Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
File:                     1zSS5NJcO70MXiDFqF7LIuyXNgo.mft (raw, json)
Hash identifier:          ANgF0yUQk6UuoEG1sioMTARHHME4/r7ikndXvfKYfX4=
Subject key identifier:   EB:EA:C2:E2:77:D5:83:16:EB:DB:9A:DD:0A:C3:EC:E0:FC:F9:FE:E2
Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
Certificate issuer:       /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Certificate serial:       0197B77CB23F9AA8D1824972E56FE8EC246D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
Manifest number:          0EA4
Signing time:             Sat 28 Jun 2025 17:01:31 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:31 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:31 +0000
Files and hashes:         1: 1zSS5NJcO70MXiDFqF7LIuyXNgo.crl (hash: peTS1fS1NRx20Q3g5grCnr+c4eNotziu7keubgi8288=)
                          2: 5xcSPqM5FqBggD3xhK_H_WBIj8c.roa (hash: 6UaEvDEdIHAI+VC/wqQ4jP8F3NZ9weH+TS5AN/LWzwY=)
                          3: NDt_WTrjoPL0cL8oTyPCRgNakA0.roa (hash: Hp1RzwRCWlMoxPuIUolhJVdqweoyQ9ReAqFHs5ETdBY=)
                          4: oTJ3WFdDrwDwPRwq0KV_9933-4Y.roa (hash: mhBZetUkSVK2917d65VbBa4ZgrfV11qg/and0h4flas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 17:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:b2:3f:9a:a8:d1:82:49:72:e5:6f:e8:ec:24:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
        Validity
            Not Before: Jun 28 17:01:31 2025 GMT
            Not After : Jun 29 17:01:31 2025 GMT
        Subject: CN=ebeac2e277d58316ebdb9add0ac3ece0fcf9fee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:74:0f:27:71:ec:65:77:4d:3f:02:ad:68:e7:
                    79:79:5b:c5:6d:0c:a8:67:14:0e:3b:66:2f:ff:e9:
                    7f:3b:8e:73:96:ba:09:ce:28:93:84:8f:7c:9a:fb:
                    1d:e5:e0:85:99:a7:56:1a:b2:83:54:52:82:8b:b1:
                    04:bc:fd:94:51:d1:ff:2e:2d:a3:87:3b:25:cc:c3:
                    b0:bf:8f:53:3e:0d:f4:a6:86:b1:69:a6:16:49:50:
                    8c:dd:f4:a5:59:d5:3e:ed:c9:40:a1:ad:a4:43:6d:
                    08:af:e9:7c:c9:05:ec:9e:20:04:d1:14:46:e2:db:
                    7f:5a:a4:20:c6:d1:2a:d7:da:38:9b:a7:7a:ad:b0:
                    89:eb:96:18:32:5a:6a:4b:c3:4f:c6:ce:71:1f:4f:
                    2a:90:91:81:6b:8b:97:6c:43:10:37:61:d6:1d:52:
                    d3:f9:3a:a3:09:6e:c1:54:00:8a:6c:3f:3b:fb:48:
                    51:6a:d1:bb:d6:ff:e4:0a:71:83:ef:f8:97:8e:54:
                    93:70:e3:ed:42:4b:00:5d:e7:33:00:c2:84:c4:12:
                    3d:63:d1:99:a3:f4:ea:88:73:30:63:eb:6e:25:ae:
                    bf:45:b9:15:b8:fb:94:eb:14:e3:d0:c3:6a:9d:17:
                    0f:67:5f:d9:45:2b:cc:72:1e:fc:8f:c0:d7:8c:e1:
                    bd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EA:C2:E2:77:D5:83:16:EB:DB:9A:DD:0A:C3:EC:E0:FC:F9:FE:E2
            X509v3 Authority Key Identifier:
                keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:c2:c7:42:a7:f1:c3:3a:d6:3c:e7:96:70:1f:f5:5c:2a:5f:
         dc:76:83:75:da:26:13:70:6e:fb:64:3a:e6:6d:e9:c6:a9:7f:
         46:68:b1:21:84:c2:ce:ed:52:e8:12:ef:c3:71:3f:40:e1:a7:
         fd:8a:e0:20:ee:cb:fa:12:8d:95:e1:ea:a2:ee:57:82:bd:dd:
         e8:94:f8:81:9e:95:6a:47:a5:c5:b1:ce:eb:eb:09:98:b3:a4:
         4b:a0:60:b8:f1:14:43:39:f1:bc:99:d2:19:73:10:bc:48:eb:
         16:7f:ea:98:cb:81:f1:41:7e:56:d3:10:94:37:60:f5:7c:a9:
         a2:49:3b:40:7d:ed:83:48:34:61:c4:cf:56:09:e9:5b:0c:44:
         e2:f8:1a:83:b7:d3:ed:de:ba:f2:92:85:89:92:52:29:66:35:
         21:12:5e:1f:4a:32:e9:a7:bb:5c:bd:2a:b5:bf:1d:a1:59:68:
         07:e4:4e:6b:ee:72:a8:c5:d3:dd:67:48:ab:f9:88:1b:11:27:
         bd:ea:fe:77:64:d2:69:de:e6:1a:ec:e4:46:b7:1d:db:c7:e7:
         7f:36:73:9c:f5:43:46:c0:46:46:dc:c6:c7:40:dd:51:4a:f9:
         57:30:b6:72:b2:e5:83:d9:16:eb:78:a9:9b:29:94:e5:89:be:
         8a:5a:de:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:44:32 2025 by rpki-client