Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
File:                     t55dT4NeqI12tgJW4AN1R82Wgnk.mft (raw, json)
Hash identifier:          Oi9Ka2jbkuO098fyonHcqdnp+jaiYQGsqegi0kbsOwY=
Subject key identifier:   D4:2D:18:8A:71:D6:36:4C:C4:9A:7E:57:48:52:DA:F1:2B:A2:54:8A
Authority key identifier: B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79
Certificate issuer:       /CN=b79e5d4f835ea88d76b60256e0037547cd968279
Certificate serial:       0197B821445A6ABCDF8D2A1E26FC33CCA4A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
Manifest number:          0500
Signing time:             Sat 28 Jun 2025 20:01:17 +0000
Manifest this update:     Sat 28 Jun 2025 20:01:17 +0000
Manifest next update:     Sun 29 Jun 2025 20:01:17 +0000
Files and hashes:         1: jruZxZ6v3fQQDOP1XhyiLrCoyWo.roa (hash: JwmXnt+QW5OLkAvlfiLvs8bXFlLMvqHA2E9khKbsWec=)
                          2: t55dT4NeqI12tgJW4AN1R82Wgnk.crl (hash: fWB2ZYUtiA9OEy3kPUzIAOyxxZ8WJdsi5UOFym20IdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:21:44:5a:6a:bc:df:8d:2a:1e:26:fc:33:cc:a4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79e5d4f835ea88d76b60256e0037547cd968279
        Validity
            Not Before: Jun 28 20:01:17 2025 GMT
            Not After : Jun 29 20:01:17 2025 GMT
        Subject: CN=d42d188a71d6364cc49a7e574852daf12ba2548a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:de:7f:3a:f1:56:51:30:3d:e8:cb:0f:b6:cd:
                    22:c1:03:c1:0f:e7:2e:c3:29:0a:4d:0a:89:00:cb:
                    cb:66:5f:9e:18:ef:88:40:07:bb:64:d5:dd:8f:eb:
                    1e:d9:35:8c:1c:8f:9a:01:d5:e5:82:bd:17:fd:93:
                    21:8c:41:91:78:ab:02:02:4f:82:a9:c8:bf:d5:3b:
                    80:46:eb:a7:d0:55:87:81:b7:82:49:1e:54:f3:0d:
                    d9:d7:24:f9:54:ef:ce:56:b8:b3:78:a0:a8:4f:3f:
                    61:b8:15:49:26:96:3b:ea:55:3b:ec:21:8e:d4:70:
                    2f:41:61:7b:2f:bd:e5:5d:7d:71:5a:7f:64:66:2a:
                    52:85:79:d9:a9:cc:e9:48:34:e2:be:49:44:db:4a:
                    60:a6:72:e1:e3:a0:56:44:8e:eb:e9:5b:9a:86:e4:
                    ea:17:18:e2:ec:50:8e:1b:29:cc:fb:7e:41:6a:2d:
                    f2:47:4b:8f:90:12:a6:23:3d:26:2f:76:13:42:52:
                    22:90:dc:1f:b3:01:b9:62:27:fe:c7:fa:62:93:ba:
                    ee:25:3e:37:13:c5:e6:e6:d6:6c:a8:5e:c5:a7:c8:
                    bb:2d:f6:8c:eb:6c:d0:64:ef:bd:0a:b6:41:b9:a9:
                    1f:2a:d9:8f:24:b6:46:b0:ac:f6:8b:9f:33:63:90:
                    b3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2D:18:8A:71:D6:36:4C:C4:9A:7E:57:48:52:DA:F1:2B:A2:54:8A
            X509v3 Authority Key Identifier:
                keyid:B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:9c:3e:9e:40:94:b3:b2:7f:45:4f:d8:f5:85:f9:54:47:30:
         b3:d0:49:f2:ed:7f:07:88:4e:75:1c:16:79:1f:b2:2e:8e:25:
         37:44:11:df:49:55:80:2f:8c:71:d0:bc:66:bb:31:ce:4e:4e:
         75:c9:1b:e6:d1:60:fd:af:9d:d9:9a:1b:59:eb:59:ff:d7:5d:
         fa:96:74:24:b1:4d:c2:f0:d9:12:95:96:a3:f0:07:2b:f8:f5:
         23:24:aa:da:f8:ad:0c:77:12:9e:32:e9:4d:7a:0f:96:7e:10:
         3b:84:4f:0e:47:58:13:27:b3:5d:0a:dd:33:b7:d4:a0:3a:ce:
         84:96:24:33:39:24:2b:c2:42:f5:4f:bc:ec:0d:90:9a:e4:b2:
         a0:fe:25:69:1f:eb:2d:2c:52:af:ef:01:97:6f:99:60:28:11:
         05:36:47:88:a9:55:3f:52:12:23:55:58:05:13:f4:cb:2d:df:
         33:ed:68:5e:7a:ca:b8:86:82:9a:5c:78:8a:f7:90:5f:75:3c:
         3c:97:53:8b:4e:24:57:9b:54:69:cf:5f:d5:28:2f:87:1d:e7:
         14:fc:ee:bc:52:07:32:d9:5c:f0:7e:36:bb:5b:cc:ae:07:0f:
         ad:e8:f6:ab:d4:95:e1:94:cc:fe:78:41:05:6d:9a:07:5b:7e:
         1a:76:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:40 2025 by rpki-client