Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
File:                     1EeBPOUqgj6h78mg9JM8XTNT7is.mft (raw, json)
Hash identifier:          rVn5M4B72e/gzFEyVe0mT/vVON5XMhCeAnH0dF80Wcg=
Subject key identifier:   AC:97:0F:37:CB:3B:99:21:9F:2B:08:B6:C8:BD:17:50:20:2A:EA:7B
Authority key identifier: D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
Certificate issuer:       /CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Certificate serial:       01976C2B1E4485EB5443EDC9AD9641599B58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
Manifest number:          0CEE
Signing time:             Sat 14 Jun 2025 02:00:54 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:54 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:54 +0000
Files and hashes:         1: 1EeBPOUqgj6h78mg9JM8XTNT7is.crl (hash: 2W2QzNnlcTzKwcgDPeKfCmdxP+ZVEXICH3MX1WAar38=)
                          2: 6VURpuoGIEu-l_P4ZeBewDi5ITQ.roa (hash: 4B+IYvzd1z7mLmwV7sB69BtJr1xQnLEcg/11m55OmVA=)
                          3: SGD9M6mEugHCxM7uV2PsXdJ2hNI.roa (hash: LARKN5V/8dBxyk/X3NXKXQZvWRUhVkqxaNvzjumJGHs=)
                          4: sLZpvIMTgksZrvqormgvgok8KhA.roa (hash: F40TwnOKkG5HzR84w5cvXcd+kglYl0t+PxN2IvdlZDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:1e:44:85:eb:54:43:ed:c9:ad:96:41:59:9b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
        Validity
            Not Before: Jun 14 02:00:54 2025 GMT
            Not After : Jun 15 02:00:54 2025 GMT
        Subject: CN=ac970f37cb3b99219f2b08b6c8bd1750202aea7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:47:d4:71:8b:3c:8e:56:2c:bb:ca:2d:a8:
                    25:26:26:0b:f0:41:c6:90:fc:11:42:07:72:42:24:
                    a7:81:1d:63:91:f9:3b:b1:b1:48:3e:61:54:01:30:
                    29:8e:ec:a8:a8:99:c2:15:95:3a:ad:76:7b:56:bc:
                    6f:73:54:4a:d7:dc:ce:e3:5a:72:19:a3:c0:fa:08:
                    ce:48:c6:24:df:10:cc:aa:95:73:c7:a8:9d:86:a9:
                    38:8d:ac:85:03:dd:2e:1c:dc:d7:0e:d7:7b:c0:1c:
                    86:3c:e8:cf:1f:49:86:8d:97:8d:91:c5:24:e6:6a:
                    51:ed:21:d7:02:2b:f8:05:75:3c:20:1a:fb:cb:ce:
                    d0:e1:20:f5:0c:fb:b8:bd:48:91:4f:a6:f9:48:a0:
                    29:01:0c:ee:22:ea:1f:10:b6:0e:06:ef:5a:0f:74:
                    9d:ca:fc:ec:b2:31:a1:e5:d5:3b:f9:a3:3f:17:20:
                    1a:68:c7:b1:d5:05:73:ea:39:e3:c6:12:e7:29:eb:
                    32:5b:06:51:62:71:17:ff:46:ee:09:a3:de:cd:f3:
                    12:a7:27:55:4d:f2:e6:1c:5d:18:4a:29:50:ed:2d:
                    86:11:70:22:8e:3d:f8:ae:87:1e:fc:61:56:78:1f:
                    a5:42:82:a9:59:2e:98:cf:97:3f:4a:2b:27:3c:42:
                    2b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:97:0F:37:CB:3B:99:21:9F:2B:08:B6:C8:BD:17:50:20:2A:EA:7B
            X509v3 Authority Key Identifier:
                keyid:D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c0:b5:21:03:34:2c:b9:7d:92:aa:51:27:f6:63:05:df:2d:
         f7:90:28:05:68:a9:bc:bc:63:c3:8d:b4:03:73:1c:d4:b0:29:
         12:54:4e:af:8f:fd:16:bc:4d:f2:99:cd:3e:fa:59:c1:a9:08:
         f1:b9:9d:81:3a:e1:0b:2a:62:a6:fa:af:93:3d:f1:ba:0e:74:
         3a:89:9a:5b:07:bc:dc:e7:d0:b9:65:a9:7c:7a:84:1e:14:49:
         75:4a:4c:0f:32:51:89:aa:03:3b:9c:80:6a:8c:84:a2:4d:64:
         da:64:bc:e8:a0:93:1e:11:1e:8c:74:aa:9b:57:3a:46:cb:d1:
         77:a2:bf:d6:9a:ed:c1:0d:45:b9:2b:99:3e:4d:4d:48:a2:7d:
         1e:23:24:64:72:bd:59:92:29:59:7c:f1:32:ce:a1:8e:70:15:
         4f:72:56:36:06:0f:81:43:4b:35:08:a9:1a:f7:64:c8:63:8f:
         14:a3:c5:88:ff:3d:db:7e:7c:af:ff:98:28:60:1a:11:13:c9:
         d2:2a:f1:42:c3:c7:e4:51:fb:cd:51:f3:20:fd:31:f6:e4:54:
         c9:0c:7b:fd:02:67:cd:42:57:30:2c:6e:d3:63:bf:6b:62:9d:
         99:76:f1:49:25:f2:82:d3:55:d8:e6:df:ba:0e:4d:5f:87:7d:
         8f:fc:57:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:00 2025 by rpki-client