Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
File:                     x90pfQiY__3ijXaWeVvb1SI_imY.mft (raw, json)
Hash identifier:          +eUE9HD7p7ezLO65cDNjwjoUsavSjhrSDDLJi4qu5Ok=
Subject key identifier:   57:08:3B:40:EE:E1:F4:6F:9A:81:1E:2F:4A:EE:79:22:16:4A:3B:5B
Authority key identifier: C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66
Certificate issuer:       /CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
Certificate serial:       019776AE6079B4BD67A0BC66782F44FC4C3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
Manifest number:          06E0
Signing time:             Mon 16 Jun 2025 03:00:28 +0000
Manifest this update:     Mon 16 Jun 2025 03:00:28 +0000
Manifest next update:     Tue 17 Jun 2025 03:00:28 +0000
Files and hashes:         1: 1AGt6vAj9ZNv2w7Fp5tJobLB8aI.roa (hash: GbnSbQEBgHsaOZrngwqdPSv9qkJB1d7PRyKBT0jDdQQ=)
                          2: x90pfQiY__3ijXaWeVvb1SI_imY.crl (hash: xtu8oe94N2batdbMFuCUlt8eywAHSpbiViPPfa9O5eM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:ae:60:79:b4:bd:67:a0:bc:66:78:2f:44:fc:4c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
        Validity
            Not Before: Jun 16 03:00:28 2025 GMT
            Not After : Jun 17 03:00:28 2025 GMT
        Subject: CN=57083b40eee1f46f9a811e2f4aee7922164a3b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c4:e5:c6:f5:6d:bf:bc:13:89:5c:b3:54:d8:
                    a4:65:ec:61:d2:49:8e:2d:0b:87:65:75:a5:90:b4:
                    00:0e:2a:00:7f:dc:25:4c:e9:fd:1b:cf:60:23:c2:
                    e0:6e:aa:63:12:c4:03:27:d2:21:7b:3f:5c:b7:12:
                    04:83:9b:c1:f4:2c:1b:72:24:c9:78:55:1d:fd:01:
                    fb:ec:4b:9c:42:5c:7b:aa:f0:9c:65:82:9b:bc:d7:
                    7c:e4:3b:30:48:cf:51:68:a7:28:10:ed:6b:a1:31:
                    9b:de:94:d1:cb:cc:62:21:f6:7e:e1:33:2d:b1:06:
                    d6:f8:25:7f:d0:96:aa:eb:e4:cf:1c:e8:e3:30:52:
                    eb:a5:f4:56:55:86:b4:92:73:7f:5f:17:95:66:ca:
                    38:a2:20:9b:d5:35:82:0f:a8:4c:b2:e7:6b:e1:93:
                    bb:50:f0:2b:47:03:5f:07:8b:b6:aa:2c:84:e6:96:
                    f1:7f:1c:6e:c4:4f:e7:bd:74:88:95:49:bb:17:06:
                    df:14:9f:7f:3d:64:18:09:19:ca:3b:ad:c7:ce:a5:
                    e3:cc:df:5c:c3:d2:9b:de:e9:cb:b5:c7:5f:31:2b:
                    cd:51:8b:b1:d6:01:88:2c:cd:1e:24:ac:2f:45:66:
                    31:f6:76:b4:7e:bd:8d:d4:8a:c2:1a:d4:87:27:1b:
                    5a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:08:3B:40:EE:E1:F4:6F:9A:81:1E:2F:4A:EE:79:22:16:4A:3B:5B
            X509v3 Authority Key Identifier:
                keyid:C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:c5:b2:36:44:bf:bb:d4:50:e3:43:c8:2b:35:f9:91:f7:65:
         b0:9a:59:4e:00:05:c0:30:cf:7b:59:53:61:48:bc:6d:de:50:
         70:3f:21:ac:1e:68:47:59:b2:c4:29:a2:b9:c8:a9:25:6b:57:
         49:7c:c7:07:a2:52:85:9e:98:1c:c1:12:0e:9c:db:cf:f2:70:
         9d:0f:a6:4c:4f:ee:1a:c7:7d:51:eb:fb:9a:ec:17:22:a7:e7:
         0f:17:46:dd:81:2c:28:46:fd:f5:36:a9:17:80:75:e4:79:f3:
         59:81:a0:34:d5:5e:48:71:df:c6:78:39:51:94:33:ae:13:d9:
         ff:ae:97:08:e3:13:ba:eb:84:55:1d:93:e9:a7:26:f2:95:21:
         5b:7d:e1:f1:29:14:4d:e8:33:f6:9b:bf:ff:fb:b3:5b:29:0f:
         16:11:b5:f0:8d:a6:c1:be:4b:cb:fb:14:20:d5:19:93:e8:31:
         91:20:45:e3:e9:d1:bc:56:64:73:b3:4f:c8:2a:1e:70:df:22:
         77:03:63:00:16:47:88:7d:bb:21:2b:9d:ae:91:3f:4d:e5:a3:
         f7:d0:8b:d0:92:4a:97:39:0b:75:c6:ad:93:ec:99:2e:de:f5:
         be:72:a9:7a:90:74:5e:1c:ab:ae:58:9c:84:80:28:9a:10:ca:
         0b:dc:f3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:06:16 2025 by rpki-client