Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft
File:                     Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft (raw, json)
Hash identifier:          bGVHLrytJZkMa09AZZUW7CKiJbybFkEbkq44CBVNYhs=
Subject key identifier:   5A:06:8D:23:2A:D6:D0:7E:2F:71:9C:F6:1E:17:C6:C8:13:E4:ED:82
Authority key identifier: 13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60
Certificate issuer:       /CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60
Certificate serial:       0197B77CBA01C89672F53AC0539EEFE3AE06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft
Manifest number:          0A80
Signing time:             Sat 28 Jun 2025 17:01:33 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:33 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:33 +0000
Files and hashes:         1: 2HCBJIX5AwlQw5itkpbxu-ijjmk.roa (hash: PvO3JA7EOrGZaCXFQBX1/p9bbO95IhgeMuSkTUD055k=)
                          2: Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl (hash: +UmYzf2uplzSy4TXdL5iQeCo/bKucycgp1YicEo0igo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:ba:01:c8:96:72:f5:3a:c0:53:9e:ef:e3:ae:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60
        Validity
            Not Before: Jun 28 17:01:33 2025 GMT
            Not After : Jun 29 17:01:33 2025 GMT
        Subject: CN=5a068d232ad6d07e2f719cf61e17c6c813e4ed82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:6a:90:18:8a:d3:a3:15:5c:32:83:49:1b:
                    1f:da:d2:37:18:cd:ce:5c:dd:1c:ec:79:e0:d5:8e:
                    88:8b:8c:c6:6b:a7:99:f2:2a:50:ba:f7:8c:88:cd:
                    a5:9f:65:4a:9f:de:b5:8c:13:e5:8d:1c:64:2a:66:
                    bc:63:28:6a:1a:9f:05:01:6c:1c:fc:79:aa:f1:dd:
                    34:a3:ab:37:c9:f7:3b:5f:26:d1:d9:94:84:64:a6:
                    62:fa:7f:96:37:a2:14:ec:77:9c:aa:5b:5d:5f:f0:
                    af:a7:37:3e:8a:1f:92:b3:f9:83:c2:d8:7c:a1:a8:
                    d0:32:11:31:9e:06:30:3c:ed:44:6c:36:eb:f5:fd:
                    c6:e3:63:5a:03:7d:6c:25:6b:21:83:93:40:8d:12:
                    21:41:13:e8:cb:51:31:f0:6f:b0:89:ae:f5:1d:96:
                    68:fd:5b:f8:b6:9e:ad:b2:16:c5:02:a5:77:24:48:
                    ee:59:4e:f3:db:50:39:57:cd:d1:4a:3a:7a:fb:b8:
                    3a:58:6b:4d:f7:d6:b6:ef:9e:c8:70:74:e1:13:ee:
                    26:b1:74:b1:64:3d:0f:cf:ab:59:31:9f:15:b4:2d:
                    07:a9:2e:3b:ae:89:b1:9c:e2:7f:61:b9:67:0b:19:
                    90:e8:69:64:85:86:13:7e:ba:39:fb:4d:6a:eb:7c:
                    0d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:06:8D:23:2A:D6:D0:7E:2F:71:9C:F6:1E:17:C6:C8:13:E4:ED:82
            X509v3 Authority Key Identifier:
                keyid:13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:9f:86:ae:f0:10:67:c0:3c:d4:b6:4e:87:46:20:01:0a:09:
         d8:af:bf:7f:fe:2f:89:1f:84:29:19:d5:d5:8b:f5:b8:f9:07:
         51:d9:3a:d9:a3:3f:74:e3:67:7f:fc:80:fe:81:55:89:c6:c7:
         fe:ad:a7:f6:8c:b2:4f:1c:b4:21:5f:8e:a6:51:3a:2a:df:6b:
         4c:2e:59:53:4e:7b:af:9e:5d:e0:95:78:0e:77:c7:67:c3:b5:
         fe:ce:4f:0f:9f:1f:f1:23:d0:e7:d2:2d:e0:e2:03:5d:bd:a6:
         e0:a4:ce:a7:df:f5:ab:e5:0f:f9:0b:01:dd:f3:52:77:e4:cc:
         55:3d:f6:54:ae:d1:86:71:f7:0d:99:a1:3b:3c:0b:71:2b:52:
         ab:f7:b9:ba:ae:36:17:93:b4:50:15:5c:10:fb:28:47:a8:79:
         dc:2b:97:b9:96:8b:6d:20:f8:07:88:44:f7:4b:72:0d:88:df:
         f5:34:a4:91:1d:77:eb:9a:3d:6d:fc:c1:a0:cf:ea:aa:c6:8c:
         b2:42:b6:4e:f2:de:e7:fe:fc:fd:ae:b6:db:38:3d:9a:f9:b1:
         45:f1:c7:ba:9f:4c:e9:64:41:2e:9d:5e:c7:40:63:aa:5c:c7:
         8e:4f:e1:33:5b:59:0f:d6:bb:2d:ca:37:15:6c:36:19:96:bd:
         19:02:03:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:45 2025 by rpki-client