Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
File:                     65M6GrHHFeCzssf_oOEDhFYU03s.mft (raw, json)
Hash identifier:          5+7MXU5dCXZe2rgUyBzoq3X0h46lC1ZDpVcyz3lhR4w=
Subject key identifier:   0D:3A:C7:F9:BF:86:AE:5A:AF:60:25:A5:B2:B5:89:FA:5F:18:33:7B
Authority key identifier: EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B
Certificate issuer:       /CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
Certificate serial:       019771F5FF1A5D800F2F7AF11F2FA8678AAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
Manifest number:          041D
Signing time:             Sun 15 Jun 2025 05:00:36 +0000
Manifest this update:     Sun 15 Jun 2025 05:00:36 +0000
Manifest next update:     Mon 16 Jun 2025 05:00:36 +0000
Files and hashes:         1: 65M6GrHHFeCzssf_oOEDhFYU03s.crl (hash: YUZNhfzkm4QMCcZNeuN2W4vEI+hNdoz4uMrXQQwNAxc=)
                          2: UQAL-JJc9xbj3dvWQx-rKxJywfk.roa (hash: arBBklCXAnQ+7dDU+siDZljmex4Eu/z9+wzjqqM7ap4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:f5:ff:1a:5d:80:0f:2f:7a:f1:1f:2f:a8:67:8a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
        Validity
            Not Before: Jun 15 05:00:36 2025 GMT
            Not After : Jun 16 05:00:36 2025 GMT
        Subject: CN=0d3ac7f9bf86ae5aaf6025a5b2b589fa5f18337b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ff:1a:db:52:5e:a6:41:7d:45:9e:73:11:d2:
                    ee:7a:3a:86:3c:3c:14:9e:51:91:2c:7b:72:72:27:
                    ca:22:f3:57:c7:a1:8e:4b:e6:72:1d:19:0d:f5:26:
                    49:c8:a0:9f:7c:10:02:35:4c:6e:58:69:82:e7:a4:
                    78:64:f2:71:5b:98:ed:02:03:2a:fa:66:15:36:8a:
                    a6:64:e1:95:2d:2b:b2:38:2a:77:57:91:1d:ba:57:
                    b5:c0:34:98:06:28:7e:6b:93:f6:39:e7:21:a5:7e:
                    45:6e:db:30:70:d6:99:50:a0:2f:39:ca:2a:6e:1b:
                    c2:3d:8f:83:00:e7:81:a7:46:85:9f:98:3d:cb:0a:
                    fa:ce:3b:d3:82:05:cf:60:20:aa:86:34:15:91:94:
                    ad:d4:b1:4c:11:e5:ce:8e:0d:c4:18:32:92:a7:98:
                    01:75:40:f3:72:8a:55:e4:63:31:13:c5:54:52:39:
                    71:39:29:1c:f6:db:2e:0d:54:58:7a:91:61:07:d5:
                    59:fa:f7:01:95:7e:b8:c4:eb:6a:f4:6c:b8:59:1a:
                    a7:b5:db:7a:f7:30:69:65:3a:42:dc:e5:2a:a7:72:
                    91:35:14:d8:43:22:3f:ab:86:47:cc:6a:1f:1b:83:
                    d4:ca:9c:58:ec:6d:4f:82:bf:0f:3a:c5:81:74:c3:
                    11:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3A:C7:F9:BF:86:AE:5A:AF:60:25:A5:B2:B5:89:FA:5F:18:33:7B
            X509v3 Authority Key Identifier:
                keyid:EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:60:fc:aa:28:23:ba:14:58:a3:b9:10:a4:45:84:aa:37:f1:
         7a:4a:70:52:02:4d:cf:fe:bc:81:ef:d4:67:89:dc:d9:0f:14:
         21:80:f9:ff:ae:44:0a:cd:d2:ff:14:03:3b:16:94:24:83:0c:
         8f:5e:97:5e:62:b7:f7:c8:81:38:e3:d5:c9:cf:35:ea:83:16:
         3d:29:66:7f:41:c1:bf:09:1a:59:f8:16:99:2f:60:10:15:f0:
         34:cc:4c:70:02:d2:af:bd:c2:64:51:03:fe:25:1e:0c:bf:89:
         05:4c:25:07:60:c7:32:7d:3d:d9:a7:f7:5d:14:15:ab:6d:d3:
         1a:99:66:7d:bf:a0:bb:ae:1f:47:d9:df:2c:31:4b:59:5f:9d:
         56:1e:29:27:3b:bf:25:07:47:1d:20:10:ab:b0:38:6c:47:e9:
         92:60:6a:dc:4c:ee:0e:ce:75:e9:84:42:2d:c7:7e:3a:e4:fb:
         58:b2:65:a3:e9:44:14:63:94:1f:8c:d6:f9:29:57:f7:3c:ee:
         e6:64:58:13:f7:28:fb:df:69:b2:0e:a3:58:cf:93:48:91:31:
         7c:dc:33:a7:96:16:c8:37:29:66:26:be:73:aa:19:ef:a9:35:
         30:f3:1a:bf:5b:16:a9:78:f3:71:3f:fc:05:5c:bb:0d:1b:a7:
         46:ac:b3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:38:24 2025 by rpki-client