Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
File:                     brhre7AKRC4IyzuFpj57SEh0LnY.mft (raw, json)
Hash identifier:          jo3cUUNu7Cq1/Skrm9l92UGfjCyqEq/XnKR3LOKMxXs=
Subject key identifier:   51:7E:62:A1:E2:B3:CE:DE:E9:34:B2:81:BA:07:22:E1:F9:7F:16:B3
Authority key identifier: 6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
Certificate issuer:       /CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Certificate serial:       019768BBEE5B5DEE7596137755AE3D2B49A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
Manifest number:          0C62
Signing time:             Fri 13 Jun 2025 10:00:36 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:36 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:36 +0000
Files and hashes:         1: V-vZgRS8mAjoRUqoJ2bRVighD-g.roa (hash: UA46xIFUmg6Yei6BvPPyRg4XYtnlQ4qpnfSfvDj9Jd0=)
                          2: brhre7AKRC4IyzuFpj57SEh0LnY.crl (hash: Zxrne8jBIGO14lA+pU9b5tPpuv1f8pmgM0xe+SEb+yo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bb:ee:5b:5d:ee:75:96:13:77:55:ae:3d:2b:49:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
        Validity
            Not Before: Jun 13 10:00:36 2025 GMT
            Not After : Jun 14 10:00:36 2025 GMT
        Subject: CN=517e62a1e2b3cedee934b281ba0722e1f97f16b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8e:61:e5:e5:38:4c:92:c8:f9:43:8d:aa:7f:
                    65:c4:79:90:5d:83:f9:6a:77:6a:3c:8f:fb:11:86:
                    a4:59:08:ed:00:44:8e:b7:cd:f3:c1:d2:08:08:68:
                    52:07:a4:6a:63:02:27:f7:5e:4d:c1:4e:2e:d2:06:
                    9f:8a:5a:dd:b2:64:52:ab:57:6e:ff:17:43:36:be:
                    77:7f:74:3e:83:44:b8:ca:11:b6:7b:eb:46:82:16:
                    87:f4:ce:8b:69:0b:7e:d9:ef:55:c3:44:83:c2:92:
                    ca:3e:0a:34:07:88:fc:78:6f:47:2e:fd:3f:49:cd:
                    63:91:b1:17:63:d6:65:ad:64:d2:5c:fc:9f:5a:21:
                    c1:77:f9:a2:6a:f8:6f:a8:2e:df:04:92:73:e1:0c:
                    28:d2:17:eb:31:2c:3b:ca:62:2c:5a:14:c0:d6:ec:
                    5a:08:02:9e:86:fd:61:4c:4c:86:bb:3f:1a:3b:1c:
                    ca:b6:19:20:b1:a8:3b:90:37:3a:c7:2c:e9:06:0e:
                    17:a1:96:36:9d:98:55:b9:36:73:1e:fe:bb:4e:ea:
                    1a:a5:58:a7:8c:1d:91:59:ae:c5:d3:86:5c:c3:6f:
                    80:f2:de:07:01:81:1a:e1:a7:67:75:38:6a:65:29:
                    20:bf:a5:79:6b:23:d2:be:19:eb:a8:44:ab:05:9f:
                    d0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7E:62:A1:E2:B3:CE:DE:E9:34:B2:81:BA:07:22:E1:F9:7F:16:B3
            X509v3 Authority Key Identifier:
                keyid:6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:bf:c3:a4:63:dd:ee:4e:3c:1c:d1:21:9d:0c:e8:4c:3f:b2:
         29:92:3b:c7:0c:3c:b7:12:f9:76:2a:dc:7a:70:ee:8e:5e:a7:
         db:7a:93:df:17:42:c2:47:10:59:d5:ca:8a:30:75:f6:25:ac:
         ba:21:81:ed:90:27:b0:fc:c4:ab:4f:93:8e:d8:3c:d8:8b:86:
         62:0d:6f:58:51:f5:d0:85:de:04:e3:37:27:58:51:94:82:d0:
         4f:01:2a:0c:73:ea:21:3d:bc:19:6f:86:dd:9d:ca:50:d1:7c:
         1e:ec:d7:80:f5:55:33:d5:e6:29:a2:51:a7:e6:e2:4a:b7:35:
         ab:c2:b5:3d:99:a9:4b:5a:d3:13:34:67:aa:91:9d:5a:48:45:
         3c:3e:63:8e:48:f4:04:b6:10:4d:43:b1:ea:29:27:16:4d:7e:
         e1:23:c7:6e:bf:cc:87:99:c7:53:03:65:f1:5b:b6:5d:e0:bc:
         6f:36:f5:57:30:8f:96:3a:27:ac:bd:04:48:77:e0:54:a3:6b:
         2e:52:03:69:46:40:ac:a2:cc:59:f4:8e:10:55:a2:f3:65:d6:
         88:2e:16:24:a9:4b:8c:a5:34:8b:77:f7:ac:69:b1:81:c6:5a:
         78:54:0c:01:c0:a8:e2:65:93:76:17:0a:27:37:8e:86:36:6f:
         a5:5b:bf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:26:32 2025 by rpki-client