Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
File:                     E-XdFL3pMjctyLWTLMVNYI276Qg.mft (raw, json)
Hash identifier:          T3r4/kq6hKisQ2hxjIDejs8o3ixDI+Mf/d/a0hK8KbI=
Subject key identifier:   0E:8A:6F:46:B0:54:B4:C2:B3:25:B8:6E:EA:A0:AB:37:BA:F3:BE:8D
Authority key identifier: 13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08
Certificate issuer:       /CN=13e5dd14bde932372dc8b5932cc54d608dbbe908
Certificate serial:       0197B7B30FC9B43F5253B38018BB4AC97CF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
Manifest number:          01A5
Signing time:             Sat 28 Jun 2025 18:00:54 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:54 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:54 +0000
Files and hashes:         1: 12_j47AEFlNkQmnvJ6lQS6k9OJM.roa (hash: QL5MIkOPhYomrHDRf0wI6//DVHKZ3F+ShGeX+xkxEXo=)
                          2: E-XdFL3pMjctyLWTLMVNYI276Qg.crl (hash: 7Dmt3yAaK8ZhqETP6ezEuYXxmy5tl+cAmm2vrSHkdvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:0f:c9:b4:3f:52:53:b3:80:18:bb:4a:c9:7c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e5dd14bde932372dc8b5932cc54d608dbbe908
        Validity
            Not Before: Jun 28 18:00:54 2025 GMT
            Not After : Jun 29 18:00:54 2025 GMT
        Subject: CN=0e8a6f46b054b4c2b325b86eeaa0ab37baf3be8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:57:dc:64:83:da:75:10:52:c5:df:2d:d6:f7:
                    ff:59:74:76:bb:04:9d:cf:0a:3a:65:cf:5f:b9:bb:
                    2b:57:bd:fd:3e:87:d4:cc:5e:bf:c0:27:a0:1f:f5:
                    cc:d4:aa:7d:1f:06:2d:54:69:c3:d3:49:c9:76:98:
                    e7:fb:3b:01:33:9c:ba:b2:45:cb:e8:b7:98:de:7c:
                    a3:73:75:d7:c1:e4:51:7e:4f:6f:c9:22:28:5d:bf:
                    21:1f:43:b9:1d:d9:09:d3:41:f2:5c:37:2f:cc:20:
                    fd:5d:01:28:fa:7b:50:b9:f6:d6:cf:1e:b0:f8:9a:
                    58:73:cd:d6:92:1e:69:9f:94:fe:ca:05:66:9a:cf:
                    5c:58:1e:35:73:0a:53:08:5d:a1:19:11:1b:be:7a:
                    48:03:c2:a1:5f:3a:76:2a:2a:b6:ba:29:8e:ab:2d:
                    fe:29:ef:dc:58:ae:40:c2:67:b3:6f:94:38:86:3b:
                    e6:98:b3:d8:39:d2:df:e6:63:7f:1b:ef:6a:47:ca:
                    fd:fd:33:0e:c9:4e:ab:8c:52:d2:b2:63:7f:7e:2c:
                    37:70:bc:91:d7:5e:54:d3:41:87:16:1f:8e:5f:d2:
                    75:72:51:a3:38:70:95:fa:85:38:4a:ff:07:89:0c:
                    ac:21:21:d3:47:94:65:62:cd:71:9e:5f:4a:1e:50:
                    28:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8A:6F:46:B0:54:B4:C2:B3:25:B8:6E:EA:A0:AB:37:BA:F3:BE:8D
            X509v3 Authority Key Identifier:
                keyid:13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:06:bd:00:ee:bb:15:6a:24:b5:87:8f:8d:b8:3c:c4:67:c7:
         61:c5:1e:c8:35:84:d8:c3:71:76:1b:24:70:4b:3c:77:5f:f9:
         a4:8b:79:bc:73:88:fc:27:66:6b:68:46:72:bc:f3:ff:67:10:
         ae:15:75:13:58:7a:1d:3c:6e:09:c5:14:31:f5:ca:19:db:39:
         af:43:da:4a:fd:a9:ed:0c:93:f7:92:a7:c8:97:21:dd:a2:ca:
         ea:b1:0e:31:5c:b4:07:8a:c3:33:5f:7e:ae:56:20:92:00:30:
         d6:b8:84:4c:be:e7:ec:c6:5d:9d:63:14:f0:ce:cc:2e:5c:d2:
         25:e3:9e:9b:4e:da:9d:75:37:55:3c:c5:fa:9a:7f:3c:5b:24:
         1e:31:53:67:ab:c6:ad:cd:79:57:69:09:1d:61:ec:fb:a8:5e:
         ce:f6:48:72:34:4d:1a:f3:7d:6f:3f:69:de:11:2d:b2:26:32:
         6d:75:21:57:19:7f:15:5d:29:0b:aa:6d:cf:24:f7:37:cf:41:
         2e:73:a9:36:55:9f:a7:4f:6f:08:c2:c1:c0:28:af:ec:d0:a5:
         2f:42:9e:f3:ca:0d:ae:9e:2d:76:5b:fc:c2:3d:9a:e4:ef:76:
         96:4c:83:ec:17:f9:a6:85:86:eb:79:6d:1d:c6:87:2c:b9:f3:
         d6:ee:91:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:13 2025 by rpki-client