Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
File:                     kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft (raw, json)
Hash identifier:          x5DlzQNcSQZK2Xsr4d9Nj0zYGyamWadnBwMmIwwssUs=
Subject key identifier:   92:8E:00:0D:9F:9F:EF:15:D8:E3:BB:E0:18:BF:90:5D:3C:BC:6A:7B
Authority key identifier: 90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
Certificate issuer:       /CN=9087833e025b2320f9053a103ba61de52eab2afb
Certificate serial:       01976F9994A6AA0BF679EC0BAD6B7BC897AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
Manifest number:          053B
Signing time:             Sat 14 Jun 2025 18:00:25 +0000
Manifest this update:     Sat 14 Jun 2025 18:00:25 +0000
Manifest next update:     Sun 15 Jun 2025 18:00:25 +0000
Files and hashes:         1: Sl6Vo_wPwtgiIFIYMqrbSQblXKc.roa (hash: l8tp4Qke8V/squeIomyLOU/9sV5KVMqfblcX8Rj/Ujc=)
                          2: kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl (hash: ZclqLXUCfsf0X0TONt0SW8nHrcseve4LqzD0AZofSco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:99:94:a6:aa:0b:f6:79:ec:0b:ad:6b:7b:c8:97:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9087833e025b2320f9053a103ba61de52eab2afb
        Validity
            Not Before: Jun 14 18:00:25 2025 GMT
            Not After : Jun 15 18:00:25 2025 GMT
        Subject: CN=928e000d9f9fef15d8e3bbe018bf905d3cbc6a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:0b:bd:67:4b:7d:c4:6b:e1:d3:2e:9e:9f:
                    9c:dc:b6:71:5a:43:4a:d2:26:4b:03:4e:49:2c:3d:
                    17:20:c3:18:38:c5:39:d1:cd:a1:71:88:69:dc:87:
                    e9:59:d9:fc:69:4d:0f:68:69:01:e7:73:fd:dc:0b:
                    bc:8d:c7:8f:05:bf:b3:0b:f8:27:1e:b5:46:e6:ec:
                    1c:9b:c7:29:be:6a:d9:20:1d:d0:e1:5b:0f:a4:b4:
                    3e:d2:7e:66:e1:b5:3b:84:17:da:fd:99:85:0a:d5:
                    51:5c:8e:ea:9e:48:37:a4:db:32:2d:45:b0:e7:9a:
                    79:8f:ff:17:70:1c:da:50:7d:e3:6b:08:85:02:c5:
                    3a:fb:f5:59:67:dc:09:99:1b:b9:09:46:b5:67:c2:
                    50:30:b9:71:d5:0b:f8:e4:15:d4:2b:67:6f:96:49:
                    d5:eb:07:2d:cd:cd:c7:06:cd:fc:49:37:07:f5:68:
                    ea:56:bc:28:65:8b:c3:9d:d8:e1:21:18:9a:f3:57:
                    60:5c:2f:f6:13:34:67:b2:09:3d:f6:f7:58:d6:9c:
                    7a:bd:8d:1f:0a:3a:c9:67:b8:c7:e3:0d:1a:35:40:
                    95:ed:8c:1a:3f:26:2c:3c:ef:80:a0:a2:fe:c1:1c:
                    86:a1:de:bb:aa:45:64:0f:a4:71:c8:87:2b:d0:13:
                    72:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8E:00:0D:9F:9F:EF:15:D8:E3:BB:E0:18:BF:90:5D:3C:BC:6A:7B
            X509v3 Authority Key Identifier:
                keyid:90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:49:2c:36:a6:78:16:6a:40:fa:bd:29:35:a9:c9:ac:dc:a8:
         b1:4e:dc:52:90:f8:47:7a:12:23:5e:a7:00:a3:95:9e:f1:78:
         f2:57:b4:69:44:71:5b:87:50:15:d0:8f:0b:22:76:a6:83:e4:
         f8:07:6d:cc:e3:80:30:ec:a5:60:33:a0:5c:82:19:17:9f:d3:
         26:ff:01:11:36:9f:c9:30:3a:57:98:ab:76:25:9c:a7:b6:61:
         95:87:20:91:73:d7:84:fd:a9:ea:5d:c2:4a:68:6a:4f:e3:5c:
         0c:0c:2a:11:3b:83:c1:e1:ec:a9:6b:7d:48:73:ab:b7:38:2e:
         9d:2a:67:68:93:db:3a:f5:e3:a5:c1:1d:a4:44:a1:7c:a2:9a:
         7f:06:df:d2:8d:e5:2b:89:d4:26:3a:ba:56:b8:89:2e:74:08:
         04:85:76:0a:d7:84:06:3a:ce:0e:e9:bd:0e:ff:ee:c8:a0:c7:
         ba:d9:11:66:bb:ea:fa:4e:65:50:0d:c8:fc:1f:de:6e:b3:9e:
         ff:89:f8:9f:0c:c9:df:75:17:9b:14:c5:c1:cb:8a:05:06:36:
         c9:13:97:2d:bb:44:a5:0e:26:f0:b8:cd:6e:18:82:a1:85:15:
         0e:fd:5e:8b:71:1f:d4:4d:f3:ce:d2:01:fb:27:b2:5d:23:02:
         d3:9d:1a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:11:01 2025 by rpki-client