Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
File:                     ESmtAUBy3mYXQ4-xr75BotvcgRw.mft (raw, json)
Hash identifier:          yJfVlvDbqdDqEEaRo0TlNk4y/xCiPqVB8le2/zRvvkc=
Subject key identifier:   F8:E7:C8:BA:50:8D:11:0C:F0:58:22:C3:3E:E3:AE:F8:35:DB:CC:22
Authority key identifier: 11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
Certificate issuer:       /CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Certificate serial:       019769CE66D19DB6A6BDDC93D88F1F089E93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
Manifest number:          0D3A
Signing time:             Fri 13 Jun 2025 15:00:23 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:23 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:23 +0000
Files and hashes:         1: ESmtAUBy3mYXQ4-xr75BotvcgRw.crl (hash: W0n67oVz/JESRNBUz0ZiKti5FTLhdFr9LHxVuoGfHgQ=)
                          2: lTwE90XrCNGA5eJTFjnSjOK1bSM.roa (hash: /sO0aTlcuRH7YD2SVxbEfIzYX6MelmZ8Ycirgk+wG1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:66:d1:9d:b6:a6:bd:dc:93:d8:8f:1f:08:9e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1129ad014072de6617438fb1afbe41a2dbdc811c
        Validity
            Not Before: Jun 13 15:00:23 2025 GMT
            Not After : Jun 14 15:00:23 2025 GMT
        Subject: CN=f8e7c8ba508d110cf05822c33ee3aef835dbcc22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e7:43:b6:6b:b9:29:25:b8:cf:12:f7:02:fe:
                    40:47:b2:81:74:77:3d:ea:de:6a:31:30:5a:20:ff:
                    39:41:20:49:bf:3e:cd:07:fe:a2:ba:20:68:42:7b:
                    bf:65:3b:37:e8:16:10:c7:e7:2b:c5:c4:b8:51:20:
                    ea:19:23:bb:ca:31:71:7f:3c:bd:ad:50:b4:08:53:
                    83:58:31:ac:3d:7e:f7:54:55:30:c4:f5:02:5c:42:
                    d9:a9:f0:32:fa:76:8b:78:3b:e4:68:e2:29:89:48:
                    27:ab:a9:49:3b:9b:f7:11:3d:13:02:85:13:0a:65:
                    f4:e2:05:1d:92:fb:30:58:41:48:7a:31:5d:53:54:
                    73:21:30:4b:f6:6c:70:ea:95:ad:a3:1e:54:db:ea:
                    97:49:41:cd:7a:00:a2:12:9f:c7:f7:9f:51:34:59:
                    00:3f:05:bd:e4:ff:1f:d4:e6:b3:6c:53:eb:28:1f:
                    b9:5e:d3:f9:cb:ad:97:b0:50:00:14:a0:1e:93:c3:
                    30:d1:de:6c:fd:43:ee:d5:d7:fa:5f:fb:e4:a5:29:
                    4a:36:15:ba:80:95:59:8d:60:69:72:fd:6e:ee:cf:
                    53:29:a6:41:00:e2:07:91:ab:db:23:72:28:60:f8:
                    65:8c:63:77:99:d4:7a:76:c4:70:90:d8:eb:8c:d3:
                    1e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E7:C8:BA:50:8D:11:0C:F0:58:22:C3:3E:E3:AE:F8:35:DB:CC:22
            X509v3 Authority Key Identifier:
                keyid:11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:28:0d:6f:99:25:b7:9c:31:68:d9:34:6f:9f:a9:a7:9d:d8:
         ee:c8:9d:34:6e:fc:d2:c1:ca:a1:47:98:cc:b0:0e:c5:db:c8:
         01:44:2b:75:b1:8d:ae:a3:81:c4:f8:5f:2b:b9:ab:61:7f:50:
         93:ce:ad:09:77:c2:a4:4d:14:ce:65:dd:ba:a0:13:32:ca:99:
         7d:14:af:c0:54:74:c1:f2:32:2e:77:bf:51:97:a5:f0:c9:3b:
         94:de:8e:c3:9c:79:6f:a5:4b:76:c0:98:27:a7:f6:c6:63:bf:
         c9:3b:de:91:72:bc:0b:ec:6b:7e:ee:52:61:b3:aa:98:e9:eb:
         d4:dc:38:2c:93:02:47:df:f3:36:30:95:03:36:6d:f3:e6:ac:
         5b:df:ef:b2:78:31:39:46:92:44:9c:b6:8d:42:66:79:ed:41:
         36:75:e1:14:5d:5b:26:56:5b:24:ca:ac:3d:4a:0f:04:1a:36:
         17:a7:11:fd:52:0f:df:a6:79:45:bb:81:fe:a2:36:96:de:0d:
         5f:2b:87:b4:63:21:22:59:6b:ea:63:49:01:f6:33:a0:72:78:
         42:0e:84:b3:61:a0:47:cc:31:d9:90:ca:36:fa:1d:a7:d9:af:
         45:88:95:b7:88:15:eb:9c:bf:7a:c2:d0:b2:51:6e:d6:97:26:
         8c:59:6d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:42 2025 by rpki-client