Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
File:                     RXqhx49syrxHtVEho1_zDZmCfuk.mft (raw, json)
Hash identifier:          7Dz4N4sOFdAPE073SxOj1s1wvLXmOfl4ghGW3ZJvDNU=
Subject key identifier:   2E:00:D7:C2:82:6C:F3:D6:FC:EA:B2:5F:7E:60:93:16:D2:3F:11:5E
Authority key identifier: 45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
Certificate issuer:       /CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Certificate serial:       0197B74517710BA5C868AA90CCA609B3C83C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
Manifest number:          0884
Signing time:             Sat 28 Jun 2025 16:00:47 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:47 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:47 +0000
Files and hashes:         1: IoWApYhOxVomHgy4Fx2-jrx61Zo.roa (hash: 2uCskjnfoZqh1VsnqhjGmG830eQNnYhl1PL8LlzJ7CQ=)
                          2: RXqhx49syrxHtVEho1_zDZmCfuk.crl (hash: sAIiQUVJgckuXGvrcAWfo1iiMirdf/NMaNEJSSZNiWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:17:71:0b:a5:c8:68:aa:90:cc:a6:09:b3:c8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
        Validity
            Not Before: Jun 28 16:00:47 2025 GMT
            Not After : Jun 29 16:00:47 2025 GMT
        Subject: CN=2e00d7c2826cf3d6fceab25f7e609316d23f115e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c0:7c:4d:1b:af:51:2d:87:d5:ac:6a:d0:86:
                    d9:75:96:cb:b7:10:1e:1e:6b:e8:2c:58:91:f7:ae:
                    0d:e0:f7:d8:ca:a9:7a:1b:b7:c9:48:38:14:9e:ec:
                    f7:fd:51:40:7b:13:d0:33:a0:04:55:b6:fd:65:22:
                    7e:52:09:cc:ed:e9:f9:02:08:4d:49:83:e3:a4:b4:
                    14:62:af:b1:88:e5:fe:ba:82:f2:ac:a5:c0:78:28:
                    1f:eb:d9:00:0b:68:2b:58:80:00:a5:0e:32:99:4b:
                    05:78:0b:59:ec:cf:5e:80:68:d3:ac:42:d0:84:88:
                    f1:95:09:ea:c9:1a:2e:b5:16:d1:91:26:92:a7:4c:
                    06:dc:7f:f9:c7:c2:52:67:3f:2a:e6:a5:91:9b:b9:
                    9a:b9:22:7e:1b:0c:8a:62:1e:c1:a9:4d:e7:f5:2f:
                    61:d5:61:fe:6d:a9:46:2c:d8:f6:94:30:e8:a3:87:
                    63:4d:b1:c7:48:50:d8:bd:8a:91:08:3b:ed:94:fa:
                    f2:fa:f3:fd:da:5c:49:7c:95:da:a3:34:ff:a6:76:
                    2e:00:37:58:d3:60:f9:d3:ce:29:6e:74:71:b2:da:
                    1d:16:2b:36:a5:cf:ae:1b:5d:fd:42:90:f2:89:26:
                    18:d3:6d:10:7e:83:b2:47:64:4c:fb:36:36:c1:ae:
                    72:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:00:D7:C2:82:6C:F3:D6:FC:EA:B2:5F:7E:60:93:16:D2:3F:11:5E
            X509v3 Authority Key Identifier:
                keyid:45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0f:b8:75:1d:9a:fb:d8:d3:22:6d:f7:86:55:b4:e3:a8:dc:
         fe:87:d0:1f:cb:3c:bb:ff:7b:10:b7:3b:a0:10:e1:fe:f8:ce:
         34:63:06:66:eb:d1:c2:a6:37:83:c7:1c:41:0b:12:2b:35:92:
         87:f2:73:31:75:fe:39:13:85:90:04:0a:36:20:d5:35:09:11:
         0a:82:97:91:32:2a:79:11:56:8b:67:c0:de:ef:a6:1f:e3:7d:
         d7:97:21:51:76:43:58:14:c0:38:9a:ba:c2:3b:c1:c1:0a:41:
         a7:f6:33:06:5c:b3:81:0a:03:3d:3e:15:a6:22:06:35:73:6b:
         29:c6:65:c0:da:96:7e:b1:43:8e:de:1f:eb:63:6b:ab:ed:46:
         c8:d4:3a:fe:0b:bb:47:58:b9:d1:65:94:be:d9:08:ab:01:bd:
         2f:5d:9e:75:52:57:c2:f8:82:94:e7:75:eb:06:37:6e:8b:8f:
         95:19:af:58:c5:d8:41:6f:03:0b:33:2d:28:d8:8f:bf:22:b4:
         32:bf:9c:5e:d1:6d:c4:66:ea:4b:20:84:59:be:04:6a:34:47:
         19:eb:36:8a:32:80:f1:02:bf:2d:65:8d:86:53:d1:45:af:68:
         2a:f4:5b:9a:05:4f:76:9d:8a:3d:78:a4:a8:af:a6:5e:1a:9b:
         07:8c:10:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:51 2025 by rpki-client