7:26:72:d4:12:7b:89:3e:31:49:
         b1:8f:b7:f8:8b:d0:45:27:78:3d:1b:d7:e2:97:b3:5c:36:53:
         0b:80:81:4e:bf:d0:aa:b7:a0:eb:e8:d5:2a:ff:e3:ce:43:33:
         79:da:9b:09:cc:89:72:e0:3d:f7:8d:37:e5:ce:2b:93:0a:ac:
         05:c2:09:45:af:30:74:0c:0b:13:9a:27:a9:a0:b4:cd:8c:8e:
         4a:67:a6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:14:06 2025 by rpki-client