Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
File:                     c2fEkER_UEXAI2fbjSG04IdJ-nY.mft (raw, json)
Hash identifier:          fxDBXn+LsETLMq8gThH2feO+mhUKFdmT4Ba1uIjwtew=
Subject key identifier:   8D:0A:56:A5:E0:6A:AE:9B:1C:7B:A1:B1:A2:63:8B:97:FA:DE:33:95
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Certificate issuer:       /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial:       01976FD1176E7C3B9684D17FB62AC8CBED71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
Manifest number:          0789
Signing time:             Sat 14 Jun 2025 19:01:03 +0000
Manifest this update:     Sat 14 Jun 2025 19:01:03 +0000
Manifest next update:     Sun 15 Jun 2025 19:01:03 +0000
Files and hashes:         1: c2fEkER_UEXAI2fbjSG04IdJ-nY.crl (hash: e/oYJIJOSji/BqxsbJs/sfmQ0LPWFY3x9lFczVkxL6Q=)
                          2: zxcUujcSrD8SI1LnYGJEIzlJLRs.roa (hash: 9DpZ6fCwMNxgzvUI8W4qG2/5GfqMuaNy171SPmB26NM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d1:17:6e:7c:3b:96:84:d1:7f:b6:2a:c8:cb:ed:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
        Validity
            Not Before: Jun 14 19:01:03 2025 GMT
            Not After : Jun 15 19:01:03 2025 GMT
        Subject: CN=8d0a56a5e06aae9b1c7ba1b1a2638b97fade3395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7f:38:b8:d0:4f:ef:56:be:7e:fd:0c:7b:62:
                    2d:df:2c:88:36:27:4a:08:76:c5:d1:5e:2c:d0:74:
                    00:b4:25:14:93:fc:03:4e:1e:1e:a6:8b:94:1b:36:
                    5b:3f:8e:11:72:f6:05:8c:2b:a8:b3:04:42:cb:90:
                    7e:87:3c:6f:4c:77:4a:be:a2:97:38:47:65:5c:30:
                    9c:11:1d:90:09:be:08:77:dd:47:0f:a9:e1:05:dd:
                    81:3b:fd:da:54:94:d8:c1:74:d9:b8:de:bc:ce:b6:
                    c4:d7:5b:3e:03:b5:9f:38:65:47:90:0f:ba:27:78:
                    f9:54:5d:fd:eb:e2:06:23:39:6b:c7:98:6f:4a:2c:
                    25:e8:d6:a0:f6:c4:1e:f9:eb:d0:db:10:cc:02:63:
                    92:a3:fe:3b:53:da:d0:0e:aa:3a:97:45:9f:63:01:
                    32:43:0e:ff:c8:cb:8e:05:cd:54:d6:ee:64:0a:00:
                    bf:b4:ea:76:46:f9:d0:8e:31:d1:06:21:52:38:d7:
                    1f:69:e2:71:e6:a0:78:73:37:eb:19:0a:11:37:ce:
                    e1:06:7c:54:bf:ca:be:de:9b:f6:33:ba:89:8c:a2:
                    fd:a5:8e:e6:f3:11:0d:33:a0:2d:ab:fd:5c:fd:d7:
                    8e:4a:be:33:1e:b1:f3:d6:62:ec:ef:1b:7a:a7:40:
                    23:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0A:56:A5:E0:6A:AE:9B:1C:7B:A1:B1:A2:63:8B:97:FA:DE:33:95
            X509v3 Authority Key Identifier:
                keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:4a:8e:5b:58:be:d0:7b:a0:f1:b4:95:7e:5d:30:a5:29:d6:
         0e:ea:69:fc:82:ac:c2:61:ac:67:9a:ec:e5:f9:99:89:ee:16:
         b4:88:ae:63:7b:fd:49:1a:1b:2b:de:75:f2:39:94:d6:9f:9e:
         3d:75:d3:96:fe:7b:8d:25:44:82:41:85:3f:4e:2a:32:da:f4:
         9a:41:f8:ec:f8:ad:4a:76:df:41:a3:06:ff:e0:d9:ff:33:46:
         61:fe:8d:f5:6f:ff:59:61:83:eb:c8:50:12:b4:2e:82:6a:d5:
         76:9a:cd:22:39:f8:8d:4b:1b:d0:40:7d:7c:1f:1c:45:5a:9d:
         f2:77:7a:8d:e7:44:db:b9:5b:1e:45:dc:9f:8c:91:c1:3e:e6:
         13:d4:5e:1b:cb:b6:a1:94:db:2b:97:e4:56:9a:d7:16:0a:1e:
         77:81:57:78:25:eb:7e:d3:24:69:eb:c8:fe:d3:80:41:bd:27:
         0c:c8:53:d3:d0:d7:93:82:3a:83:87:1e:bf:66:cf:6c:ae:24:
         d6:c7:17:f6:bd:bf:71:ae:d8:e9:76:3d:24:28:c6:81:f4:e2:
         87:e6:dc:fd:1a:24:66:10:c2:27:6f:e4:04:41:80:e6:01:84:
         a5:27:6b:b4:d3:f2:b7:06:1a:11:e7:58:d7:ce:f2:d3:5e:5d:
         51:20:8a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:19:17 2025 by rpki-client