Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
File:                     ES0MTxbciSISn_YFDiNVYjF1ZeU.mft (raw, json)
Hash identifier:          Edc7zyeamTXGjU6UqMpO0HxPSDvbkxbKfc2kPjqqr/E=
Subject key identifier:   C8:B9:E8:57:76:3A:3E:86:C3:63:D2:D6:85:F3:1C:52:B3:B3:1C:3E
Authority key identifier: 11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
Certificate issuer:       /CN=112d0c4f16dc8922129ff6050e235562317565e5
Certificate serial:       01976D06C742230A902FBCE981FF3A399B2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 06:00:50 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:50 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:50 +0000
Files and hashes:         1: ES0MTxbciSISn_YFDiNVYjF1ZeU.crl (hash: hnxLDaQt5jazamRn9/eL/XLkbGk6+n4MSmQElvNwXlA=)
                          2: o9kVSX3gj3H9ZN8cW0Ym-IVcV44.roa (hash: lKG8mtPIe7S1JAZc980NZt3SRdrgtpPphzv++UEyF4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:c7:42:23:0a:90:2f:bc:e9:81:ff:3a:39:9b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112d0c4f16dc8922129ff6050e235562317565e5
        Validity
            Not Before: Jun 14 06:00:50 2025 GMT
            Not After : Jun 15 06:00:50 2025 GMT
        Subject: CN=c8b9e857763a3e86c363d2d685f31c52b3b31c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:39:76:be:c5:91:1d:7f:e4:38:e4:7e:d9:28:
                    cb:1e:ee:d4:00:3c:d3:7e:6c:74:62:79:6d:2a:f9:
                    00:ae:4c:16:13:ac:ab:60:0e:50:93:99:c2:36:8f:
                    91:d6:ca:1d:27:f4:1f:69:83:88:af:a4:07:c3:ac:
                    87:3c:77:63:84:16:a9:85:eb:dd:5d:71:d0:52:6f:
                    6c:59:aa:dd:13:5a:ee:ce:9b:94:a4:52:eb:49:80:
                    a7:a4:83:73:5f:46:82:35:58:16:c8:e7:04:47:83:
                    83:f7:b0:5d:1f:89:41:bb:bd:f8:ad:f2:d3:11:7a:
                    c2:5d:ee:ca:2a:e6:27:ce:79:e9:50:b5:7f:7f:9d:
                    b7:15:2d:bc:b0:0b:6d:d6:6e:76:0d:20:ea:7e:64:
                    0f:12:79:26:ce:49:fd:0b:2e:a1:99:15:25:91:22:
                    19:83:97:dc:25:fe:df:b3:22:45:da:32:eb:42:0e:
                    88:0e:e8:9d:62:06:a6:cd:15:15:2d:b0:c9:31:9e:
                    b1:b5:bd:62:a5:99:4f:cc:29:dd:81:b8:d2:72:36:
                    8d:1b:27:61:87:02:a9:1b:7d:f1:ee:e1:7c:39:57:
                    18:10:7d:2f:63:98:c9:f1:04:50:5b:42:ee:1e:3c:
                    f1:96:3b:3a:f2:b3:f9:f7:11:c4:31:94:d8:1e:6d:
                    c4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B9:E8:57:76:3A:3E:86:C3:63:D2:D6:85:F3:1C:52:B3:B3:1C:3E
            X509v3 Authority Key Identifier:
                keyid:11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:33:f0:ff:b9:57:49:32:1d:4c:75:a2:c8:d0:3d:90:86:dd:
         10:db:5c:a8:6f:23:97:5e:6d:b9:55:d7:63:b2:5c:00:bd:00:
         b0:68:1b:83:d3:8c:d8:c9:cb:80:f7:38:7b:9f:2e:f1:59:22:
         a0:66:1a:be:b4:c3:8c:3a:02:23:db:39:0c:7d:de:28:b7:67:
         f5:e1:42:df:46:d1:8a:01:b9:df:cd:d7:c0:2c:27:bb:99:1c:
         a7:2d:b1:0e:24:62:83:58:d3:f9:34:7c:5a:a1:8c:e6:d9:ab:
         e8:65:ef:9c:bf:a3:64:54:68:fe:6e:a4:1c:82:88:2d:51:04:
         36:69:da:c1:9e:c8:96:f6:d6:97:28:53:16:40:ce:43:22:94:
         8e:30:23:36:94:a6:f9:13:2f:27:8e:b4:59:f1:37:26:1f:36:
         bc:c0:e7:b4:27:3a:88:ff:38:ce:38:d7:08:77:f1:ae:ea:08:
         b8:19:78:66:f3:ca:c8:e3:71:96:12:c3:50:8c:e5:81:f6:26:
         f0:d0:dc:5f:f0:41:18:26:b8:5e:a4:28:7f:a1:f3:39:ba:53:
         90:30:46:8a:9a:6a:f9:f4:78:3d:f6:c5:18:64:73:2c:d5:89:
         3f:77:90:e5:06:b4:57:4c:82:c4:cd:25:97:4d:08:3a:4e:31:
         a7:e9:cd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:46:44 2025 by rpki-client