Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
File:                     250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json)
Hash identifier:          iyJHUMHR3u4yiLaTnC42UtKyHWjkl+cy09CKtNOLicI=
Subject key identifier:   B7:35:8F:7E:35:5D:DE:F0:38:6F:05:EB:78:F1:DE:B2:B1:9B:7E:5F
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Certificate issuer:       /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial:       0197B70E65BF1F1B35CBD98D34A28C5755B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
Manifest number:          117D
Signing time:             Sat 28 Jun 2025 15:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:03 +0000
Files and hashes:         1: 0c-KKappZ1t73aXjS8mz1x-xTGc.roa (hash: MAa3tSzCnjrh/og+z4XVJnuDQ4AqmSQvPQCYBTfEoDQ=)
                          2: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: oJDwLJ/jhOihZDZCZsLwzNnwYYfZOsoq7bIcQj2rH+E=)
                          3: 3sv6NKDpba_DUykmu28n6vWbI8U.roa (hash: gUh8eARhI2X9S3x1fvxAhLVuOISp5wl4VqYYPGnDg8Y=)
                          4: 4rupNMtZnDN0QSWru1RNhLDuJIo.roa (hash: z4IbiN1+w7zdJy/d9hWZDYM0E9ZzQh9TzT+f2XEsa+o=)
                          5: 67A2CgJxemu3UONyMlCVAtsKdlY.roa (hash: xvBw7mNRlOl8XFOFSPthYphIDW4EGlwFC4zOhUwlCv8=)
                          6: E2YGCkvl1qJmLxaFsCR58I4gibo.roa (hash: xheLTw+nhNWSmWNkdWISArZADpVzS+Ca89hGltJJMno=)
                          7: Sp4iVd_pOq560eUzaVqvX_2Gqas.roa (hash: JgPqfPTZcwMnjOQsf/Q1+96TPKUck5H6ntnLpmTpKbM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:65:bf:1f:1b:35:cb:d9:8d:34:a2:8c:57:55:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
        Validity
            Not Before: Jun 28 15:01:03 2025 GMT
            Not After : Jun 29 15:01:03 2025 GMT
        Subject: CN=b7358f7e355ddef0386f05eb78f1deb2b19b7e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:50:53:01:76:07:92:9f:2a:40:37:9f:6a:93:
                    9f:f0:6c:4b:04:e3:3f:92:4b:ac:2b:33:d5:ac:3b:
                    0f:d5:bd:24:c9:35:34:0f:fe:31:48:7d:11:52:1a:
                    6b:b9:40:0c:d5:5b:57:fb:99:2c:fd:59:0e:02:8d:
                    03:ee:8b:d2:00:b9:e0:a9:c0:21:8d:ac:db:f3:50:
                    13:c5:45:2e:0c:68:92:83:8f:58:41:41:f0:a7:62:
                    dc:c6:80:b2:5d:52:a9:72:95:e1:0a:ae:5a:eb:88:
                    9a:3d:8b:46:5b:cf:cf:57:2d:38:9d:2c:1b:91:6b:
                    7d:98:58:e2:25:86:0d:4e:1e:04:7f:66:39:01:a0:
                    34:74:df:1d:df:45:09:86:61:32:cb:ee:3c:8d:f7:
                    be:3f:eb:ce:34:15:c8:ad:4a:4b:94:43:5d:f9:ff:
                    c6:7e:5b:ca:6d:ac:26:87:1c:3f:f5:5e:c8:2c:53:
                    bd:09:7c:f9:14:3c:6e:dc:fb:d5:91:ca:3a:a0:60:
                    f0:47:5f:9a:2e:57:a4:7e:8a:fe:52:06:6d:4a:f2:
                    12:34:5c:6c:c3:6d:dd:0e:86:27:82:d3:dd:42:d3:
                    4a:b0:95:25:0f:af:51:5a:61:99:98:14:8f:9e:0d:
                    cd:de:a6:43:cb:57:89:cc:3a:41:59:bf:67:92:25:
                    f0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:35:8F:7E:35:5D:DE:F0:38:6F:05:EB:78:F1:DE:B2:B1:9B:7E:5F
            X509v3 Authority Key Identifier:
                keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:58:a1:02:0f:e7:65:ad:4f:fa:e8:71:6b:ee:bd:54:50:a5:
         c1:78:f7:ad:8e:61:d9:00:4a:9c:09:37:4a:7e:f7:ac:33:09:
         08:5a:c6:bd:6a:b1:56:d5:bd:64:46:56:66:0e:50:77:9c:1e:
         84:4a:7e:ea:d1:b5:ce:62:82:30:f3:4a:2f:d9:db:d2:89:55:
         e3:38:30:85:9b:81:1f:66:45:0d:23:58:35:bc:5c:19:08:db:
         84:ec:93:c7:0c:90:cb:90:98:c0:ed:79:f9:6f:d2:e4:31:99:
         32:b0:d0:40:36:93:ff:2e:bd:38:b6:da:42:40:f0:61:b1:9a:
         6a:9b:08:91:cf:37:0f:a2:2e:29:ec:2a:33:7e:0a:a6:72:6a:
         51:68:71:c5:cf:57:a3:9e:42:a5:b0:cb:5e:57:35:a8:c8:8c:
         28:8c:c3:68:ea:d8:b8:db:90:f9:1f:32:8b:4d:1c:6d:51:45:
         45:27:fa:fb:b2:98:26:2b:08:86:0d:90:98:b4:33:01:f4:f3:
         83:89:ab:c3:ed:d6:c7:e7:37:b7:83:e2:c6:8a:0e:6f:55:22:
         88:33:89:ab:96:fd:be:2b:e6:55:31:31:50:5a:08:78:8c:9d:
         02:78:82:81:98:89:63:f9:ba:f2:4f:19:4b:2f:ee:9b:3a:31:
         6b:a4:17:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:31 2025 by rpki-client