Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
File:                     MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json)
Hash identifier:          VS5sDy8O5L/1NgaVMAW9Ag9Uv5zxWV4PROrf96fTg3k=
Subject key identifier:   5E:A0:47:90:CA:0C:80:1F:05:D2:06:63:9B:5B:12:31:91:08:8F:FF
Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
Certificate issuer:       /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Certificate serial:       0197B63278FE0835A7037C058CA323B08C98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
Manifest number:          07F0
Signing time:             Sat 28 Jun 2025 11:00:50 +0000
Manifest this update:     Sat 28 Jun 2025 11:00:50 +0000
Manifest next update:     Sun 29 Jun 2025 11:00:50 +0000
Files and hashes:         1: 6csp2LeD7vly2n1j-VpIEsucAhQ.roa (hash: WR+qcQQTkccFoOguSbUEIuw7HhStcNOST97gvk9zp7k=)
                          2: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: 6a4SZEy6TkWs02aTlhIKzvkcHc6cJxdVGkdtZhZTpXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:78:fe:08:35:a7:03:7c:05:8c:a3:23:b0:8c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
        Validity
            Not Before: Jun 28 11:00:50 2025 GMT
            Not After : Jun 29 11:00:50 2025 GMT
        Subject: CN=5ea04790ca0c801f05d206639b5b123191088fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:37:bf:f9:a8:bc:c9:21:56:0f:fc:91:4c:eb:
                    ec:af:5b:20:da:cf:a5:0e:69:ff:32:d7:06:ca:fa:
                    0d:cd:db:62:87:0e:d2:9a:c1:4e:ab:f8:10:82:4b:
                    d2:29:48:e0:a3:4a:b8:68:54:35:dd:cd:d0:13:6d:
                    b7:61:f7:91:63:a0:42:0c:d6:cf:b5:72:8b:18:8b:
                    3d:0e:97:ee:b4:56:f8:19:08:39:d0:24:bf:51:d4:
                    9c:96:21:b6:23:40:1f:bc:5b:cd:47:a7:c2:b2:8f:
                    b5:cf:f2:8d:56:18:32:5f:77:5e:a5:03:63:16:5d:
                    0e:73:dc:1b:0f:da:75:98:f5:cc:cb:01:ff:87:08:
                    2a:01:ae:58:df:1e:06:34:c5:11:aa:18:88:a2:e1:
                    fd:2c:52:14:40:b3:02:01:bd:59:41:30:a6:b9:0a:
                    9f:25:b6:76:e3:0f:4f:92:22:f6:89:a7:18:81:d5:
                    39:25:48:8b:d9:c3:ca:72:5c:d5:f1:1b:19:77:20:
                    18:d5:ee:0c:c5:db:69:6a:20:b9:f9:ea:80:08:86:
                    18:9c:a7:ad:3e:05:da:a9:f0:51:b3:3c:b0:68:81:
                    57:4a:f1:fb:61:28:54:a8:4a:f8:99:af:59:6c:da:
                    8f:0b:8a:63:e4:ff:94:91:e5:80:3c:f1:89:2a:ee:
                    93:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A0:47:90:CA:0C:80:1F:05:D2:06:63:9B:5B:12:31:91:08:8F:FF
            X509v3 Authority Key Identifier:
                keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:7b:fa:5b:35:dc:b5:2f:af:c4:39:8b:72:87:6b:47:c9:95:
         48:91:da:fe:eb:e3:ce:2d:7a:86:2c:fb:48:e7:36:ea:59:35:
         4d:72:38:e3:58:cc:15:a1:f5:12:d8:ab:35:d3:ce:f0:dc:bc:
         ae:f4:f1:e0:b5:9a:60:37:ea:42:36:a1:b9:60:c3:a9:44:21:
         63:92:8e:65:8f:af:e7:a9:dc:a6:d7:e9:cd:42:88:3a:eb:a9:
         77:c5:61:c7:ea:9e:1f:53:4f:42:5b:13:30:0c:3f:f4:6d:2c:
         7f:a8:b5:8a:05:82:d6:ea:17:f7:7f:6f:67:9e:99:fc:4b:49:
         cc:77:8d:12:f3:12:92:24:7e:b9:16:4b:c3:7e:9e:fb:d3:50:
         9d:22:1c:46:94:33:0b:6d:ee:f5:c5:65:7a:d9:5f:7b:cc:ea:
         c8:a3:bb:2f:4c:01:2f:41:41:e5:ad:a7:e3:e8:d9:e7:e4:bf:
         45:5e:1d:7b:2b:d5:5d:15:7d:1f:97:b0:a9:4b:b5:eb:0c:38:
         57:09:3b:67:44:6f:a3:13:da:a7:8f:53:a8:17:a2:0a:54:30:
         bf:3b:7f:c5:79:69:ff:8a:c2:cc:f6:a6:27:69:a5:eb:89:7b:
         ab:13:c8:66:28:8c:c1:ed:46:56:5a:56:55:5a:6d:55:8b:e8:
         bd:fd:c9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:48 2025 by rpki-client