Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
File:                     MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft (raw, json)
Hash identifier:          eaDLO0N/5MTsPG7CIKIqwkGe3i6DuGEkw3+YIA3aVEE=
Subject key identifier:   09:EF:E9:AF:04:9C:11:ED:E2:AA:B4:9A:8B:8A:2D:1B:86:D6:DA:8E
Authority key identifier: 31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2
Certificate issuer:       /CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
Certificate serial:       01977CE7DF5D0A5770680EB3040E799C6381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
Manifest number:          10AC
Signing time:             Tue 17 Jun 2025 08:01:00 +0000
Manifest this update:     Tue 17 Jun 2025 08:01:00 +0000
Manifest next update:     Wed 18 Jun 2025 08:01:00 +0000
Files and hashes:         1: DfvtpBc-nvqHEzH62KyAmVwM6wc.roa (hash: vQtE9Py9eSZNLr1/cVugAFwNdN9RtLbpzhnSE7YveL8=)
                          2: MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl (hash: aGnq3dmEZJbiLs9CTwz3WQ+XYkStlfRWPpTb1/NfU68=)
                          3: pckV3Ny46TaKVnOLD2SsKXbY_nE.roa (hash: wXkkeRI/oAjuXh/YFmny+LydKMS24wNW7vGV6jYr8h8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7c:e7:df:5d:0a:57:70:68:0e:b3:04:0e:79:9c:63:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
        Validity
            Not Before: Jun 17 08:01:00 2025 GMT
            Not After : Jun 18 08:01:00 2025 GMT
        Subject: CN=09efe9af049c11ede2aab49a8b8a2d1b86d6da8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9d:16:70:e0:8d:92:15:06:bc:63:62:c6:1a:
                    5f:9a:71:5c:77:5f:86:23:1a:b8:2c:9f:28:2c:47:
                    fb:85:0d:36:7c:47:32:c0:9f:d7:c7:77:04:bd:7d:
                    3b:fd:11:3a:76:fb:ba:0f:7b:a6:2b:ff:1e:bd:40:
                    f2:04:54:fa:6e:c6:a8:11:db:64:de:b4:fc:32:a7:
                    e1:64:e2:2f:f6:94:89:f0:13:3a:6a:97:90:53:ca:
                    32:1c:be:c6:98:35:28:70:8f:7c:f7:1a:52:2c:9e:
                    19:c1:6a:c9:23:60:aa:d8:af:09:31:05:0c:cd:33:
                    c6:a8:6f:9d:d0:da:d3:68:d6:66:f1:c2:a9:da:06:
                    6b:e7:0a:12:db:01:4a:f3:bb:a0:9d:e7:13:21:cc:
                    42:9d:9d:3a:67:b4:28:f3:91:ce:50:09:88:3a:38:
                    a7:7c:35:66:38:98:32:f4:93:90:be:36:d4:80:bb:
                    ce:9d:41:35:f3:0f:3c:7b:b4:25:1c:66:3d:bd:e3:
                    c3:e7:d5:8a:b7:0c:99:0d:2b:73:2d:e0:01:9f:81:
                    31:ea:c3:21:ed:e2:ef:48:e0:df:44:27:df:76:2f:
                    15:69:02:96:3b:40:11:e3:fc:90:f8:9e:5f:ed:50:
                    f7:e0:3c:42:4c:55:cc:b3:3a:aa:79:31:3f:56:e1:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EF:E9:AF:04:9C:11:ED:E2:AA:B4:9A:8B:8A:2D:1B:86:D6:DA:8E
            X509v3 Authority Key Identifier:
                keyid:31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:16:a4:53:fd:3b:99:9a:f6:0f:0e:82:af:27:12:91:11:68:
         fd:b0:f5:aa:4d:ea:98:4e:fa:c7:27:27:d4:a0:34:fa:4c:89:
         08:ca:ef:b1:59:14:2f:1f:2d:03:44:4d:a8:08:a3:3c:f0:1a:
         4d:10:33:ba:53:4a:65:ad:88:2a:35:31:48:de:dc:a9:9e:34:
         3f:57:be:cd:ec:0e:b3:da:45:1b:e7:4c:aa:71:11:25:0a:8d:
         aa:61:76:6c:90:53:8e:6b:27:e6:07:40:8f:c6:08:79:c9:fc:
         b3:9f:8a:ba:3c:0c:d8:8d:15:8f:62:7e:80:d6:e8:bb:64:93:
         f6:45:b1:fc:90:43:3a:52:4c:fc:f8:33:42:54:3c:8e:ce:20:
         71:00:1b:1c:10:d5:bf:2b:48:4e:af:8b:07:ab:42:71:28:1d:
         62:3c:7e:0c:1f:29:73:63:f9:d8:a0:2f:08:40:67:9d:c5:c9:
         2f:e7:dd:ec:9a:d7:96:b0:44:19:4d:0a:52:43:ef:66:4d:29:
         a2:ca:e6:52:aa:5b:3f:df:57:ad:17:93:7c:ae:e9:d1:56:09:
         85:c0:c8:4a:fe:db:e2:4f:6a:16:64:6c:80:26:c9:11:89:f7:
         b4:d8:f5:df:7e:17:d7:aa:e9:e0:56:f2:a7:88:06:e3:24:67:
         55:e1:a7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:56:18 2025 by rpki-client