Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
File:                     aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft (raw, json)
Hash identifier:          ucWFS0cZ3gC9USWIXsdmfN7u3WQ9iMO2BSS/hLg6EHI=
Subject key identifier:   4F:B7:73:7E:9B:5C:A1:0B:B5:12:F3:7B:DD:28:0F:47:22:85:9E:13
Authority key identifier: 69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7
Certificate issuer:       /CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
Certificate serial:       0197711A8A3643146C13896CCB3CDB15748E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
Manifest number:          148F
Signing time:             Sun 15 Jun 2025 01:00:54 +0000
Manifest this update:     Sun 15 Jun 2025 01:00:54 +0000
Manifest next update:     Mon 16 Jun 2025 01:00:54 +0000
Files and hashes:         1: ARb5ZPDad5FfTT7dZ8xHZ7gMy6A.roa (hash: 8snm/YmhdjNlAruJqhnmmmr90GFSb4amikZSdNm3KvA=)
                          2: aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl (hash: Uj3NTDD+8Afw4gB5D/kgsoKWyVTYntP9AagofflOSgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1a:8a:36:43:14:6c:13:89:6c:cb:3c:db:15:74:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
        Validity
            Not Before: Jun 15 01:00:54 2025 GMT
            Not After : Jun 16 01:00:54 2025 GMT
        Subject: CN=4fb7737e9b5ca10bb512f37bdd280f4722859e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:25:81:80:d8:e4:09:55:b9:e4:1a:a5:53:eb:
                    8f:e5:71:8c:4f:20:bd:66:4c:2c:d0:a3:54:7c:1a:
                    ec:85:02:e3:57:ad:09:52:e5:43:d2:ce:f7:a3:71:
                    5d:d8:7d:06:c3:a7:5f:8b:6d:48:08:d1:96:be:43:
                    68:11:48:1f:ae:e3:be:d7:6c:00:22:4d:e2:77:41:
                    99:ad:6d:93:83:21:53:3e:a4:bf:83:e8:24:64:3f:
                    13:8b:73:91:8d:ba:bb:b2:0b:e5:53:11:9a:c3:3f:
                    8d:a2:b2:76:6f:68:9a:81:05:a0:f9:3e:8b:1a:1c:
                    c5:43:8e:68:c2:5c:c0:c5:e9:aa:97:ea:e6:0d:b9:
                    02:4f:93:76:4f:4d:6f:fc:8e:91:c4:0d:5e:84:8a:
                    da:97:9f:fa:c7:3e:e5:67:dc:64:c2:f6:84:f1:6b:
                    65:1c:41:40:c1:2b:5b:22:7e:29:7c:8c:9d:e8:3e:
                    a5:28:38:fd:ad:1a:b1:b6:fa:8c:5a:53:3a:52:4f:
                    2a:ee:6f:1d:11:0c:84:88:4c:d6:2d:ae:7e:6a:38:
                    6e:5b:ba:34:49:df:c7:67:ba:07:e7:b7:d8:b5:14:
                    10:c3:f1:6a:7c:90:80:4e:5b:2b:40:b6:f4:42:73:
                    3e:ae:66:9f:dd:f4:e1:52:5c:44:42:66:eb:7d:09:
                    04:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B7:73:7E:9B:5C:A1:0B:B5:12:F3:7B:DD:28:0F:47:22:85:9E:13
            X509v3 Authority Key Identifier:
                keyid:69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a4:5d:44:ed:f3:fe:7f:01:68:88:d5:39:d4:b9:e4:d6:b0:
         a3:de:74:3c:18:15:d5:1d:ac:a6:87:8a:fd:7e:a5:b0:66:0a:
         92:cd:96:69:0d:ed:5b:d9:10:71:c8:2a:80:4a:3b:e2:d9:5f:
         7f:a5:b7:8d:4b:d9:84:29:63:c1:63:fc:35:f9:bb:df:ba:94:
         31:12:36:b4:6a:2d:2a:70:ae:6d:c7:03:12:f6:eb:36:54:19:
         35:d8:9c:e9:1d:ba:50:e6:b4:f6:35:cb:09:02:37:6e:38:29:
         4d:b1:53:d3:87:4c:f6:dc:54:a9:33:2c:3d:9d:ab:6d:cb:88:
         06:7b:11:ee:30:62:76:62:b9:93:c6:e1:01:fc:4b:15:e8:6f:
         22:c4:5d:97:0f:51:c3:67:a4:4d:6f:4d:4e:27:35:55:86:e8:
         6c:dc:fe:be:3a:f6:b8:4c:e3:88:09:63:8e:b0:dd:7e:60:55:
         c0:da:b4:97:33:05:9f:86:d1:93:87:cf:ba:1a:3d:f2:8f:b8:
         eb:5a:bf:41:f7:5d:1b:39:b1:24:94:a7:c9:50:4d:02:af:46:
         3c:7b:d8:dd:bc:0c:72:da:41:47:bf:ca:8e:4b:d2:7b:c2:36:
         70:fa:5d:1c:48:b0:45:82:a1:e4:e8:13:e0:42:09:29:8b:15:
         db:d9:c6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:37:13 2025 by rpki-client