Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft
File:                     E_xd30njbWmTYwGtIr8kOkcbUkw.mft (raw, json)
Hash identifier:          jljP9USvGMOr1mrWRAHKLLGCX3OlE+Zrmkv3y9u+SSg=
Subject key identifier:   B1:BB:34:AF:EF:B4:65:E1:CB:2F:29:8E:81:05:CD:B5:EF:8C:0E:50
Authority key identifier: 13:FC:5D:DF:49:E3:6D:69:93:63:01:AD:22:BF:24:3A:47:1B:52:4C
Certificate issuer:       /CN=13fc5ddf49e36d69936301ad22bf243a471b524c
Certificate serial:       0197B77CAD50A224D9B10B1D62AD82012511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft
Manifest number:          0CAE
Signing time:             Sat 28 Jun 2025 17:01:30 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:30 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:30 +0000
Files and hashes:         1: E_xd30njbWmTYwGtIr8kOkcbUkw.crl (hash: C4MaGWndk9DnEA0y0XcI5TWfNE5RZKyeoELVrueeq60=)
                          2: TBlASPcR78fuynDDw3RgtcVhkrQ.roa (hash: ZgFGRZrNPcQYHDv0l0eVYG11hp9amh5nevB8oXQScOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:ad:50:a2:24:d9:b1:0b:1d:62:ad:82:01:25:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fc5ddf49e36d69936301ad22bf243a471b524c
        Validity
            Not Before: Jun 28 17:01:30 2025 GMT
            Not After : Jun 29 17:01:30 2025 GMT
        Subject: CN=b1bb34afefb465e1cb2f298e8105cdb5ef8c0e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:29:8e:a6:05:6e:b8:5c:8c:8d:48:92:00:c6:
                    b2:8b:38:a2:8f:41:08:86:87:ea:80:e2:c9:26:20:
                    05:82:b8:b8:bb:28:95:b4:f7:3e:0a:a5:28:cd:6d:
                    5c:32:a4:a2:c9:f0:df:38:3e:2f:f7:58:bb:c9:05:
                    df:4b:d3:f1:fe:44:a6:7d:6b:e1:af:c5:d8:dc:c2:
                    c4:20:3f:13:dd:a1:88:00:5f:70:7f:df:f0:8e:74:
                    7f:c3:7a:83:4f:58:de:8d:ce:68:fd:a9:0e:5b:38:
                    3e:2f:96:ff:df:cc:27:00:79:7b:d8:c3:bc:88:70:
                    6d:a7:a0:f2:77:14:2f:64:31:63:5d:da:e3:fe:35:
                    3f:85:6b:a8:79:a9:a2:30:b8:f4:c4:35:0e:31:1a:
                    3f:4e:69:b8:fa:0b:96:5c:08:00:dd:70:10:95:b2:
                    d5:25:83:a0:42:6b:ee:84:5b:99:35:8e:06:64:a6:
                    0c:a6:9e:fb:eb:ec:f1:72:59:3e:6c:69:e2:c9:42:
                    13:d9:f5:f7:95:97:8a:92:4d:2a:15:4e:81:67:43:
                    3a:c0:00:db:97:1f:dd:fe:54:35:1c:15:69:61:82:
                    76:0e:f3:bb:72:12:37:df:43:a6:c0:c1:a1:18:94:
                    53:9b:86:f6:3d:55:b4:78:01:5d:c4:bd:0a:d2:9c:
                    37:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BB:34:AF:EF:B4:65:E1:CB:2F:29:8E:81:05:CD:B5:EF:8C:0E:50
            X509v3 Authority Key Identifier:
                keyid:13:FC:5D:DF:49:E3:6D:69:93:63:01:AD:22:BF:24:3A:47:1B:52:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:3f:e7:c8:b5:f7:13:cb:cc:b8:3b:8d:19:99:ac:df:bf:eb:
         dd:fe:f4:ac:99:15:c4:17:b1:30:34:1c:c0:23:b9:16:c8:1a:
         99:6d:60:bb:f7:16:92:33:2e:d8:2d:e1:ff:cf:cc:5f:fa:7e:
         97:2b:ce:ce:6b:68:37:14:07:10:e7:8f:cf:c6:ce:73:2a:3a:
         8b:dd:b6:5d:ee:c4:d6:05:81:4d:ba:82:76:58:a3:e6:9a:2f:
         76:a0:5b:b2:60:8a:b9:60:0d:3d:78:b3:08:c1:84:e4:fc:29:
         9b:ed:d6:a1:01:49:86:8e:d4:60:e1:ef:be:9c:8d:3f:d0:5b:
         6d:4b:d3:74:af:75:ec:82:e7:36:67:99:da:53:21:29:4e:78:
         c4:da:b4:94:b0:c1:a8:7e:9d:8f:0a:d2:45:6c:9b:4f:d2:03:
         04:a5:c7:99:0e:dd:26:cd:ea:5d:cd:2c:93:13:80:87:c5:8e:
         18:ee:37:1c:53:38:3c:66:e4:dc:70:00:b5:86:00:fa:98:1b:
         79:9f:b5:e4:98:da:41:b1:21:ff:7b:e2:f6:56:30:87:fe:0a:
         15:55:81:14:90:11:c9:f6:e4:3d:c7:73:46:c4:8a:d1:f9:77:
         1e:00:1d:09:d1:4d:7f:5b:dd:32:6d:16:9c:46:e6:24:4e:36:
         ae:65:a0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:35:54 2025 by rpki-client