Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
File:                     Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft (raw, json)
Hash identifier:          9TO8V3Sg9/wD4id6Mt0IHOpfxe+ZmjPzYmTB9Q32b/Y=
Subject key identifier:   74:D9:05:26:CB:ED:99:4F:B2:34:89:A2:34:25:49:85:90:26:EB:50
Authority key identifier: 22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5
Certificate issuer:       /CN=22edf0d881aeea2e59999b81d2975113e14055f5
Certificate serial:       01976C98F12338862979B1D5590A226055A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
Manifest number:          0CAE
Signing time:             Sat 14 Jun 2025 04:00:51 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:51 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:51 +0000
Files and hashes:         1: Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl (hash: 6Z38WWcri8nM67dkD+DbEIOYyZopg6sP9GvTjUSvrb4=)
                          2: uJDTTmn4-4oW9k1wMlYj6SoOXQ4.roa (hash: pc1//08OK0uZCD5sEikyCqJI0sYd32Do1RYyDgm63AU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:f1:23:38:86:29:79:b1:d5:59:0a:22:60:55:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22edf0d881aeea2e59999b81d2975113e14055f5
        Validity
            Not Before: Jun 14 04:00:51 2025 GMT
            Not After : Jun 15 04:00:51 2025 GMT
        Subject: CN=74d90526cbed994fb23489a2342549859026eb50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:02:2b:a0:9d:d9:47:cf:3e:5b:bc:ef:dc:ce:
                    7c:db:81:ea:00:46:eb:81:d7:21:83:da:1c:bd:7a:
                    d9:ee:29:bd:0e:48:a3:e7:1b:4a:e5:87:84:1e:32:
                    9f:9a:95:fd:ad:61:71:ca:1a:0a:42:04:d7:08:de:
                    c2:71:45:c7:ba:f1:0b:39:58:37:80:f2:f8:67:b8:
                    ce:04:0b:a0:70:09:ee:fe:cb:27:de:2d:9d:d7:2c:
                    ec:45:6e:56:dd:16:dc:73:d1:9a:2c:78:03:ff:8b:
                    a9:54:05:db:71:85:7b:cf:50:05:e3:bb:2e:ae:55:
                    61:4c:f6:67:4f:d8:87:ad:c4:48:f2:4b:34:d1:03:
                    58:f6:5c:f7:2a:ab:9a:db:7d:0f:f7:01:cd:17:91:
                    9f:34:2a:74:73:26:d5:29:7b:01:c2:47:d5:d9:a3:
                    6c:f4:26:0e:fa:66:bc:4b:80:ed:94:ec:82:6c:1d:
                    ad:f5:0f:05:46:e9:1a:d9:f6:d5:b1:c8:17:13:ce:
                    84:69:59:89:72:ba:81:38:6e:12:78:1a:32:b7:80:
                    0a:e2:43:78:03:17:76:99:98:14:1a:0c:c5:96:61:
                    2f:99:e8:3b:82:b2:d2:46:9e:43:a1:5e:96:35:07:
                    1e:d9:81:32:f9:3a:5b:be:37:19:bd:9c:30:8c:81:
                    48:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D9:05:26:CB:ED:99:4F:B2:34:89:A2:34:25:49:85:90:26:EB:50
            X509v3 Authority Key Identifier:
                keyid:22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:aa:d8:55:45:bc:2d:d7:fe:1c:8c:c0:89:64:b1:55:57:a3:
         6a:7a:83:3e:19:d2:29:9f:79:72:05:14:20:cf:3a:3d:06:92:
         df:36:60:80:4c:ed:6e:35:22:55:10:86:7c:af:7a:d3:f0:eb:
         e1:ae:9b:fd:31:b9:b7:95:71:56:85:31:67:5b:64:ad:83:dc:
         13:bb:ab:7e:29:d9:11:f5:17:94:d3:07:28:68:c7:cb:d5:16:
         67:61:14:95:e1:81:82:1d:dc:39:80:9d:da:8f:6e:33:e3:f7:
         d4:07:a9:e6:c0:4c:f7:1b:7a:43:d2:22:13:1f:65:57:0e:ab:
         8e:03:94:a9:f4:61:d7:22:0e:66:dc:ab:ed:a2:8d:91:ab:d8:
         af:2e:0a:7a:cf:ac:d5:ad:00:dc:51:d8:10:dc:c2:75:a4:78:
         73:86:da:12:d0:c7:5b:4d:2b:ae:8b:44:ea:5c:57:ae:ec:80:
         96:60:31:29:71:3e:6a:fd:82:77:76:20:59:99:a3:d7:6a:c8:
         cd:82:84:1c:1a:32:c8:b2:07:73:51:4d:a5:09:4a:b4:0c:9b:
         7e:3e:af:05:7b:5a:23:d1:e2:da:a6:8c:c3:8e:6b:45:1f:c1:
         f8:f5:bc:e5:34:8e:30:2d:d5:06:ae:f1:9e:50:2d:d0:61:4a:
         93:e7:98:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:34:38 2025 by rpki-client