Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
File:                     mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft (raw, json)
Hash identifier:          swl8D0oz0Hb+VUyXUJInXdy3AvgSN8vkwyXTLf3MRKo=
Subject key identifier:   A3:4E:4D:E6:AD:71:96:FA:56:D8:7B:9E:08:25:60:2B:DF:74:E5:C9
Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
Certificate issuer:       /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Certificate serial:       01976BBD033FFE9DD82DD3691B7AE52B54A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
Manifest number:          12D0
Signing time:             Sat 14 Jun 2025 00:00:38 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:38 +0000
Manifest next update:     Sun 15 Jun 2025 00:00:38 +0000
Files and hashes:         1: 34VAKZ3gTB0K6y5Jn98OpVnf6K0.roa (hash: 0+PPWp0o1/rwBJiAmqaqRlxFY24T5j6RDdie2DfGC7Q=)
                          2: CqJnQHuWTrr1JOb1x2qlCn7qYBQ.roa (hash: raq5ehc6BfIUJsoK2h14SXHgtvt48xPVADOcv/2fuZ8=)
                          3: mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl (hash: hk6ECSXtJ+Dql/eaujv6OkOfr72iYhA/ilxjEFXf06I=)
                          4: n5tnQjmPsSAa7e0U_BISzqIEQuY.roa (hash: MzEMfBEyS0reuH82ojDXQdP0KgBQQ3sK4Mxn6oyxx3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:03:3f:fe:9d:d8:2d:d3:69:1b:7a:e5:2b:54:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
        Validity
            Not Before: Jun 14 00:00:38 2025 GMT
            Not After : Jun 15 00:00:38 2025 GMT
        Subject: CN=a34e4de6ad7196fa56d87b9e0825602bdf74e5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ec:f5:c4:c7:b1:e2:f5:af:ba:cf:06:94:f6:
                    19:8e:1d:cb:b2:64:e2:a3:95:b7:0d:d8:68:a7:df:
                    2b:8d:a5:bf:53:77:bf:56:5f:b0:60:ae:56:41:5d:
                    36:74:eb:48:b1:7c:38:d8:74:27:42:4a:42:08:e5:
                    50:38:13:f6:c2:8f:09:2c:28:ff:ed:87:30:22:69:
                    c8:9a:b2:0c:a2:f6:df:65:7a:3f:2d:12:60:8e:3a:
                    1c:c9:24:e9:53:fc:ab:6c:c3:31:2e:16:fe:16:c5:
                    5f:1e:6d:c3:1b:4c:83:ac:36:b4:18:00:f5:c5:8f:
                    4b:bc:92:2b:ac:f2:b0:c5:64:fc:d0:6c:fa:26:0f:
                    e6:44:44:93:98:a1:5e:8a:dd:45:8f:84:84:16:64:
                    6b:be:21:77:5b:62:ed:5f:e9:3e:99:1b:d1:cd:a5:
                    c0:f8:58:59:56:02:e1:c4:f6:33:c2:12:00:f3:65:
                    c4:c2:68:98:d9:29:6c:0e:4f:39:e5:de:83:87:0c:
                    87:99:a8:f8:e3:3f:fe:04:24:2d:96:e5:7f:2c:c8:
                    8e:a0:15:a8:22:4e:48:ab:eb:9b:cc:e2:87:c7:6a:
                    a9:5e:4f:5f:9b:02:5a:23:ff:fc:a2:f3:37:47:d1:
                    52:16:7a:c8:2b:24:a6:de:ca:2f:fa:38:89:f3:2c:
                    a4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4E:4D:E6:AD:71:96:FA:56:D8:7B:9E:08:25:60:2B:DF:74:E5:C9
            X509v3 Authority Key Identifier:
                keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:3f:56:b5:5b:a9:6c:2a:cb:2e:dc:a7:1e:0f:88:6c:86:43:
         ae:23:c0:30:7a:ed:14:18:e6:6a:4c:03:a7:6a:e2:6e:61:7c:
         7c:d1:95:e4:cf:62:7b:b7:f9:cf:19:09:a9:06:6c:2e:85:d0:
         23:97:87:e2:0a:0a:01:28:95:f6:e3:77:cf:ed:b9:25:7d:48:
         64:61:07:1d:16:f4:24:15:20:f5:89:ba:94:01:5c:37:1c:56:
         72:d5:da:14:51:10:f5:05:20:79:c5:72:ee:84:d9:df:64:b7:
         89:94:29:00:e1:20:8b:b8:0f:cb:04:0a:4f:c3:ca:82:20:7c:
         c2:51:cb:ef:f9:c1:0e:49:ea:81:5d:3d:3a:a2:58:9b:f2:00:
         85:4a:e4:e8:64:90:bf:5f:92:c3:88:1d:b8:ab:f1:a7:3a:7c:
         0d:95:2e:59:a1:e5:f1:77:e9:f6:63:e7:68:10:c3:3b:f8:2a:
         2e:96:21:e2:79:99:95:83:e2:58:b0:57:d7:77:3d:e6:77:2e:
         30:d4:9c:a8:31:23:b7:6b:a1:be:7a:db:34:b2:74:91:a2:ac:
         d0:34:cb:32:ff:92:45:3d:4d:bf:82:93:32:29:f9:c6:8f:a9:
         c6:e2:e2:d2:ea:a0:d3:93:e3:73:ba:71:f2:99:30:58:05:1a:
         d8:3f:3d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:35:54 2025 by rpki-client