Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
File:                     tCV3H5kv1037Bzbmla61nGr2fpM.mft (raw, json)
Hash identifier:          qtDjkDjMy1DIBAPqKZY2fXVipcmJhk1LMTYpwkq+tXE=
Subject key identifier:   C9:54:CE:79:1F:A3:4A:27:12:84:7F:F8:B2:36:82:1F:23:22:02:61
Authority key identifier: B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
Certificate issuer:       /CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Certificate serial:       01976D3D5E936A87C6C1BE3D78FFA50DA45C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
Manifest number:          065F
Signing time:             Sat 14 Jun 2025 07:00:27 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:27 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:27 +0000
Files and hashes:         1: Vw2yLSQ3LTxqIY-0jpawdHHYRZc.roa (hash: iTSHI+c9vyvdBq9ojdYKL9zsD6xY6XyH0HTCqL60iXA=)
                          2: tCV3H5kv1037Bzbmla61nGr2fpM.crl (hash: shUS2PIObr2jc/add+Ee8h0vOK7hjaL5SNeS8dgtdDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:5e:93:6a:87:c6:c1:be:3d:78:ff:a5:0d:a4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b425771f992fd74dfb0736e695aeb59c6af67e93
        Validity
            Not Before: Jun 14 07:00:27 2025 GMT
            Not After : Jun 15 07:00:27 2025 GMT
        Subject: CN=c954ce791fa34a2712847ff8b236821f23220261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a6:eb:a5:3c:50:dc:b5:36:6d:10:3b:37:a4:
                    bd:ee:59:44:29:d5:40:5f:d8:94:ff:03:cf:f2:6c:
                    63:97:25:db:48:7a:74:5f:98:4e:75:df:57:f6:5a:
                    9b:ae:e4:c0:26:67:dc:a8:cf:43:52:93:88:59:b8:
                    3e:42:aa:c0:40:27:20:ad:2d:c7:ce:41:45:95:e6:
                    2d:52:b1:cd:d0:8e:e0:c2:ae:ed:97:f9:1c:f2:1a:
                    45:31:d1:b2:16:d5:c2:f1:14:ce:f3:65:b2:3f:dd:
                    d9:73:5e:0e:d6:ab:36:f3:9e:56:91:56:97:b4:8c:
                    ee:70:bc:18:21:a2:d9:63:86:1f:22:a3:59:fe:22:
                    72:fe:d9:67:26:bf:d6:e9:f5:7d:84:32:ad:b4:36:
                    66:3e:4d:41:6e:4b:57:42:b9:50:d0:70:92:81:a4:
                    1a:49:bc:22:b2:ed:09:28:59:e6:ab:cc:a5:26:da:
                    f7:b2:fd:8f:67:93:df:bf:57:e2:6e:3f:82:e6:c4:
                    81:39:76:d0:6a:2e:31:a1:81:07:4f:94:58:58:0a:
                    26:c1:ab:67:00:3e:70:de:64:77:96:da:b2:a4:d2:
                    59:af:5a:52:d5:ea:ec:fa:a8:45:e3:ce:f9:81:5c:
                    e9:7c:84:f4:f7:c6:76:c2:a7:75:bc:62:41:a0:21:
                    83:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:54:CE:79:1F:A3:4A:27:12:84:7F:F8:B2:36:82:1F:23:22:02:61
            X509v3 Authority Key Identifier:
                keyid:B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c2:fd:89:27:22:c2:05:f0:b4:25:15:e4:f8:49:d0:44:6a:
         c7:43:bf:2a:07:5b:2b:d2:83:df:2e:ba:71:38:51:cd:93:f9:
         ee:5a:dc:be:46:6d:d8:12:35:c9:f3:8b:3a:0c:5e:57:e1:99:
         f8:e0:f2:e6:9b:1d:9c:9e:10:b3:90:2f:60:f4:2b:30:0e:9a:
         87:be:39:55:3a:56:d9:ca:1d:b3:30:7f:15:cf:54:5b:5f:ef:
         99:5e:03:08:9f:3a:46:35:64:fe:33:a0:3e:cf:f1:bd:94:2e:
         a5:da:8b:c3:b2:c4:14:4e:71:47:63:d8:01:55:4c:f3:ef:a8:
         73:b4:f1:d7:f4:65:3b:b0:17:26:86:10:85:a7:41:0b:4b:56:
         e7:4d:46:6a:be:93:3d:26:f9:db:89:73:03:ac:7e:de:f5:43:
         c1:2e:b7:aa:fa:e7:7d:05:c6:b8:f5:80:4f:06:7e:73:ef:e3:
         54:be:92:f6:93:15:8c:bf:f1:6c:ba:6a:ba:bc:16:c0:04:a4:
         1c:70:36:66:38:71:75:88:51:f8:10:39:50:e6:41:f4:8c:b7:
         bb:09:e4:77:4b:76:82:f2:6a:fa:49:e3:c3:25:5a:77:69:fe:
         dc:ba:dc:7e:b7:e2:cf:ef:7c:91:b5:26:b4:18:62:81:2b:ae:
         6a:ed:f5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:05:52 2025 by rpki-client