Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft
File:                     1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft (raw, json)
Hash identifier:          Ujgd4gpXwksJjGe6ka1kTo/LHfdH2q9dSO3RgvlYCy4=
Subject key identifier:   29:2C:0D:33:A6:43:CD:CB:DF:9D:98:4F:29:54:34:5D:ED:36:07:F7
Authority key identifier: D4:4B:C0:E8:3E:81:F5:7F:B4:89:40:41:DC:A7:6C:77:D3:3F:02:E7
Certificate issuer:       /CN=d44bc0e83e81f57fb4894041dca76c77d33f02e7
Certificate serial:       0197B88F329E3B4767F98BF9C18AF896C891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft
Manifest number:          0A80
Signing time:             Sat 28 Jun 2025 22:01:21 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:21 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:21 +0000
Files and hashes:         1: 1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl (hash: 894aaG1VbtBN3mfJ2zSdluc8V4yPBXAl15rUPdiHdvs=)
                          2: yhLkTBwFXW9MjzC359UU8CJ6Bcc.roa (hash: YsI+CGd1aoGxeJp5us7qb7YQNNKxFAd0kxBSQecushk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 22:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:32:9e:3b:47:67:f9:8b:f9:c1:8a:f8:96:c8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44bc0e83e81f57fb4894041dca76c77d33f02e7
        Validity
            Not Before: Jun 28 22:01:21 2025 GMT
            Not After : Jun 29 22:01:21 2025 GMT
        Subject: CN=292c0d33a643cdcbdf9d984f2954345ded3607f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:93:6a:dd:e9:a4:bc:5f:46:bd:a9:f3:94:
                    8a:46:5d:1c:2f:c3:a7:ce:ff:3f:4f:58:e1:89:64:
                    44:7c:f6:e9:69:5e:67:4e:d8:76:a9:59:cf:0b:13:
                    5f:17:cf:51:7f:45:20:ef:ba:b9:1b:95:af:ff:83:
                    25:09:d2:fd:3e:59:5e:b1:88:18:a9:32:52:8c:1b:
                    7a:6c:5c:58:e2:cf:fd:e4:b2:f7:15:55:31:cd:ea:
                    91:38:f4:66:3b:db:8b:44:31:cc:bf:d0:5b:31:9d:
                    64:41:51:26:b4:f5:a7:b7:66:1f:d9:f6:c5:83:cf:
                    10:5d:0c:d8:48:46:e0:bf:66:22:ae:20:7a:d1:b2:
                    89:0e:17:53:55:ff:2d:fe:3d:9f:a1:0f:f8:84:53:
                    e3:34:7f:18:42:d6:04:bf:db:20:34:fa:26:97:3c:
                    53:35:98:b1:2d:9a:61:1c:b2:70:66:49:e7:bd:85:
                    22:be:eb:93:b8:1d:2e:69:a6:7a:46:1d:93:ce:ca:
                    94:b9:dc:4f:3c:0f:38:27:45:5b:2c:1e:e3:a3:1f:
                    46:c7:48:23:5c:14:0a:78:12:c4:54:19:77:9e:61:
                    16:d8:de:77:0d:d9:45:f7:44:2d:9a:f2:59:df:b0:
                    3d:21:12:f1:54:5e:3c:65:6d:7d:cf:eb:8b:c3:a3:
                    fc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2C:0D:33:A6:43:CD:CB:DF:9D:98:4F:29:54:34:5D:ED:36:07:F7
            X509v3 Authority Key Identifier:
                keyid:D4:4B:C0:E8:3E:81:F5:7F:B4:89:40:41:DC:A7:6C:77:D3:3F:02:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ce:ca:06:c3:04:03:1a:35:5c:b7:17:ce:ca:13:d1:f4:9a:
         4a:28:9d:41:1d:d6:b4:b4:6c:f9:e9:03:a7:d8:60:3a:34:f5:
         36:0a:c3:d3:5f:b0:df:e2:28:ca:57:18:9d:5a:27:97:4e:7a:
         70:09:ac:c4:bc:c1:c1:a0:cf:8b:6e:4b:ec:ec:06:64:55:4e:
         85:bb:3e:8b:25:a6:a3:86:6e:1b:36:88:1d:66:59:bd:d5:bb:
         5f:87:9f:33:24:2e:00:5f:6c:70:4f:b3:d7:02:a9:e4:a9:96:
         a5:c8:70:64:4b:81:c7:c6:5e:64:c0:af:5b:82:0f:01:50:07:
         ba:3c:86:2b:ac:1a:f4:51:eb:cc:2e:b7:45:06:d5:b8:10:a4:
         9b:d7:ba:f1:17:fc:f1:03:c9:3e:50:bc:47:49:1c:2d:26:d4:
         2a:b4:0b:fe:64:ee:da:9d:95:9a:5e:f4:19:cd:47:ce:56:a3:
         4b:55:bc:f4:85:5b:50:da:e9:d6:0c:40:5b:c9:7f:2f:6f:16:
         3a:e6:db:f7:f8:e5:d4:d7:09:66:2b:33:9e:37:eb:f2:eb:1e:
         af:c5:54:8e:f7:c9:3f:58:73:c0:ff:47:1c:23:7d:95:b0:93:
         82:d0:04:22:8e:c3:01:e2:ea:5f:a8:23:e2:76:ff:25:31:e3:
         e1:0c:d0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:07:24 2025 by rpki-client