Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File:                     3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier:          Er1sONgyKZGnxYIOSsIEORfG6YCfrKdpmzaH9ZQ4KBI=
Subject key identifier:   0D:55:5B:00:69:E0:8B:6F:70:15:AC:36:AA:38:69:1B:1B:EE:6A:F9
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer:       /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial:       0197B6A1330E593AC31876AB2FAF14DE2B67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number:          062D
Signing time:             Sat 28 Jun 2025 13:01:46 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:46 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:46 +0000
Files and hashes:         1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: EH4qCcBSHIW8oP9mSsz07NOOVF49YNzWruitOayW0wc=)
                          2: HrIwTwMD6cd99R3d7bEiTOryXZg.roa (hash: 1wrHqn0lkUk+GnZl+JBgqFqtnLiVA3gNpwduqpO2T9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:33:0e:59:3a:c3:18:76:ab:2f:af:14:de:2b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
        Validity
            Not Before: Jun 28 13:01:46 2025 GMT
            Not After : Jun 29 13:01:46 2025 GMT
        Subject: CN=0d555b0069e08b6f7015ac36aa38691b1bee6af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c1:6e:5b:7d:9e:46:52:a1:72:bb:dd:f5:4b:
                    36:4d:c4:74:f6:cc:8c:07:5f:08:2a:db:fc:c7:87:
                    ce:a5:fa:0c:8f:70:ba:c6:ed:00:7c:39:8d:64:dc:
                    d6:a2:1e:69:df:05:3d:4c:59:17:22:47:ba:bc:b8:
                    5f:83:5b:e7:dc:c9:ed:1c:1b:b9:56:a1:f0:bf:03:
                    44:c7:cf:b2:61:70:b7:ba:cc:0c:78:71:33:ed:f8:
                    59:1d:4a:6c:2f:af:e7:69:58:ab:94:dd:b8:c4:f9:
                    0e:ee:ee:6b:dc:b7:a7:5d:f6:fb:23:dd:87:1b:b9:
                    53:84:29:6e:31:f1:13:16:3a:81:36:7a:34:33:95:
                    d9:ac:d5:14:9a:fc:94:90:06:5a:d2:59:a4:6b:09:
                    87:fc:22:2c:39:29:fc:26:61:97:e2:c9:8e:08:63:
                    bc:8a:fb:6f:21:40:dc:8d:ab:52:22:08:d0:78:0c:
                    c9:62:bd:68:ae:80:9b:9a:5d:4f:6d:03:aa:57:0c:
                    41:76:dd:e3:71:2b:8e:ae:87:31:84:0a:1c:70:ae:
                    ee:69:42:56:85:87:dd:1f:32:f3:7e:6a:c6:c9:f2:
                    09:00:96:4a:e6:16:06:2b:48:59:15:2a:b7:4c:73:
                    57:fa:39:ab:65:c9:65:f5:fb:87:22:3d:2e:a2:b2:
                    cb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:55:5B:00:69:E0:8B:6F:70:15:AC:36:AA:38:69:1B:1B:EE:6A:F9
            X509v3 Authority Key Identifier:
                keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:22:02:69:14:7f:fb:3a:f9:5c:f8:78:80:01:e6:b7:07:e6:
         e7:3f:9b:d3:af:81:ab:a9:be:13:5f:d0:fb:b3:5f:2c:3e:de:
         b9:ba:87:f8:aa:e7:cc:45:8a:2d:23:49:e3:e9:10:e3:18:bb:
         5a:b0:b6:5f:27:cb:be:a0:c3:b0:12:b8:ab:33:10:7f:c3:36:
         c5:b8:c0:29:7f:34:a0:0a:de:62:5e:39:22:00:04:d4:23:c8:
         4f:9c:15:4d:f8:b2:9c:ae:53:a1:bc:b5:7c:a8:03:ff:a1:ba:
         72:32:70:36:73:4c:eb:19:8c:55:50:06:51:47:68:24:b7:e9:
         d0:bf:4d:68:1c:b7:2b:be:a6:5a:b1:7d:45:2d:22:52:b3:9b:
         4d:3a:f1:c5:01:03:c5:84:25:48:b6:a0:75:cf:7f:eb:61:c6:
         ef:3d:f3:24:46:7d:84:32:0c:5b:49:fc:9a:57:3d:4e:8b:a0:
         6e:8c:dc:a2:30:2a:57:d5:ea:d3:02:64:8f:11:b8:5b:ff:76:
         2f:f4:12:81:9b:2f:72:09:15:5b:2e:ff:05:bc:f4:bd:af:9d:
         77:dc:eb:50:60:01:6b:e7:b7:a3:de:66:b8:30:1e:1d:f6:69:
         ca:19:97:89:c9:9c:3c:d7:56:03:9b:8e:2b:eb:02:76:ea:e3:
         3e:af:1b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:25 2025 by rpki-client