Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
File:                     735cdfZIrGkrFLwiLiwYDIY7ReI.mft (raw, json)
Hash identifier:          q7vC3Dc2gxvSd73cYlvqgxJE1G5Duk5zZDnLSkN+hBc=
Subject key identifier:   B0:5A:67:97:F8:8B:0C:E6:D2:29:D1:95:5C:D5:D2:AB:D9:51:62:4D
Authority key identifier: EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2
Certificate issuer:       /CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
Certificate serial:       01977E9F38BE1698621F162EA4BA907CD6DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
Manifest number:          0236
Signing time:             Tue 17 Jun 2025 16:00:53 +0000
Manifest this update:     Tue 17 Jun 2025 16:00:53 +0000
Manifest next update:     Wed 18 Jun 2025 16:00:53 +0000
Files and hashes:         1: 735cdfZIrGkrFLwiLiwYDIY7ReI.crl (hash: If4sJyRBsDckOEZPWDbkK0Pc7tdAatNT8qtIwXe/svQ=)
                          2: YvnoPFlwVSBiKu9iqRFpzb0xlh4.roa (hash: FIC2N81bANGcoREXZdDhNQ3XBvgX/G7WyyZfKBc7yTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 13:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7e:9f:38:be:16:98:62:1f:16:2e:a4:ba:90:7c:d6:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
        Validity
            Not Before: Jun 17 16:00:53 2025 GMT
            Not After : Jun 18 16:00:53 2025 GMT
        Subject: CN=b05a6797f88b0ce6d229d1955cd5d2abd951624d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ff:06:56:60:bf:00:4b:2f:b2:0e:88:d4:65:
                    66:f4:52:33:42:96:87:74:68:bc:6c:ef:0b:cb:29:
                    bf:77:de:f4:7c:b9:d7:f4:ba:e3:9b:35:74:b6:c3:
                    6a:53:d5:bd:3a:35:a6:37:b5:57:05:56:b7:f2:e7:
                    55:3a:76:7d:c5:fa:e4:9e:bd:ea:f8:68:b9:bf:59:
                    a5:d7:8b:08:f4:11:63:1d:c6:a2:89:ff:0e:33:44:
                    01:a4:9b:f5:ea:e8:30:cc:c3:bb:53:3f:1e:73:22:
                    f4:e4:a2:f3:c9:7b:c1:cb:16:da:aa:89:30:07:3c:
                    df:3e:3a:bd:33:05:4d:56:31:76:17:f1:a6:fc:d8:
                    57:ba:bc:14:4d:58:2d:95:ac:f4:bf:47:df:dc:ce:
                    18:ff:7b:b6:19:a7:7b:15:3a:b5:6f:3b:71:52:a1:
                    cb:8f:db:44:a7:fc:c2:59:8a:0f:30:e6:35:8a:f2:
                    c8:72:4a:a7:d6:af:dd:4e:9c:2b:46:69:37:2c:fa:
                    e8:38:4b:aa:29:1d:06:a8:60:b5:80:8d:f8:ff:87:
                    d2:5d:d0:6c:09:bf:a5:60:ca:38:92:ec:b3:50:15:
                    02:d1:1d:e3:aa:95:02:9c:ee:96:e7:c4:0c:e2:27:
                    71:68:32:88:63:cf:c0:f9:2b:75:4f:26:f3:41:46:
                    f2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5A:67:97:F8:8B:0C:E6:D2:29:D1:95:5C:D5:D2:AB:D9:51:62:4D
            X509v3 Authority Key Identifier:
                keyid:EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:62:94:9d:c0:cd:e8:b0:3b:b7:b9:bc:6c:72:d0:d2:7f:e3:
         4a:c8:1f:39:07:9b:94:97:e1:91:09:6e:51:3a:70:9b:b3:d0:
         5b:d6:59:e1:75:8c:41:b9:01:a6:bd:51:b6:00:02:98:d0:57:
         f5:f1:4a:dd:72:e3:61:52:d7:79:b2:4c:22:8d:b1:6b:8a:62:
         c0:ba:78:89:c2:8c:18:5c:47:e0:ad:22:bd:6c:c7:e1:a1:9a:
         d9:29:e7:49:57:17:b7:64:5b:bc:67:bb:47:6f:58:1c:26:c2:
         c9:f9:37:6e:7a:87:0c:92:1d:0c:09:eb:27:b1:cc:0f:7a:91:
         a9:da:2d:04:1e:05:eb:80:df:ea:9d:54:e4:a6:2f:1a:11:c4:
         4a:f4:13:f9:72:57:39:f9:c6:2c:92:96:43:fc:e7:fb:c3:13:
         5a:50:cf:e7:41:55:0e:da:b0:08:bd:4a:60:a1:d8:dd:a4:02:
         c3:04:42:66:10:51:88:b5:ee:ab:ff:7e:e0:a2:b9:13:43:c8:
         08:bd:15:92:67:3f:49:73:1b:85:da:2c:91:3d:59:5f:fe:4f:
         a0:55:02:93:3f:93:a1:28:af:f4:f3:e5:71:31:45:8d:e6:b1:
         1a:5b:a9:15:98:d7:c0:b3:0c:bf:95:50:20:d7:3c:00:95:e1:
         5c:c0:dc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 22:27:19 2025 by rpki-client