Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
File:                     d8LYpgGX_HveZPw_rRDrLaT-h3k.mft (raw, json)
Hash identifier:          Tp99NUNQ5YVQvO4xIv0sRkwUuhiXOWtX7heU+IjQNzM=
Subject key identifier:   E7:7B:A7:B0:D2:77:54:E3:5A:85:93:D0:0D:77:49:FF:A5:D7:77:B0
Authority key identifier: 77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
Certificate issuer:       /CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Certificate serial:       01976C620A68598A0EDEF7CD9FC028561767
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
Manifest number:          05E4
Signing time:             Sat 14 Jun 2025 03:00:53 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:53 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:53 +0000
Files and hashes:         1: Fio9S4kkM_6MY_PyvY4nnlbZSX0.roa (hash: MLkm/zb7dfsD7k0W1D+pAVDUongRrbvCkAFDtBq/FSI=)
                          2: d8LYpgGX_HveZPw_rRDrLaT-h3k.crl (hash: Gx2YbRYJHwviZ0zLoPq84dMI/LPTcAsUF94dsLjktjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:0a:68:59:8a:0e:de:f7:cd:9f:c0:28:56:17:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
        Validity
            Not Before: Jun 14 03:00:53 2025 GMT
            Not After : Jun 15 03:00:53 2025 GMT
        Subject: CN=e77ba7b0d27754e35a8593d00d7749ffa5d777b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:c5:1c:c5:96:5b:32:a9:6b:8b:a1:04:95:
                    a7:c4:a0:dd:d9:7c:cb:c6:16:46:7a:ed:35:85:6f:
                    33:f4:6b:3e:93:1f:8d:e5:79:2f:d9:34:03:1f:e7:
                    2c:39:ba:1b:b9:e8:6b:95:cc:57:fa:86:d3:6b:76:
                    a3:05:ab:be:4e:b1:b8:1e:a3:bb:47:bb:00:e0:f1:
                    af:69:2f:f5:f9:b2:c5:f3:78:6c:71:46:ae:64:78:
                    14:3f:32:74:e2:3c:5f:44:a4:6b:5c:5e:eb:97:e2:
                    7e:e7:35:03:16:d7:61:5e:bf:26:d4:b1:30:b0:b3:
                    af:5a:6c:01:29:80:e5:68:71:14:51:20:66:6d:d9:
                    fc:7e:b5:c6:62:65:5e:73:26:39:3f:e5:17:d6:ed:
                    a8:c6:3d:61:c1:0d:85:cc:24:7b:67:7d:dc:c4:b9:
                    2d:31:38:c8:7d:e6:9b:e4:3b:f8:e5:cc:60:2b:65:
                    36:27:d9:bb:5c:16:d2:ba:43:4d:0c:d0:a1:db:d0:
                    4f:c2:2c:e7:5d:9f:1b:a9:31:c6:e9:32:e0:5d:cc:
                    be:5e:35:82:dc:28:56:7e:07:4f:c0:60:46:9d:00:
                    17:af:79:97:b5:d9:ce:e8:d8:a1:7f:a0:32:27:46:
                    b0:d1:b2:b7:af:cc:89:17:02:b2:4c:75:fe:48:50:
                    c5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7B:A7:B0:D2:77:54:E3:5A:85:93:D0:0D:77:49:FF:A5:D7:77:B0
            X509v3 Authority Key Identifier:
                keyid:77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:7b:69:a0:3e:44:de:6a:75:14:d8:33:db:d0:d5:fc:33:00:
         06:8c:81:04:97:57:28:55:52:e4:93:63:4c:60:b3:e9:79:b8:
         d9:10:4c:73:c8:5a:20:d4:a7:e4:63:2f:ef:b5:6e:4f:3f:2a:
         8d:f2:6d:35:31:27:84:55:5b:b4:b1:5c:5d:33:d6:84:17:7a:
         be:80:6b:6c:29:01:16:7e:c9:ce:e3:7f:bd:3f:a5:6c:ed:5d:
         63:eb:8c:b0:e2:5f:3b:e3:90:44:54:6e:59:cc:40:90:21:11:
         6e:7d:51:aa:ea:9e:4c:62:bb:74:79:17:37:93:35:e9:cb:58:
         38:e2:cd:ac:ce:a0:5d:38:94:fb:08:4d:1a:24:8a:62:8e:32:
         b5:c1:98:c4:6f:bd:65:f5:2a:7d:fe:db:a7:f1:0e:3c:2d:de:
         dd:6a:bc:06:92:c2:14:05:40:3c:3a:7e:51:02:2c:cc:87:14:
         d4:cb:0a:6a:8a:bb:b7:38:df:71:3e:2a:1a:17:7b:8b:45:bb:
         9b:61:f7:74:1e:8d:6e:78:1e:81:e5:31:69:5f:6a:da:10:44:
         36:d3:a0:89:cd:1e:c8:2c:f7:90:4d:0d:ba:53:d3:57:08:4e:
         91:12:3b:2e:25:27:7c:74:d6:04:0f:d4:f7:22:39:56:f7:d4:
         f2:de:78:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:29:26 2025 by rpki-client