Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
File:                     eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft (raw, json)
Hash identifier:          1fsHZ0jvF1MRo67Sr2hMs7AdY5ZMfOA5C5XJKH3I2F0=
Subject key identifier:   6B:47:0D:0D:20:D9:B9:9B:AF:1C:7F:78:02:23:86:B2:78:84:D8:33
Authority key identifier: 78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F
Certificate issuer:       /CN=78d32c121735449f1538ff0036f4abd0600a825f
Certificate serial:       01977AC2B839B47F2C246F310C982AAF0BBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
Manifest number:          013B
Signing time:             Mon 16 Jun 2025 22:01:10 +0000
Manifest this update:     Mon 16 Jun 2025 22:01:10 +0000
Manifest next update:     Tue 17 Jun 2025 22:01:10 +0000
Files and hashes:         1: eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl (hash: rMYNXuOmkTbZ7ViGBSmTeh76edktrgos8TC9Z7NoGpI=)
                          2: erOw8yxwzHZjyqOqz7yXVVIUAFU.roa (hash: rvkd4LoifdpTzpO7iE/LNVpMhF4v0Ao+04p8plQuFX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:c2:b8:39:b4:7f:2c:24:6f:31:0c:98:2a:af:0b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d32c121735449f1538ff0036f4abd0600a825f
        Validity
            Not Before: Jun 16 22:01:10 2025 GMT
            Not After : Jun 17 22:01:10 2025 GMT
        Subject: CN=6b470d0d20d9b99baf1c7f78022386b27884d833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3f:76:d9:c0:67:71:ac:74:bd:5a:40:1b:bb:
                    da:e8:18:56:12:53:ff:ed:0a:5e:9b:aa:f0:f0:41:
                    56:58:f7:ee:64:00:fc:1c:a5:fc:be:6a:34:06:cb:
                    e6:d5:eb:61:07:77:cd:d6:1f:16:03:e8:43:9e:51:
                    02:48:ba:9a:07:df:bd:a3:2c:4b:d5:04:c7:0e:f9:
                    27:99:e8:71:9d:a6:e4:d4:0d:c3:1b:29:f3:c2:3a:
                    7a:96:3d:c9:3d:0f:3f:0d:7b:57:e0:43:8e:b7:f0:
                    a2:e5:84:53:de:e1:7b:6a:d5:4b:3e:cf:b6:d5:0c:
                    3f:2a:0b:d6:df:03:cc:6a:20:9c:dd:b5:19:8a:9e:
                    23:0c:35:d9:c0:e9:30:d9:87:88:53:b3:6f:e8:61:
                    05:97:a0:b9:75:2c:b2:91:00:30:34:7a:f8:04:90:
                    09:95:35:67:32:7d:8a:77:a7:63:62:00:70:73:8a:
                    5d:20:fc:2b:70:62:32:7d:ef:f7:e1:3a:84:02:40:
                    b7:41:a8:dc:c5:0a:fa:a3:0d:96:21:7e:6c:53:27:
                    b2:22:82:63:f0:1d:b4:09:bc:09:d9:b6:d8:d0:30:
                    19:e8:78:17:fd:f3:c6:6a:d3:dc:22:56:49:b5:f4:
                    cc:6a:45:0c:9e:30:f1:77:4c:c4:f2:bd:03:ac:0c:
                    b9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:47:0D:0D:20:D9:B9:9B:AF:1C:7F:78:02:23:86:B2:78:84:D8:33
            X509v3 Authority Key Identifier:
                keyid:78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:8a:d6:20:3b:ac:c7:0d:e4:26:02:8f:f3:fd:3c:eb:46:43:
         ff:5f:76:40:96:dd:5a:19:17:99:7d:b2:77:a6:f5:b7:8e:52:
         4c:21:ff:0a:e5:64:a0:f5:c7:ac:11:19:6b:0a:fe:08:c5:65:
         a4:ee:d1:1e:c5:6d:cd:7e:bf:59:c1:62:3e:3b:dd:3b:7e:8e:
         d2:70:ea:ba:b7:e8:19:95:30:30:d1:c7:8e:14:1c:9e:fd:a8:
         b7:76:4e:30:20:84:2c:be:c3:39:a7:46:67:1c:a5:55:4d:e0:
         9c:9d:c0:62:bb:2f:48:16:40:3c:a0:21:4e:45:2e:31:f5:a9:
         8d:81:21:e7:ce:0b:57:f3:38:e8:70:b8:cf:97:f1:3e:cc:9d:
         1c:33:5b:6a:14:37:14:7d:d7:0f:7b:c1:fd:69:f2:ab:42:0d:
         96:88:91:39:13:68:2c:9b:0f:6d:3d:b6:36:24:9c:b2:ad:03:
         63:22:00:2f:de:d9:da:aa:58:45:4f:37:0d:d8:cc:6b:47:ee:
         13:92:6a:f7:49:a5:0b:54:c3:b2:b1:e2:a4:cc:c9:a7:2b:50:
         71:ba:9b:3b:9e:9f:d5:78:ab:3d:01:32:1d:24:bf:19:8e:ec:
         0b:69:33:e8:c7:17:a1:fb:53:20:69:70:5c:01:c9:84:4c:ce:
         c8:b8:18:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:21:08 2025 by rpki-client