Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
File:                     z96Fu9R49ehC9MT42FIl0QDg9N8.mft (raw, json)
Hash identifier:          WBHqqSGE+9AaEXGv5UDo/+u8hxEfVRhpu1iCr97tShM=
Subject key identifier:   B0:BA:EF:88:FB:4D:A4:B1:03:1B:2B:0B:7E:75:B0:E7:6D:16:CB:DD
Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Certificate issuer:       /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Certificate serial:       01976E19AFA41AF74AA787B6D0F2038A2EA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
Manifest number:          13B1
Signing time:             Sat 14 Jun 2025 11:01:06 +0000
Manifest this update:     Sat 14 Jun 2025 11:01:06 +0000
Manifest next update:     Sun 15 Jun 2025 11:01:06 +0000
Files and hashes:         1: 1OyTbfvyzmfZUNYirXuCCHsANm4.roa (hash: 8Jgw64hOUxLe070arL4RcZ6Gx3UQtUhbiE1+5vQ3hTQ=)
                          2: HiBnbI4CFkO6wbFUo2RvuU6f-fw.roa (hash: VhgmQS29C66Fmy2SkFAZ0WnJ9LUtI+BDLROZ169cE4c=)
                          3: eruPfcR2X7_l3Y9JlxvSybx24b4.roa (hash: tPGfvy1XKjh90gA2MYIwq6OAfzeCCdfOe3OzNmyJzq0=)
                          4: z96Fu9R49ehC9MT42FIl0QDg9N8.crl (hash: ecnOKo3ye9qW5zSKeQxWopDc8p6mGS1QI+P9zHzaf3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:19:af:a4:1a:f7:4a:a7:87:b6:d0:f2:03:8a:2e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
        Validity
            Not Before: Jun 14 11:01:06 2025 GMT
            Not After : Jun 15 11:01:06 2025 GMT
        Subject: CN=b0baef88fb4da4b1031b2b0b7e75b0e76d16cbdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:57:93:6d:a9:57:69:c6:f5:e7:50:18:ed:c9:
                    37:6b:5e:ba:a8:f7:b7:a6:90:03:e0:d5:62:71:23:
                    61:b2:d7:1b:dd:30:8a:2d:d5:b2:c7:c8:5b:18:aa:
                    dd:27:9e:56:9c:26:74:68:9c:24:0b:31:34:57:8b:
                    26:b5:b6:77:1e:c3:a7:8c:44:cb:0e:77:53:95:07:
                    c0:dc:c3:b9:85:16:2f:b6:11:44:86:30:50:09:50:
                    1b:86:32:e8:ab:bb:0d:a2:12:b1:a0:ab:bf:63:cf:
                    bb:38:8a:91:98:21:50:7b:46:8a:aa:c3:be:59:63:
                    e4:68:1d:2b:71:ae:04:8e:6e:69:86:5d:c2:22:49:
                    77:04:7c:5c:0e:ea:48:55:f9:9b:df:4f:c9:b8:af:
                    2e:8d:07:b2:cb:7c:d4:f5:1f:7a:62:98:22:5a:fb:
                    87:7a:09:9a:11:a5:5f:78:ba:e6:75:bd:63:40:fb:
                    66:a2:fb:26:88:94:29:cf:b3:72:fe:ca:78:9d:f5:
                    6e:92:0d:dd:40:15:4b:55:f3:7c:a4:76:2c:7e:6e:
                    00:e7:f2:07:79:18:cf:29:93:d4:2e:dc:5e:2d:a5:
                    20:53:4f:90:c4:21:40:83:ca:3b:ca:5e:0f:d7:e0:
                    b8:07:8a:90:40:0f:5e:58:8d:38:8f:08:23:56:d7:
                    ee:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BA:EF:88:FB:4D:A4:B1:03:1B:2B:0B:7E:75:B0:E7:6D:16:CB:DD
            X509v3 Authority Key Identifier:
                keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:be:cd:3d:9d:1a:ef:e3:73:d9:ee:2a:d6:32:4e:e4:78:83:
         f5:db:28:29:43:3d:e1:3f:f4:f8:e5:6c:3b:cb:80:c6:1d:58:
         f0:e9:d3:7f:9b:6f:85:3d:10:8d:d9:7d:7d:6a:f2:72:59:15:
         83:c2:ad:6a:33:f8:6b:65:e1:60:44:52:c0:c2:a9:da:65:6e:
         36:42:6e:69:67:cc:c5:17:0e:68:a6:89:83:85:5b:b4:b3:ef:
         21:4d:e4:fe:ee:2a:38:d7:d5:25:1d:c8:f2:cb:33:b2:84:27:
         ea:6d:eb:4b:4d:6b:a7:28:f3:8f:7e:dd:9a:40:bf:5e:62:c7:
         40:78:48:10:81:51:57:bf:11:75:32:95:5b:b0:1a:bc:4d:de:
         d8:5a:0e:02:22:ba:6b:6f:14:9e:f0:71:12:7b:af:10:0d:77:
         25:51:91:c6:1c:fa:aa:57:be:c4:5a:b3:48:3f:cc:de:66:e2:
         86:59:df:80:5e:24:d0:4f:83:bb:1d:aa:e8:d6:ab:d8:44:3b:
         34:d2:f1:b9:f9:09:f4:5c:df:d5:eb:24:96:85:eb:4f:3b:7a:
         b9:40:77:c1:db:7a:f3:12:95:38:5e:fe:84:b7:a4:8e:79:9e:
         45:9e:96:c9:6f:67:39:ea:b7:bb:e2:29:e7:41:99:c2:d8:a4:
         53:c1:68:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:15:40 2025 by rpki-client