Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
File:                     Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft (raw, json)
Hash identifier:          u5VjJDgiCY/OSf8t9KFBb6IK2jf1AVwm1shtxyDFMUU=
Subject key identifier:   E9:F6:BB:8D:A7:D7:F7:D1:23:02:1F:36:57:AE:67:16:A4:E3:4D:87
Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
Certificate issuer:       /CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Certificate serial:       0197B5FC6D4B615C752B62D3F6EE575EB4DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
Manifest number:          1533
Signing time:             Sat 28 Jun 2025 10:01:48 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:48 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:48 +0000
Files and hashes:         1: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl (hash: cNgytCRrIOVMXblaqzzScbluW98mC50GFaXEfvtckCQ=)
                          2: aTQzWebpqg_T1Vz72K8wYxcCH9E.roa (hash: sU4u/yCI9RN4etvN429ld52OXctixi8Cp3brB5244bc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fc:6d:4b:61:5c:75:2b:62:d3:f6:ee:57:5e:b4:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85
        Validity
            Not Before: Jun 28 10:01:48 2025 GMT
            Not After : Jun 29 10:01:48 2025 GMT
        Subject: CN=e9f6bb8da7d7f7d123021f3657ae6716a4e34d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:15:3a:35:fe:3c:0a:8b:e4:7b:c0:9e:53:
                    e7:41:d0:b6:4c:6d:9c:cb:e9:66:5d:b3:15:67:ad:
                    61:92:be:27:0e:79:27:3a:76:2b:cb:e6:b2:c6:bf:
                    71:ed:79:be:34:11:2b:22:92:c0:8d:a9:fc:98:93:
                    0d:6f:e7:06:25:03:54:7a:9e:ba:67:a9:10:68:48:
                    26:15:bd:79:95:31:ac:bd:54:e8:64:48:22:a2:bf:
                    fd:8c:10:a6:23:b8:03:ed:8a:69:4a:4f:33:41:0d:
                    92:be:d5:93:19:6b:49:7c:e0:15:b3:9d:89:f8:6a:
                    53:9c:98:78:37:d2:a6:01:4d:45:74:a9:4f:ee:da:
                    8c:8f:68:65:75:39:42:f5:14:37:b3:f3:4d:78:5c:
                    c8:d4:1d:4f:bd:95:b8:06:7a:21:c6:c6:6d:32:5d:
                    80:cb:4d:25:27:9c:cb:92:c9:c4:9f:f1:05:80:99:
                    59:3c:c6:d9:8c:3f:11:d5:96:12:f2:fa:55:cf:64:
                    65:1d:b6:46:ac:8b:66:46:24:ab:b6:39:a3:3b:c0:
                    09:85:46:e5:2a:4c:cf:65:45:df:74:c1:b0:32:84:
                    aa:cf:b0:16:b7:55:a7:b0:00:0e:5c:d9:90:91:f9:
                    4f:02:b8:d8:87:87:34:08:70:00:88:3e:67:0a:ce:
                    40:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F6:BB:8D:A7:D7:F7:D1:23:02:1F:36:57:AE:67:16:A4:E3:4D:87
            X509v3 Authority Key Identifier:
                keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:09:b4:ff:9a:ce:8c:43:29:da:2b:7b:23:5c:23:34:a2:7d:
         ab:68:e7:10:00:9c:ec:db:83:09:5a:42:31:e2:e8:e6:ea:8f:
         97:f0:3c:7d:74:e1:3e:e8:7f:c0:23:d0:9f:e7:5c:87:03:25:
         c3:73:69:3c:a5:12:1b:a7:2e:36:3e:f0:0b:21:06:a2:05:bc:
         6e:01:d5:18:d6:51:29:67:08:38:aa:75:95:39:f5:4c:0c:80:
         34:83:bd:e6:dc:c3:ce:ca:5a:52:6f:81:c2:92:b5:d7:76:73:
         ca:95:af:6c:4d:61:ff:ad:99:16:13:4d:6d:19:a4:56:92:9c:
         94:cd:bf:67:2a:6d:29:d6:a3:c3:b7:33:77:45:c4:69:44:a0:
         03:5a:16:f8:c6:aa:1e:07:e8:63:d0:b4:0f:f5:7c:44:4e:c0:
         fe:fa:02:0f:70:8f:27:27:b0:89:cf:16:6d:b0:61:54:3e:c3:
         75:77:e6:fb:d3:f3:36:12:ba:af:59:59:1b:9a:49:55:57:3e:
         1e:81:eb:9c:08:fb:46:f5:af:b9:42:7b:1b:f5:6a:45:d6:a2:
         4b:1e:aa:ca:b2:2a:86:ea:55:86:6a:e0:b5:24:65:92:af:6e:
         17:44:43:5d:8a:b3:55:c4:2b:d1:3c:ca:c7:98:61:28:14:d7:
         33:10:51:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:47 2025 by rpki-client