Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.mft
File:                     eXvOmMjjpdL3ViPm8jLzz827Uro.mft (raw, json)
Hash identifier:          iiMVO1vYsQX/94pMxQE+hgCWxiejYQRVBaHUjtxrSLg=
Subject key identifier:   AD:FD:8B:14:BF:DB:BD:26:68:02:53:F7:98:7A:6D:6A:5D:AC:3B:F5
Authority key identifier: 79:7B:CE:98:C8:E3:A5:D2:F7:56:23:E6:F2:32:F3:CF:CD:BB:52:BA
Certificate issuer:       /CN=797bce98c8e3a5d2f75623e6f232f3cfcdbb52ba
Certificate serial:       0197B7EACA6BA2AC9D015DB36B2548547402
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXvOmMjjpdL3ViPm8jLzz827Uro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.mft
Manifest number:          09DC
Signing time:             Sat 28 Jun 2025 19:01:47 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:47 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:47 +0000
Files and hashes:         1: KwgXZqDYcgh4zXYqaxbQknWHXTU.roa (hash: jIwi+9Rze68vMzWY1H0bY4CpBzrr84g1O5yKXA5KfZA=)
                          2: eXvOmMjjpdL3ViPm8jLzz827Uro.crl (hash: Dq06XpZ4in3GDlwr7cHRwqAYcG3/v2dS/PbA4LD/hMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXvOmMjjpdL3ViPm8jLzz827Uro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:ca:6b:a2:ac:9d:01:5d:b3:6b:25:48:54:74:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797bce98c8e3a5d2f75623e6f232f3cfcdbb52ba
        Validity
            Not Before: Jun 28 19:01:47 2025 GMT
            Not After : Jun 29 19:01:47 2025 GMT
        Subject: CN=adfd8b14bfdbbd26680253f7987a6d6a5dac3bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d6:89:bc:6f:61:a3:53:a5:2e:b7:fe:58:ad:
                    6c:0e:58:83:ab:e1:b3:9b:96:7e:3e:f7:0e:10:5b:
                    fa:e1:ee:35:2a:58:fe:4f:2b:6d:83:f0:a6:75:c9:
                    9c:6b:c7:97:c8:a5:c2:78:cd:8b:4e:68:44:c3:ac:
                    c1:1c:48:2f:6d:2e:e1:5f:8a:aa:1c:05:d4:ce:b1:
                    69:1e:b8:31:14:b4:ca:ca:f0:56:d0:e9:ab:3b:0e:
                    f1:31:ab:50:e9:01:b8:ba:04:45:98:9e:98:c4:b4:
                    79:85:e4:ac:b6:ab:a9:d5:4a:16:3b:39:d5:fc:63:
                    7f:45:c0:24:c3:a5:4b:b7:38:c2:37:b8:8f:1d:fc:
                    52:cd:1a:3a:0b:1d:da:b6:7b:fa:2c:2f:8e:c7:a5:
                    cf:9d:68:bf:ca:81:d7:5c:d0:ea:a0:44:06:ce:c1:
                    52:27:80:a7:03:c5:89:eb:d3:84:ce:85:e8:51:36:
                    c2:64:87:eb:fc:26:b2:e4:fb:80:fd:6d:ba:9f:e1:
                    15:9c:a3:7f:0c:e5:89:c1:c3:58:40:23:62:20:22:
                    36:9f:aa:0e:53:47:50:d9:cf:46:0f:0b:a1:48:c1:
                    3c:b5:e0:6e:66:6a:a0:a6:90:36:b9:3d:ef:8e:7a:
                    6e:37:7e:19:15:74:06:75:5c:b5:1b:1c:08:12:e7:
                    ba:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FD:8B:14:BF:DB:BD:26:68:02:53:F7:98:7A:6D:6A:5D:AC:3B:F5
            X509v3 Authority Key Identifier:
                keyid:79:7B:CE:98:C8:E3:A5:D2:F7:56:23:E6:F2:32:F3:CF:CD:BB:52:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXvOmMjjpdL3ViPm8jLzz827Uro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:df:0f:f3:32:e0:14:01:35:ce:ab:e1:2b:f5:64:4d:f9:e9:
         7b:e7:99:d5:40:ec:68:a2:15:2a:da:4b:7f:26:aa:40:1a:a1:
         05:8b:f8:ab:ce:c5:8b:33:51:a5:29:d0:ed:2b:8c:68:7b:12:
         cd:ad:2f:8d:2c:d3:e4:98:1f:53:a0:a0:8c:29:71:ed:1d:5f:
         60:82:41:c7:bf:ea:1c:43:dd:9c:de:54:0e:b9:a2:06:2e:ee:
         05:14:65:ba:cb:90:44:bc:13:55:c1:45:da:ff:0b:17:ac:9f:
         61:df:f0:bc:45:34:bd:4e:ad:f9:c5:99:0a:ed:4c:90:d8:d5:
         eb:da:6f:26:f5:b7:06:d8:b4:32:2c:88:00:1d:91:7d:df:84:
         be:2f:cc:d1:2e:f4:43:60:73:be:26:fd:f0:24:d3:b0:00:7c:
         b6:cc:3b:89:6d:23:b9:e1:a6:4a:66:ae:2a:20:a4:0f:04:c2:
         e2:1b:9b:a6:b3:f8:b1:4f:9e:68:99:e8:58:94:a3:e1:0a:1f:
         d3:55:54:f7:91:96:1b:2b:a8:47:91:43:05:65:53:42:1c:c6:
         df:a1:ee:c7:83:64:c1:0e:27:b3:55:c9:1d:58:e3:ce:c1:d5:
         97:a9:02:83:84:86:98:f9:b1:b5:f9:49:fa:61:b7:fa:d5:dd:
         a3:2e:02:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:18:14 2025 by rpki-client