Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
File:                     E_8jyrp-AfaB5z36sXQ_9keN3O0.mft (raw, json)
Hash identifier:          JRkhd00s3cOi5xizS/rNXBuEc2OieZccWM4//M0s6Ec=
Subject key identifier:   DE:4F:43:85:F4:6E:45:7A:DA:A8:1C:51:3A:82:B2:31:F9:E4:4D:93
Authority key identifier: 13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED
Certificate issuer:       /CN=13ff23caba7e01f681e73dfab1743ff6478ddced
Certificate serial:       019776AE64405096CEDA405B3C6E66A3F7C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
Manifest number:          0305
Signing time:             Mon 16 Jun 2025 03:00:29 +0000
Manifest this update:     Mon 16 Jun 2025 03:00:29 +0000
Manifest next update:     Tue 17 Jun 2025 03:00:29 +0000
Files and hashes:         1: E_8jyrp-AfaB5z36sXQ_9keN3O0.crl (hash: 7w+z065YtbiZcMK+hRNOJT2Ds2USF0fbEKtCWnnid88=)
                          2: lJDuBJQ2g-pa95d14zb3BmzZ6y0.roa (hash: PkfDtleZ8MxNB+BT5gtlIpBNxKZcU3c8R+9W8avuRDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:ae:64:40:50:96:ce:da:40:5b:3c:6e:66:a3:f7:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ff23caba7e01f681e73dfab1743ff6478ddced
        Validity
            Not Before: Jun 16 03:00:29 2025 GMT
            Not After : Jun 17 03:00:29 2025 GMT
        Subject: CN=de4f4385f46e457adaa81c513a82b231f9e44d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:82:36:33:a2:d0:9d:d5:64:31:ed:6b:90:
                    a2:43:c6:bb:40:64:87:f4:c4:87:a1:13:0d:4e:7c:
                    63:f6:ae:55:3f:b7:70:1a:0d:8a:bc:c7:4d:fa:3e:
                    d6:ba:44:b1:a3:04:9b:8d:e1:9b:07:76:c2:8a:d8:
                    1e:ee:6f:2b:b3:83:c8:dd:9e:09:5c:c0:ed:a6:96:
                    76:41:0c:b4:7d:a9:cf:2b:bc:4f:ed:12:51:a5:db:
                    93:4c:11:35:da:7d:45:16:27:9f:06:31:0b:45:2e:
                    32:73:ef:10:b7:a6:8f:24:f6:93:74:13:8c:d5:3e:
                    89:49:27:0a:07:e9:db:53:a2:83:b7:ea:6c:a0:3e:
                    8a:cb:dd:27:da:d1:73:df:18:46:a2:bc:e6:34:a0:
                    e0:42:76:1b:30:6b:18:ee:d3:54:72:7c:ad:0f:c3:
                    05:80:a1:45:1e:2f:76:e7:72:77:9f:8b:a5:6b:36:
                    b8:ed:b2:13:d7:02:8c:d6:9a:e2:5a:a3:e0:97:9b:
                    6c:ed:63:0d:1f:81:1a:1f:e3:a1:bd:78:13:d1:56:
                    c0:53:c2:23:b2:61:9d:a1:14:84:4c:5b:c7:24:59:
                    b3:68:34:4e:ca:bc:0d:8d:46:1b:6a:0f:ab:99:51:
                    93:a7:33:96:cd:e9:63:90:06:8e:53:e1:3f:a8:07:
                    24:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4F:43:85:F4:6E:45:7A:DA:A8:1C:51:3A:82:B2:31:F9:E4:4D:93
            X509v3 Authority Key Identifier:
                keyid:13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:4b:50:0c:15:3e:e3:c1:2b:5f:e1:5c:23:92:cb:9c:a8:8e:
         db:e4:82:da:1b:8f:b1:a2:b6:22:3b:69:d9:cd:b0:54:a5:60:
         58:79:b7:96:32:10:5e:d8:04:64:7d:09:3c:63:50:8c:59:ec:
         c7:cd:54:49:a0:af:1c:e7:35:91:dc:4c:97:5a:8f:d0:b2:6c:
         03:9f:0c:17:2b:eb:11:5d:b6:16:9b:87:46:be:b8:c0:33:a0:
         13:1c:2c:89:cd:bd:b6:8c:40:82:8d:ad:f3:d0:5c:02:41:30:
         b1:e5:0b:58:50:62:29:45:70:24:b9:3a:6a:a5:73:76:14:ba:
         d6:a9:8e:c1:b2:60:79:41:52:33:bf:c0:70:5b:76:cd:a0:10:
         d4:73:3a:e0:89:85:6e:ff:0b:55:e8:0a:0c:eb:c4:ef:a1:42:
         6d:2e:ed:24:0b:7f:40:8e:b0:62:28:00:82:36:1f:ec:c8:e0:
         7d:7c:a3:6a:3c:87:0e:50:c2:9c:3d:11:3e:81:b9:d9:95:13:
         23:60:c2:e8:c8:9d:6a:3b:1d:e0:b8:ee:85:83:ed:35:da:67:
         87:e4:69:d8:87:87:67:58:a0:75:94:50:82:db:2c:9c:97:6d:
         1f:72:a7:e7:10:78:9e:42:b7:d0:32:87:1e:e0:ea:01:be:11:
         3c:1f:90:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:14:38 2025 by rpki-client