Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft
File:                     eJiLIIHZlCID0iJIrNgF2zoT3MU.mft (raw, json)
Hash identifier:          X66iCVKXpScj0IDad9+3FReHgU6AHNOFuxOuNAJK/Ck=
Subject key identifier:   13:51:B3:5F:15:71:4F:EA:4E:97:97:50:C7:2C:F5:2B:14:94:E5:90
Authority key identifier: 78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5
Certificate issuer:       /CN=78988b2081d9942203d22248acd805db3a13dcc5
Certificate serial:       0197B70EECE8AFDB47E87AF6CE82AC831668
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft
Manifest number:          1077
Signing time:             Sat 28 Jun 2025 15:01:38 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:38 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:38 +0000
Files and hashes:         1: _aQ7HAc4oxc5vbNE-bDdRfJ_I5M.roa (hash: vqzaWyeuzw7jDRILE1vVohCUPlKRF+7OXLUlnA1mX4M=)
                          2: eJiLIIHZlCID0iJIrNgF2zoT3MU.crl (hash: 1GBNqyRTKKsuXDqJuF5xpL73usnmKnJf/CGi2lwd9lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:ec:e8:af:db:47:e8:7a:f6:ce:82:ac:83:16:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78988b2081d9942203d22248acd805db3a13dcc5
        Validity
            Not Before: Jun 28 15:01:38 2025 GMT
            Not After : Jun 29 15:01:38 2025 GMT
        Subject: CN=1351b35f15714fea4e979750c72cf52b1494e590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6e:5f:71:86:9b:1e:54:91:17:bb:29:b5:ce:
                    7a:53:cc:a0:50:85:d7:19:84:99:4b:00:16:ce:01:
                    35:fc:1e:11:bb:33:2a:23:a6:72:e2:6e:ec:06:41:
                    40:b3:ad:10:9f:e2:07:7b:3d:2a:bb:d9:77:bc:62:
                    83:95:14:ed:f9:4a:d3:32:72:e9:a9:3a:26:80:07:
                    db:e7:28:55:5a:65:04:26:e8:b3:a4:85:f8:61:09:
                    ab:54:9a:8d:0f:47:1e:ef:31:03:c1:bd:f4:74:a1:
                    7d:40:b7:1e:14:84:14:55:c3:29:b3:3b:21:8f:40:
                    5f:83:12:a5:86:c7:ee:15:77:9d:39:5a:a3:e4:4f:
                    3a:fa:6c:c7:bd:74:45:b9:e0:e4:8f:3e:e7:1e:f0:
                    d2:fe:6d:20:78:95:bb:77:1f:e8:16:fa:8f:fa:a1:
                    26:bd:1d:5c:cf:52:d8:74:14:5d:55:af:84:b2:44:
                    37:e6:f8:7c:2c:3e:c8:01:de:a1:89:c7:0d:1e:f3:
                    45:bf:c4:91:ae:e8:9d:1d:e0:10:24:9c:e2:1a:0b:
                    e7:09:9d:8e:a8:65:85:0c:a5:80:ae:e8:01:c6:f1:
                    48:61:ca:de:79:cb:75:9e:2a:28:d5:2e:cf:01:23:
                    1c:fe:9c:cc:d5:3d:f4:e0:52:9c:f9:a6:9e:82:4e:
                    4f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:51:B3:5F:15:71:4F:EA:4E:97:97:50:C7:2C:F5:2B:14:94:E5:90
            X509v3 Authority Key Identifier:
                keyid:78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:20:f9:eb:14:e4:de:78:46:a9:22:48:db:4d:17:49:6d:9b:
         21:5c:c1:fb:87:9b:5b:48:52:f9:c2:72:18:27:dc:f6:50:7e:
         bd:cf:06:bf:e7:3d:fb:46:d1:31:0b:35:13:15:6f:15:27:0f:
         5b:04:dd:83:a7:b6:24:36:dd:59:52:fc:1a:ea:04:2a:b1:4a:
         83:fd:95:46:bd:ae:cd:c4:20:72:86:3b:a6:84:d9:12:93:1c:
         f5:cf:2f:2f:05:e6:3c:50:c3:47:0a:11:c9:9d:f0:a3:d2:75:
         b7:84:6a:62:36:33:bc:8a:de:23:0d:31:e7:fc:44:24:c6:07:
         75:77:43:21:8f:45:0d:c2:d9:f0:ce:37:dd:05:87:58:9e:03:
         40:0a:24:22:ca:29:a6:25:f4:50:92:5e:a1:54:11:db:15:f8:
         00:9a:e4:ec:ed:2e:e3:60:8e:cf:b8:a8:7f:42:85:fd:a9:6d:
         fc:52:3f:61:00:1a:ec:da:34:fa:1b:d8:94:fa:7c:80:f4:66:
         59:71:48:92:41:26:40:a9:31:dd:09:dd:23:f0:2c:64:e5:22:
         c3:ec:e6:20:c0:60:13:54:74:3f:c2:f7:da:a3:ff:3f:f1:27:
         cb:c1:46:1f:d6:38:bb:09:06:49:ed:a8:ac:a6:27:4b:84:74:
         cf:fd:38:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:48 2025 by rpki-client