Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
File:                     ECgK10HnIygIXV-leXqEUfX7Ajg.mft (raw, json)
Hash identifier:          Tj5nm9LWwVn7WlVX7GK5yzBt3SN+dFlWfdSMNuvTxwg=
Subject key identifier:   57:43:9A:F0:83:EF:81:F1:F9:1A:43:46:AC:03:0C:FA:7F:89:FE:8E
Authority key identifier: 10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38
Certificate issuer:       /CN=10280ad741e72328085d5fa5797a8451f5fb0238
Certificate serial:       0197B632C48A6564E79857FAD7A0CBCF47F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
Manifest number:          05A9
Signing time:             Sat 28 Jun 2025 11:01:09 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:09 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:09 +0000
Files and hashes:         1: 0WB7Bx7_enfl066TmQSfosTy_eE.roa (hash: 3RwaEA2cdgjXvhrk9+eNZlduveecPdwtMIhFIo5EmUE=)
                          2: ECgK10HnIygIXV-leXqEUfX7Ajg.crl (hash: MVxsy/YQSKBqLHYhgajrTF5Rx09broF+AReVqlZ/fNQ=)
                          3: fATKMXoOGJ2KbtRcWiMp0a19gZ8.roa (hash: dQx3XShBA2ggohUWFd8E2u2bLxwMwVqrXUUReX+nyv0=)
                          4: oJELLABa0xvOzeDJ8-0ROcoGDzU.roa (hash: eMpca3L46CdM/yY9Tb5GPWOeeCVHM7SNfiUzaVfbfTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:c4:8a:65:64:e7:98:57:fa:d7:a0:cb:cf:47:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10280ad741e72328085d5fa5797a8451f5fb0238
        Validity
            Not Before: Jun 28 11:01:09 2025 GMT
            Not After : Jun 29 11:01:09 2025 GMT
        Subject: CN=57439af083ef81f1f91a4346ac030cfa7f89fe8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ba:39:34:8d:6a:b6:d1:5f:2a:f2:59:5f:16:
                    ef:d3:25:a0:e4:6b:48:72:1f:3f:60:18:d8:0d:b7:
                    74:02:0d:21:0a:be:dd:fd:66:ff:94:f5:ac:db:cc:
                    96:b5:e8:60:c0:00:03:c9:f8:c9:1d:55:f6:4a:e7:
                    84:22:27:f6:5a:68:5c:c7:07:78:8d:41:fd:3d:8f:
                    fa:44:a7:38:8e:36:80:29:41:32:47:16:ae:da:b4:
                    81:1b:a4:d4:5b:4e:23:df:c8:4c:1e:14:bb:a5:bf:
                    b8:dc:36:92:5e:ef:b0:2f:9b:35:56:d1:a0:2a:01:
                    33:23:f9:7f:a9:0f:e1:fa:31:ce:3a:57:77:f1:07:
                    f4:ef:71:f0:61:49:94:2c:07:ac:78:9f:46:f8:15:
                    e9:58:e5:84:87:b1:cc:ed:1b:cd:93:bc:dc:73:fb:
                    8f:37:1e:3f:13:fb:e4:2d:b6:00:5f:44:a5:82:ee:
                    33:45:b8:76:de:1b:eb:a3:5e:a9:f5:55:df:3b:8a:
                    c1:4a:6d:02:08:52:00:90:3c:f0:dc:09:94:85:f8:
                    ce:bf:18:d4:de:2f:4b:c3:0e:dc:dc:27:fb:bb:ab:
                    a3:51:ee:f0:8a:5a:c9:73:3e:e1:b1:96:fd:c6:33:
                    99:c4:68:73:82:e5:33:03:0a:2c:72:08:c7:1d:a4:
                    99:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:43:9A:F0:83:EF:81:F1:F9:1A:43:46:AC:03:0C:FA:7F:89:FE:8E
            X509v3 Authority Key Identifier:
                keyid:10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:6b:a0:f9:bf:b3:5c:4e:81:1c:ff:80:56:a3:1b:ee:9a:9c:
         94:31:3a:b4:c9:91:80:38:4b:aa:8d:30:cb:52:f9:b7:13:8b:
         ef:33:b0:02:58:e2:84:90:e5:85:e6:d6:e1:e2:d3:c6:07:26:
         7f:54:e1:53:72:2c:b7:c3:05:b4:25:11:81:d4:60:f9:cc:32:
         14:16:a8:2f:b8:f5:7f:33:41:bb:59:c6:09:86:3c:97:7a:44:
         0e:92:97:ea:79:b2:54:6f:20:03:6f:57:93:c5:07:89:2a:80:
         d9:32:0f:c7:c5:a1:07:84:98:e1:5c:62:60:a4:e5:f7:05:de:
         89:35:00:d3:c1:8e:e3:b3:63:b8:6c:23:7c:a6:14:c5:55:d1:
         68:63:7f:43:33:9e:e7:ad:c0:d1:e8:35:39:e1:c9:7a:fa:a8:
         32:28:4a:04:bb:eb:d1:5f:eb:23:43:ea:08:ad:63:60:a4:96:
         73:9f:5c:e7:bf:69:fb:0d:8b:69:6e:80:ae:27:a1:57:cd:e1:
         f0:8a:8d:6e:a5:d7:0f:9c:bf:3e:55:bf:2b:b8:c1:59:7e:dd:
         02:ae:80:ac:82:31:ae:54:16:f4:6a:fe:a3:63:2c:55:0d:ed:
         3c:78:49:9d:4f:67:65:0d:10:ab:c0:bb:55:5a:38:70:17:4e:
         2c:5c:c9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:13:42 2025 by rpki-client