Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
File:                     e33o0TUz0eNrETWl0umm_zmFzaI.mft (raw, json)
Hash identifier:          GNpVQT2xtLaLXxx5V0BEuLAYcECAhIobWHJynj10NlY=
Subject key identifier:   F0:A5:6B:D8:D2:CF:53:5A:8E:BD:66:32:CD:67:ED:91:C2:8B:1B:1C
Authority key identifier: 7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2
Certificate issuer:       /CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
Certificate serial:       01978244CB9C41F008D7EB5ACAD9519A46B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
Manifest number:          058A
Signing time:             Wed 18 Jun 2025 09:00:36 +0000
Manifest this update:     Wed 18 Jun 2025 09:00:36 +0000
Manifest next update:     Thu 19 Jun 2025 09:00:36 +0000
Files and hashes:         1: NT721vdDTZnxgWmRGJzwBYHYDA8.roa (hash: yzcBhHIQBnCYtohSTAdo4tLB3EtiVC078q9jsnknm8I=)
                          2: e33o0TUz0eNrETWl0umm_zmFzaI.crl (hash: 7bIzTqynz2+BZpsg84CLlvyvHuhm9UK5Y2Dz41jeR7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:44:cb:9c:41:f0:08:d7:eb:5a:ca:d9:51:9a:46:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
        Validity
            Not Before: Jun 18 09:00:36 2025 GMT
            Not After : Jun 19 09:00:36 2025 GMT
        Subject: CN=f0a56bd8d2cf535a8ebd6632cd67ed91c28b1b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b8:35:7a:e3:d4:6d:42:a3:6f:8f:5e:9a:cf:
                    78:15:44:02:e9:8e:15:a5:d5:88:31:43:5d:46:58:
                    c3:4c:85:4b:98:2c:d6:bf:40:1d:66:e1:07:27:b6:
                    1c:c1:aa:31:a9:fd:c1:68:d9:f1:eb:5e:d4:a2:dc:
                    5f:43:bc:2e:c8:6b:9e:96:47:ae:58:4a:a4:ff:97:
                    0c:ef:52:ed:c9:be:ad:44:96:f1:e0:07:bb:1f:fc:
                    43:9b:37:69:cf:0f:ab:de:5a:b0:b8:7e:04:57:08:
                    f5:15:90:f5:d9:29:6f:a6:54:20:f1:9d:5a:bf:07:
                    d9:c0:12:98:98:2a:b0:ea:83:85:86:3a:69:76:e1:
                    64:39:d4:6a:b3:a2:48:65:ec:66:af:01:f3:1b:fc:
                    b0:37:94:df:4a:8b:35:c2:83:da:0a:3c:03:2e:a7:
                    c8:f9:71:c1:9a:c5:4d:bf:1a:69:95:cb:a4:51:ab:
                    f8:b9:1b:80:b7:74:d2:75:7c:88:13:60:82:c2:85:
                    80:88:25:9c:e9:8b:e0:8a:94:85:31:96:26:84:58:
                    da:9f:30:5b:0d:5a:6c:9d:98:09:bd:af:15:16:56:
                    41:5c:b5:c8:75:a6:77:92:19:48:cc:85:04:0a:4a:
                    d3:b3:c0:a3:ba:a9:38:93:9a:2b:b0:f0:aa:c4:10:
                    7c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A5:6B:D8:D2:CF:53:5A:8E:BD:66:32:CD:67:ED:91:C2:8B:1B:1C
            X509v3 Authority Key Identifier:
                keyid:7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:71:de:b9:36:e2:06:e3:21:4a:cc:d6:7e:ee:ab:37:80:9c:
         b3:26:4b:9f:11:4d:df:53:79:8d:0c:94:48:eb:6a:49:6f:f7:
         03:ef:cc:5e:56:16:39:db:88:a1:61:1c:ef:81:1b:43:22:ab:
         1e:1f:87:da:76:8d:69:20:82:fb:84:1d:02:1b:58:e0:4b:9a:
         b7:21:4f:b4:67:81:0c:a0:60:01:8c:1e:06:1e:e7:92:03:e3:
         a7:b5:c0:8f:19:e7:ae:c7:6f:99:f2:de:7c:8a:24:71:d2:ad:
         26:64:e4:5c:de:67:ae:2c:0c:c2:84:cc:c4:8a:f8:73:57:73:
         b3:88:97:6d:d0:14:1d:73:c1:2f:26:1e:09:8c:28:d7:8a:5e:
         0e:47:6e:bc:65:f0:b5:6a:76:30:d1:c1:ac:24:68:88:6c:f7:
         7b:a1:9e:9e:39:6c:01:2d:f6:5e:ce:a8:17:9f:cb:83:9c:01:
         13:d9:f5:7f:48:45:9e:57:c8:30:1b:74:66:2f:18:33:fe:92:
         37:48:93:ba:40:d1:80:72:70:3d:fb:0e:e7:61:12:a2:1c:62:
         4e:4a:bc:9c:56:fc:0f:0b:92:27:f2:74:d0:6f:d0:ff:6f:42:
         6c:3c:95:79:b9:d0:c3:01:a9:6e:3b:4a:d2:92:ae:16:2f:96:
         38:a5:7a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 12:17:38 2025 by rpki-client