Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
File:                     e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json)
Hash identifier:          KSAIS+qJzTSx1/r/gwJb7dEjgOPRwIX9PYMucKr6tYg=
Subject key identifier:   EE:DC:FC:6D:3F:EB:A8:DF:EA:DB:D2:F6:E8:34:E7:70:46:35:E0:E0
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Certificate issuer:       /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial:       01974CD6B1AE52A6FE0D7D0C758BB5391FF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
Manifest number:          0C13
Signing time:             Sun 08 Jun 2025 00:00:27 +0000
Manifest this update:     Sun 08 Jun 2025 00:00:27 +0000
Manifest next update:     Mon 09 Jun 2025 00:00:27 +0000
Files and hashes:         1: DIa5pw00VBuzd8TnmLxOAmAN6Io.roa (hash: X2ZL9HHT+jpKG7EXK5mDhvGY1GOQw7aFu6sUd6IVFrk=)
                          2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: XehVU+IJCAs2dHr/b85rpL0FVplGfByStz3OPSYY3lM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d6:b1:ae:52:a6:fe:0d:7d:0c:75:8b:b5:39:1f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
        Validity
            Not Before: Jun  8 00:00:27 2025 GMT
            Not After : Jun  9 00:00:27 2025 GMT
        Subject: CN=eedcfc6d3feba8dfeadbd2f6e834e7704635e0e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d5:e0:db:a5:d5:01:32:e8:b5:db:6e:2b:af:
                    4d:b1:2d:f3:8b:e8:ff:a3:d4:13:dc:fa:f1:ab:61:
                    f0:5b:c9:31:9e:a2:50:8b:2f:41:0f:1f:01:33:a7:
                    fe:7c:b9:93:6e:fa:49:37:0d:31:43:77:4b:28:8f:
                    8f:64:00:33:22:a0:3a:1c:bf:1c:3d:37:f1:c3:b4:
                    02:3a:60:d3:08:23:74:c3:87:7b:2f:13:84:e1:b7:
                    fe:08:35:97:62:6f:e3:2a:c2:02:03:d6:88:a0:de:
                    26:45:f8:b8:db:e0:15:b5:3d:4e:8c:9b:75:66:2c:
                    a2:2b:f3:d5:17:ba:f4:e6:55:e5:11:d0:2e:ad:b4:
                    a9:6c:8c:26:c3:e3:4b:15:2d:8c:e4:05:cd:d8:66:
                    de:23:73:62:e0:aa:2f:6f:b3:d8:60:6f:ee:ae:e5:
                    67:59:9e:f6:d6:51:b2:c2:2e:b7:24:c1:a1:61:be:
                    94:67:ce:cd:47:c5:12:4e:29:90:f2:25:18:53:93:
                    f8:66:98:9b:88:4a:54:35:da:dd:c2:34:9d:1a:cb:
                    de:e4:9b:73:d0:72:96:7d:c4:7d:41:90:c4:41:57:
                    fe:bc:87:37:91:2e:49:06:72:a2:42:c6:a0:73:76:
                    1e:00:ff:8a:27:3b:82:c0:97:bc:23:63:4b:db:01:
                    f6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DC:FC:6D:3F:EB:A8:DF:EA:DB:D2:F6:E8:34:E7:70:46:35:E0:E0
            X509v3 Authority Key Identifier:
                keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:d7:f7:20:ae:35:a4:e5:08:e9:3b:b7:96:fc:ca:16:97:88:
         0c:9c:41:52:38:49:bb:e9:46:90:ef:4f:6e:3a:a8:de:3c:92:
         12:ae:9a:2d:60:0e:b0:24:28:66:1f:fe:92:a4:5e:f2:c0:cd:
         98:30:64:21:53:67:3b:26:c9:52:74:1e:38:57:77:d4:59:1e:
         61:f3:8f:15:d5:d9:2b:e3:95:78:f3:19:a2:72:7a:d1:2c:58:
         18:11:2c:59:88:e9:8b:db:c0:e3:70:6f:41:b4:41:4d:73:36:
         8d:28:07:6e:cb:3e:77:5e:4d:f7:a5:b3:ba:ee:7c:4a:da:48:
         6b:f7:0c:55:5f:74:c2:65:d6:48:ff:6f:2b:3e:39:7b:75:27:
         73:29:7b:4b:24:06:ea:67:71:3f:47:dd:ea:8d:83:bb:e9:bd:
         e0:e6:e2:93:50:3b:ab:da:25:f2:18:9d:97:a2:ef:d9:ee:61:
         aa:67:48:ae:88:a7:90:08:47:18:f8:5e:f8:a9:1e:b0:5d:2b:
         ab:f3:99:2b:23:3f:c3:2f:2b:98:21:74:b5:3f:51:a6:d4:a0:
         9b:3d:e0:be:46:54:7a:ee:68:9f:9b:b8:f9:46:9b:15:7f:2f:
         3f:39:a2:be:5a:3e:76:b2:9e:20:b8:81:b7:8f:50:89:ae:0e:
         49:1b:38:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:54:44 2025 by rpki-client