Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
File:                     98ci2uJwhooZg4p81JnVnCZ52JE.mft (raw, json)
Hash identifier:          AVdGFy+xwOA6G4AuatvQ5prYOmoqnzsJx1H3m3Z+MeI=
Subject key identifier:   3E:91:82:CD:40:2F:C4:29:E4:07:4F:87:D9:DE:2D:B4:E7:D2:31:40
Authority key identifier: F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
Certificate issuer:       /CN=f7c722dae270868a19838a7cd499d59c2679d891
Certificate serial:       019769CEBA4DD9A31D8FC5970C5355B368B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
Manifest number:          047B
Signing time:             Fri 13 Jun 2025 15:00:45 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:45 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:45 +0000
Files and hashes:         1: 2GvGxW56EwiXdY8WsCKuvBnzEmE.roa (hash: W3DnYzHP+CF6agGgHp9PqPmuvt/s/L6YaUF7RJiXgPQ=)
                          2: 98ci2uJwhooZg4p81JnVnCZ52JE.crl (hash: w7cCERBJNKMc6LWrjLlLFhZrNVOcJZ3cyohNP2xbtyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:ba:4d:d9:a3:1d:8f:c5:97:0c:53:55:b3:68:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7c722dae270868a19838a7cd499d59c2679d891
        Validity
            Not Before: Jun 13 15:00:45 2025 GMT
            Not After : Jun 14 15:00:45 2025 GMT
        Subject: CN=3e9182cd402fc429e4074f87d9de2db4e7d23140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d0:a5:94:6e:30:5e:68:d7:5e:80:dc:85:f0:
                    11:8b:b0:0e:1b:8f:13:ab:c1:7d:71:1a:30:9f:9a:
                    2f:17:d9:2f:3d:98:9e:4a:45:97:fc:78:2c:d2:c9:
                    47:54:d0:10:28:08:08:c7:87:b7:2c:73:3e:ce:b5:
                    0d:78:69:7a:e4:f9:dc:a2:06:e4:13:e3:45:fe:c2:
                    d5:44:df:16:e2:04:61:ff:a3:79:ec:8c:c0:c9:b5:
                    ce:25:e6:c8:11:56:d5:c5:c1:8f:53:49:52:ec:04:
                    90:39:27:de:81:8b:7c:02:44:14:5a:80:79:84:d3:
                    5e:3f:20:a5:c0:58:7a:ec:0b:ea:23:34:4a:1f:26:
                    a5:f6:53:f0:84:31:84:b5:d2:04:f8:30:44:2a:5d:
                    d8:04:c6:04:9c:8b:d4:fe:52:e9:36:16:fc:33:82:
                    eb:72:35:93:97:96:b5:25:1c:30:cc:b6:08:eb:9a:
                    04:2b:60:c1:24:93:3e:55:d7:e5:8b:e0:dd:aa:2d:
                    9f:34:4f:8a:54:87:e0:4d:82:50:6f:ff:19:1e:b7:
                    21:24:ad:ee:b3:67:a4:29:07:f3:40:ef:53:05:f6:
                    b1:7c:34:c5:a4:eb:d5:61:38:cf:7b:54:cf:4e:f7:
                    73:c3:2f:ff:31:50:e8:e1:3d:d5:d6:bd:43:30:82:
                    4a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:91:82:CD:40:2F:C4:29:E4:07:4F:87:D9:DE:2D:B4:E7:D2:31:40
            X509v3 Authority Key Identifier:
                keyid:F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:3b:d5:69:76:fe:dd:77:4f:b0:e8:ae:fe:25:9f:9f:18:c3:
         b4:d5:77:34:a7:f6:7f:f8:a7:43:ce:49:ec:5c:c4:77:51:dc:
         ff:62:37:39:80:f9:0d:eb:ac:3a:3a:5f:37:41:ec:7f:c9:45:
         6e:3f:7d:5b:b3:72:dd:45:f6:52:dc:c0:10:7f:37:17:14:ed:
         30:48:9b:fb:19:ee:91:cf:75:bc:a2:9d:f3:42:a4:7c:6d:07:
         01:6f:3a:f0:24:41:8c:db:76:2a:ab:94:3a:8f:e4:43:5d:77:
         e1:44:72:32:03:cb:ba:2a:87:66:c8:96:88:80:e6:7c:1f:8b:
         e4:7a:90:6f:48:fb:67:91:b6:ab:25:97:c0:07:63:76:49:88:
         f9:80:5f:58:49:25:8a:a6:99:2c:6e:bd:78:1d:43:41:a4:22:
         aa:a8:0e:67:e5:7d:93:50:74:36:bb:36:bd:41:f3:5b:72:eb:
         e8:da:63:68:21:78:98:98:5c:72:25:66:b2:33:94:17:d3:7d:
         a3:6d:de:b0:73:26:1e:13:b4:b3:f9:6a:33:e7:6c:96:b9:e9:
         cc:95:9e:43:0a:df:ba:c8:94:0d:de:52:04:10:41:7c:d4:5f:
         49:c8:01:93:6a:02:02:a8:97:c2:ff:11:52:ed:7c:6a:04:8a:
         01:25:a0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:18:57 2025 by rpki-client