Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
File:                     40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json)
Hash identifier:          VxpDi30DXjzCHBzw7gbyysUmqxb4oU2J14GqfQbUxtA=
Subject key identifier:   78:F3:7C:EF:A6:98:45:47:D5:10:F3:F3:B7:EE:6A:F3:6A:07:F1:67
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Certificate issuer:       /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial:       019788EBDE06181E99AB732A1A65076185A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
Manifest number:          0E28
Signing time:             Thu 19 Jun 2025 16:00:48 +0000
Manifest this update:     Thu 19 Jun 2025 16:00:48 +0000
Manifest next update:     Fri 20 Jun 2025 16:00:48 +0000
Files and hashes:         1: 13zsYUD0hA67z1BODvjquGKoT_E.roa (hash: MKw8FhdsNVau1tjrdAX7ReUxGObo82luQsljT5owYXc=)
                          2: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: SHmeHXVOehdtJLCJJzG+OTjf/OPydruceU3vt/ePApA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 15:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:88:eb:de:06:18:1e:99:ab:73:2a:1a:65:07:61:85:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
        Validity
            Not Before: Jun 19 16:00:48 2025 GMT
            Not After : Jun 20 16:00:48 2025 GMT
        Subject: CN=78f37cefa6984547d510f3f3b7ee6af36a07f167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:6d:53:74:cb:bf:c0:42:14:13:19:ac:24:
                    3e:0b:1a:e1:58:85:54:f5:29:33:19:40:8b:f6:55:
                    10:91:8d:98:79:87:ab:3b:61:20:a0:87:55:38:b9:
                    97:ce:32:4a:ee:26:d7:17:ee:6a:ae:42:04:53:16:
                    02:94:64:33:21:f3:fe:3c:6d:b6:ba:ae:94:fa:f8:
                    c8:af:ce:e1:2c:da:11:af:f5:64:03:9b:cb:22:f9:
                    01:1c:2a:79:eb:d3:5b:dd:4a:9c:74:5b:2b:ae:10:
                    ff:92:67:eb:c6:1c:21:a7:01:7e:73:fc:92:24:35:
                    e6:fa:eb:71:da:a8:d9:5f:d7:5a:1a:2a:df:10:be:
                    1b:be:c9:c7:db:70:68:7e:45:eb:cb:ab:41:7f:6f:
                    51:09:e4:df:5e:c3:98:02:b1:ee:74:57:cb:9e:c1:
                    d7:bc:f8:15:dd:e5:c5:3f:7b:00:c6:79:a2:8b:48:
                    47:15:3d:88:f4:1f:7a:4f:49:55:62:4f:7f:59:77:
                    7f:55:d8:07:f6:da:e9:f5:9e:01:1b:f8:cd:cd:61:
                    63:58:92:79:45:4b:4d:de:19:f3:bf:cf:47:b8:26:
                    dc:ee:cd:14:90:f5:67:2b:07:24:a5:93:77:71:ab:
                    5b:e1:93:36:27:8f:ba:19:00:f4:e9:e0:53:04:a6:
                    9d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F3:7C:EF:A6:98:45:47:D5:10:F3:F3:B7:EE:6A:F3:6A:07:F1:67
            X509v3 Authority Key Identifier:
                keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f1:28:1b:7e:b7:20:d4:01:af:0a:b1:4d:db:fb:ab:74:19:
         ef:c9:b2:5d:d5:27:fa:4a:2a:f9:22:66:92:78:e6:f2:46:04:
         47:7e:75:1f:3d:c8:d1:b9:27:bf:b3:97:98:44:c2:35:d2:ae:
         e5:5b:dd:72:51:45:1a:5f:f5:64:2d:29:04:ea:5a:b5:f6:cf:
         a5:ad:b3:d6:3a:2e:92:ab:9f:f4:47:c2:e2:d8:d1:e6:ed:b2:
         2b:12:47:d6:99:e3:48:65:5a:d0:11:0d:88:76:37:49:92:ef:
         37:ab:d8:da:f3:fd:26:d6:42:60:e2:71:45:3b:07:12:0c:f4:
         6b:5f:14:61:d4:7e:2a:17:5c:c2:ee:6b:93:00:fe:c2:88:d3:
         31:9b:be:3c:e5:30:05:b4:86:8c:25:db:87:94:28:6d:60:a5:
         fd:42:d3:cb:9e:48:22:f7:ae:65:ad:4f:de:69:77:7a:60:82:
         d7:0a:f3:84:b9:da:50:09:5e:50:c3:83:b1:ee:c5:d6:95:b2:
         29:e6:09:76:91:a9:36:88:22:11:02:20:fb:ea:da:23:f3:9a:
         e4:f8:ed:06:b9:69:3a:29:12:ba:9c:65:0e:a9:0c:68:33:2e:
         9b:87:fe:c0:95:59:04:11:f2:36:82:f2:87:13:30:ce:dc:66:
         e5:87:45:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 22:37:07 2025 by rpki-client