Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft
File:                     fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft (raw, json)
Hash identifier:          lhd4gKpkqMAqjZjvELMSzhqsA7sh8x+WIrDUOVeMcZ8=
Subject key identifier:   E1:30:2E:2E:D9:05:E6:8D:71:26:A6:9A:EC:A7:9C:16:F3:41:01:DD
Authority key identifier: 7C:BB:A8:46:B6:FE:06:78:C9:D4:B7:D7:DB:11:E6:AE:B8:6E:59:42
Certificate issuer:       /CN=7cbba846b6fe0678c9d4b7d7db11e6aeb86e5942
Certificate serial:       019769CF2622D598042913F6F681246D3BA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft
Manifest number:          0456
Signing time:             Fri 13 Jun 2025 15:01:12 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:12 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:12 +0000
Files and hashes:         1: T-Ck5sxxTDjM2BnuARX2KE4vMXo.roa (hash: iEhvmxCDWE4QgoN0KDVC0nYZp80ZbJ35iTC3GWKtUXU=)
                          2: fLuoRrb-BnjJ1LfX2xHmrrhuWUI.crl (hash: edBxqswpf2rsZEfwUOZiOlfmU040OQBa/Ddoq0iMMq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:cf:26:22:d5:98:04:29:13:f6:f6:81:24:6d:3b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cbba846b6fe0678c9d4b7d7db11e6aeb86e5942
        Validity
            Not Before: Jun 13 15:01:12 2025 GMT
            Not After : Jun 14 15:01:12 2025 GMT
        Subject: CN=e1302e2ed905e68d7126a69aeca79c16f34101dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:66:75:a0:ef:ee:5f:92:a1:59:44:ce:0e:4c:
                    04:90:ed:a6:5d:3a:fb:e9:30:4d:fb:2f:00:f5:79:
                    ba:6a:63:4f:d8:5a:f2:a4:24:de:7f:00:f7:72:51:
                    af:f2:81:1c:b8:e6:45:f9:6d:30:d0:02:08:9c:ad:
                    6d:b7:38:aa:7f:3a:ba:79:0d:61:e2:42:b1:8d:af:
                    97:ae:6a:77:4c:63:89:a1:30:e9:09:b1:53:1b:6c:
                    4f:1d:b6:8e:85:62:12:98:70:e4:d7:7c:3c:cd:39:
                    93:fa:e2:97:49:11:05:83:1e:bf:9b:b9:7b:89:91:
                    ef:16:ab:d8:75:3c:da:a4:8e:b9:68:72:f0:8f:bf:
                    2e:60:8b:df:f5:cf:98:37:ab:11:c2:4d:8f:d9:e0:
                    3f:b7:79:fb:6b:10:a2:7f:7b:87:10:45:1e:a1:4d:
                    04:61:55:be:2b:97:6e:ca:10:64:58:38:60:52:aa:
                    27:76:73:8f:e7:d4:35:2a:cf:f9:63:a6:79:5c:01:
                    3d:03:4f:e3:12:02:a2:98:a2:73:21:21:c5:12:db:
                    ad:61:ff:a4:0f:fd:c0:17:3f:e1:b1:21:1e:18:23:
                    11:18:24:62:ca:30:13:62:4d:e2:a0:6b:77:59:ee:
                    b0:e9:e9:3f:7a:d5:0b:77:b7:96:af:08:92:54:0f:
                    6c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:30:2E:2E:D9:05:E6:8D:71:26:A6:9A:EC:A7:9C:16:F3:41:01:DD
            X509v3 Authority Key Identifier:
                keyid:7C:BB:A8:46:B6:FE:06:78:C9:D4:B7:D7:DB:11:E6:AE:B8:6E:59:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:2c:35:24:77:e0:ee:a2:0b:76:3f:3f:f6:61:1d:3f:eb:60:
         af:44:94:eb:ed:76:a3:7d:bc:40:d1:5c:c0:54:73:4f:64:d3:
         2d:3c:16:4c:36:7f:e3:2d:40:9b:6c:10:8d:7a:05:d9:fb:2a:
         5f:86:ec:b3:c8:9d:c2:1a:51:2b:ae:60:2b:92:17:55:c0:4a:
         6d:8a:fc:38:01:3f:57:f9:9c:83:60:99:e6:5e:ca:ac:0b:8e:
         8a:f2:12:56:4b:e7:73:94:cc:0c:24:ab:f5:98:c1:8d:60:48:
         35:b9:83:d6:48:8d:d9:26:d1:23:35:71:87:33:d2:42:25:75:
         04:90:91:75:9c:06:66:2f:84:a0:ea:ff:35:58:69:aa:a8:e1:
         78:92:ac:a1:bb:5e:94:46:6a:db:30:10:60:cc:fc:27:f8:97:
         b0:1a:a7:b6:83:03:9d:cd:62:b8:1c:bc:11:e1:0f:b8:bc:25:
         78:98:0b:39:bf:5a:dd:10:a9:26:d8:79:6c:bb:69:be:e2:74:
         4c:55:cf:49:ec:1b:a3:79:86:05:ea:71:8f:40:67:b6:8d:56:
         9c:64:49:67:b6:61:49:d1:a1:3c:aa:55:e5:49:31:b2:cf:ca:
         76:e8:0d:47:43:92:73:b0:8e:a6:be:9f:04:de:9b:ca:10:f1:
         bc:1e:8e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:05 2025 by rpki-client