Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
File:                     n78C8E7EMIy1tgeL0GoXywDYM2k.mft (raw, json)
Hash identifier:          jISOYThNpBV9/kazZri/PeOnbGij4pD3xf7az3P6YQo=
Subject key identifier:   A1:48:99:78:5E:33:2F:ED:04:4D:8D:F4:CD:8A:BA:1D:FE:3A:F3:73
Authority key identifier: 9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69
Certificate issuer:       /CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369
Certificate serial:       01976997D5E1737011DE2BF2F5599CA7BF2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
Manifest number:          1C
Signing time:             Fri 13 Jun 2025 14:00:47 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:47 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:47 +0000
Files and hashes:         1: lB6tM26XvybAjC_i9gyukbY90Gs.roa (hash: QCUB0nbnI7vfbQcfu12QO8f17dboTNQ2oQD6KvaVOOo=)
                          2: n78C8E7EMIy1tgeL0GoXywDYM2k.crl (hash: S1IexrDzaCHFQul9e9PDgntiQrHFCuCtiHAKs97CTyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:d5:e1:73:70:11:de:2b:f2:f5:59:9c:a7:bf:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369
        Validity
            Not Before: Jun 13 14:00:47 2025 GMT
            Not After : Jun 14 14:00:47 2025 GMT
        Subject: CN=a14899785e332fed044d8df4cd8aba1dfe3af373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c7:c8:1b:63:c1:be:52:90:87:f4:e4:a9:3f:
                    81:49:b2:10:1a:85:08:a8:06:f5:80:d1:1e:f0:e9:
                    2d:5b:dd:b9:ba:a2:25:1f:b5:e4:1a:3e:7b:82:94:
                    e5:36:41:6b:18:e4:78:92:10:4b:ef:6f:96:5d:f5:
                    1d:26:85:33:e6:16:c7:b3:a6:1a:65:cb:31:9b:b7:
                    41:c8:46:8d:c7:26:1a:59:b4:fe:db:e4:3e:30:9e:
                    42:11:af:73:bc:b5:d1:af:95:c3:18:91:b5:6f:f1:
                    ad:8b:6b:fa:78:3d:53:62:84:42:a2:5b:80:98:38:
                    b5:ff:6c:b0:68:76:6b:b3:1b:12:f5:ae:f6:29:cb:
                    73:3d:bd:59:ab:b0:a1:eb:0b:53:a1:54:b3:12:05:
                    08:c7:3c:88:a4:78:35:92:53:42:3f:79:b9:06:bb:
                    99:3b:58:8b:0a:2b:9c:8a:f1:1a:76:3e:3c:e3:bf:
                    ca:74:d4:7c:14:25:d9:ec:8f:66:58:93:cc:9f:12:
                    b7:43:a9:4d:67:23:ae:28:35:45:39:89:d0:a1:86:
                    a2:c8:9f:ec:06:cd:ce:67:01:60:87:55:8e:41:15:
                    2e:57:18:15:40:c7:d9:df:64:6d:02:27:cd:f9:ae:
                    9c:ee:65:7b:df:a3:d5:c6:c6:1b:8e:07:d9:2f:b1:
                    fd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:48:99:78:5E:33:2F:ED:04:4D:8D:F4:CD:8A:BA:1D:FE:3A:F3:73
            X509v3 Authority Key Identifier:
                keyid:9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:fc:5f:90:2d:0b:7e:92:7f:9d:8b:58:bf:2b:15:02:1b:e8:
         18:b4:01:af:e5:dd:91:94:86:8f:67:dd:33:2c:48:1a:97:55:
         ed:0e:0d:0f:9b:5d:a6:f4:60:6d:4f:ed:3c:15:a4:c1:00:42:
         d8:26:c4:36:44:d3:88:9c:ca:b0:45:f1:df:22:85:0d:7c:d1:
         cd:62:e8:f2:a9:6f:92:5e:10:9e:86:45:36:bc:40:55:0f:93:
         04:69:ad:33:80:5b:37:67:78:bd:15:f4:33:51:19:39:74:15:
         c0:c9:c8:a4:c8:2b:2c:ef:83:b9:3e:09:f9:fd:5f:14:ae:30:
         12:2b:4a:93:db:75:bc:21:7d:aa:8d:59:e9:7a:fe:04:35:18:
         48:28:b0:4b:52:72:f6:dc:a3:e4:3c:f8:19:3b:bc:30:33:af:
         a9:aa:be:d2:a1:36:73:03:00:1e:3f:67:c0:1f:94:98:b0:45:
         47:69:e4:6f:7b:86:f7:b5:f6:0e:a6:1a:cb:1f:1a:e0:f3:b4:
         28:3d:fe:ec:9c:27:20:40:7f:68:45:de:3b:cb:9a:96:d1:14:
         63:01:22:c1:e2:5e:82:9d:02:aa:0f:2f:68:90:99:ad:5a:ba:
         47:23:26:9b:7c:4e:8b:52:87:4e:42:ec:dd:74:a5:19:1e:00:
         77:ca:0e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:15:37 2025 by rpki-client