Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
File:                     0y0esOyO9aIwRXqXAueqOWhYGAw.mft (raw, json)
Hash identifier:          IwaJ5G+APKsCtgEtBIr4RQxVX3g9XyyOxWb7gPXy3bE=
Subject key identifier:   83:A9:54:61:1D:5F:DF:F2:42:90:CF:3E:56:F1:2D:EC:F2:11:6A:17
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Certificate issuer:       /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial:       0197B7EA304B49C34B7811C9DE1E6DDD4A30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
Manifest number:          09C4
Signing time:             Sat 28 Jun 2025 19:01:07 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:07 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:07 +0000
Files and hashes:         1: 0y0esOyO9aIwRXqXAueqOWhYGAw.crl (hash: tlbt+/xdyiOtJe4mJ6Ae6+BWUVJIrv0NX64HGxnKXTA=)
                          2: sK3ZBrWvjwd-LkmXtEXI8mmDAIM.roa (hash: OKskFb0lNjQYUF2WZOv8rV/0FbI0umbg74GYmLaJ8S4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:30:4b:49:c3:4b:78:11:c9:de:1e:6d:dd:4a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
        Validity
            Not Before: Jun 28 19:01:07 2025 GMT
            Not After : Jun 29 19:01:07 2025 GMT
        Subject: CN=83a954611d5fdff24290cf3e56f12decf2116a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:78:08:b4:bf:e6:d2:20:5f:d4:4c:31:cd:69:
                    8d:95:ec:5c:9a:de:ef:cc:22:38:96:07:81:6b:57:
                    e4:3c:29:3c:0c:9e:a2:35:12:27:ff:08:22:6a:9b:
                    fe:03:e8:10:38:d3:f8:bc:4f:c1:d4:68:fb:34:4c:
                    52:6c:5b:ff:3b:99:fb:f7:fe:c1:c0:3f:12:fd:45:
                    02:03:2b:9f:99:a9:34:f4:f9:85:ff:bd:0a:e1:25:
                    10:c8:b6:bb:8b:31:85:41:76:0d:e9:ac:84:74:5b:
                    54:46:b2:f7:a8:6d:27:cb:ff:bb:6d:5b:25:7a:9c:
                    e0:3e:a2:d1:19:06:c1:d9:5c:fe:0e:f9:11:1e:e8:
                    d7:cf:bc:85:71:8f:a3:7e:38:f8:98:50:3c:74:e4:
                    1b:26:31:cf:10:e4:ba:aa:ed:93:4c:8e:76:ee:a5:
                    e6:c4:e9:b5:cf:c7:81:6a:1e:44:fe:b9:7b:50:c0:
                    96:b9:29:b7:38:cf:89:e8:4a:71:e8:7d:be:24:df:
                    ef:03:9e:a9:af:73:e1:ad:13:d5:a2:85:18:ae:cc:
                    b0:f1:bd:2b:e2:c5:ec:9e:56:9d:9a:99:0f:60:26:
                    7d:1b:1d:8a:20:56:d9:58:cf:ed:80:f8:a8:58:d9:
                    6d:4d:f7:dc:4f:de:c9:c9:be:44:46:61:d6:09:a4:
                    80:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A9:54:61:1D:5F:DF:F2:42:90:CF:3E:56:F1:2D:EC:F2:11:6A:17
            X509v3 Authority Key Identifier:
                keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:42:d5:e6:f3:d0:31:79:2e:57:83:a9:87:a7:52:53:6b:a9:
         0c:1b:15:6a:4e:bb:41:40:ff:b7:19:e5:8b:6e:8a:46:bb:9a:
         87:88:94:95:9c:a3:be:be:d8:dd:98:40:9f:c2:27:c1:e5:98:
         c1:bf:d3:ba:0c:3d:23:f3:4c:ad:88:60:a4:13:c2:a4:af:3c:
         e9:bb:5a:15:d0:f9:13:f0:df:79:6d:44:1a:7b:2d:74:6b:ff:
         f0:c0:7e:96:f9:14:37:9b:d5:1d:19:0b:a3:70:fa:91:ed:99:
         72:d3:1b:20:77:86:bc:81:51:26:87:ef:ae:81:b3:32:6a:98:
         11:6a:2d:52:52:47:27:7f:bc:8d:49:2e:e6:da:a1:9f:13:4f:
         3b:03:d1:e9:21:da:b8:71:f9:cc:8f:bf:c9:77:92:62:96:c3:
         b8:3f:a7:d9:eb:8f:f9:ed:a1:3d:da:86:93:df:93:37:bc:4a:
         17:45:81:87:c7:a3:62:38:13:f5:02:80:97:29:66:70:6c:c9:
         b2:8f:7a:54:88:94:3c:36:18:16:7e:f1:cb:e0:65:62:b6:d0:
         44:ce:bf:6f:ec:e0:7e:17:e6:ed:38:bc:94:f5:86:f5:97:35:
         28:81:ea:4f:cd:73:6f:5d:e9:ac:8d:21:45:85:c3:d3:32:f1:
         35:4f:04:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:08 2025 by rpki-client