Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
File:                     eQjeIC4XTLI3Rty97qip1ElYABk.mft (raw, json)
Hash identifier:          8CRs0v4kum8hEhwFZvIfHuinjuvc8+KNVmC/RSvH+nE=
Subject key identifier:   C6:B0:8E:D8:15:5E:8B:1E:6B:D8:3A:07:80:EF:FF:CA:5A:43:3B:1F
Authority key identifier: 79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
Certificate issuer:       /CN=7908de202e174cb23746dcbdeea8a9d449580019
Certificate serial:       01976A058E3D88C4ABCE07073AE63F4A4BF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
Manifest number:          129E
Signing time:             Fri 13 Jun 2025 16:00:38 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:38 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:38 +0000
Files and hashes:         1: 8reTSTj3AwMaAQKMOvOjjWzjRZU.roa (hash: l5w2EwX064H88HHHHAQh4ec4rfO96cZ19m2IwMvLv2c=)
                          2: eQjeIC4XTLI3Rty97qip1ElYABk.crl (hash: WrrOsB7AnM535Rtt6KJ7XIu1bXxZm88ijW+RSt4kemA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:8e:3d:88:c4:ab:ce:07:07:3a:e6:3f:4a:4b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7908de202e174cb23746dcbdeea8a9d449580019
        Validity
            Not Before: Jun 13 16:00:38 2025 GMT
            Not After : Jun 14 16:00:38 2025 GMT
        Subject: CN=c6b08ed8155e8b1e6bd83a0780efffca5a433b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:03:9c:49:2a:39:7e:14:45:3c:b8:ad:14:ea:
                    03:46:f1:c4:6a:29:33:a1:b9:e2:f3:3b:e8:36:b0:
                    a4:7e:8e:77:0a:4c:0f:13:5f:d2:ce:9a:ef:f7:32:
                    99:f2:97:e5:ce:54:a9:fb:6d:4a:59:4b:48:b0:26:
                    7b:fd:8e:1d:bf:11:32:35:ef:36:a3:c5:49:ac:3b:
                    8c:9c:f9:84:e8:2f:c0:56:59:41:84:8e:c1:ac:a4:
                    81:65:d9:4b:9d:83:27:2d:88:16:e9:db:08:c0:ca:
                    a5:83:5f:c3:70:ba:64:77:c4:23:d5:0a:75:2e:9f:
                    43:89:d8:be:dd:23:84:f9:50:ea:19:f2:58:13:32:
                    c1:31:7b:e9:5b:89:86:08:f4:52:78:d4:8b:6d:24:
                    b1:7a:dd:58:70:8a:4c:84:da:0d:3d:6a:33:ba:51:
                    65:a4:08:ac:33:45:db:c6:69:7d:69:a5:42:94:bc:
                    d8:3d:af:1a:9b:20:1f:8f:17:77:e0:00:f0:08:33:
                    c6:b7:16:68:24:94:b2:3d:84:c2:e4:d1:99:88:38:
                    ef:da:59:af:a6:90:ed:8d:da:f0:17:5e:1c:39:83:
                    c7:fe:d7:a8:fe:da:d1:8a:2b:8d:4b:46:38:2c:a1:
                    24:bf:d2:87:f9:56:bc:4d:8d:ec:9a:46:24:b0:cf:
                    8c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B0:8E:D8:15:5E:8B:1E:6B:D8:3A:07:80:EF:FF:CA:5A:43:3B:1F
            X509v3 Authority Key Identifier:
                keyid:79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:42:6c:f1:f3:73:6d:30:44:83:d5:3a:9f:53:c7:7f:7c:4b:
         d3:7d:c3:ec:60:1e:c8:39:df:a5:9e:d6:87:83:4c:47:80:d6:
         c7:40:4e:37:fd:60:0b:24:fe:af:e5:96:09:15:f5:c6:2c:fd:
         3e:48:0f:30:6e:b6:5d:22:32:85:4c:99:1f:b3:1f:fa:2b:a6:
         e0:13:84:a7:8d:4d:2c:74:14:f9:5d:60:4c:ce:c4:aa:2c:ba:
         e0:a3:4f:6b:3e:65:89:7b:d0:07:92:87:8b:8f:53:9c:07:ed:
         7c:19:a8:ec:fe:8e:4f:d9:af:78:bb:fe:33:48:d8:28:77:48:
         22:4a:a0:26:7e:3e:32:19:e3:ac:bd:92:3c:9c:f7:f4:f8:a6:
         7c:eb:5f:e2:12:74:42:73:f4:63:e3:5d:ae:8e:67:c0:55:6f:
         fe:86:63:09:b7:5b:4f:78:c9:ec:a3:63:9d:20:f9:e1:52:59:
         03:eb:ac:2b:b2:88:12:54:9a:c4:a4:37:31:37:17:1b:ff:ee:
         4d:64:cf:7f:8f:14:de:88:d7:2c:ac:c8:9e:04:c4:60:20:01:
         59:2c:06:ab:5b:10:f7:e0:0d:35:da:c0:61:2d:fe:08:36:8f:
         7b:6f:da:6a:88:2b:71:fe:2d:6f:a9:ce:80:52:93:28:22:01:
         65:79:b8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:23 2025 by rpki-client