Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
File:                     E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft (raw, json)
Hash identifier:          ZTc68BFxiwnIXxkO1yns55joBAGTzimj1MfmQRRDARI=
Subject key identifier:   9D:E0:9D:2D:A5:1B:3F:19:A6:CA:FD:53:19:00:2F:07:02:35:68:A8
Authority key identifier: 13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
Certificate issuer:       /CN=13764a52c85e07e33749743d23a5a24d096df147
Certificate serial:       0197B6D75300F6D99FD2FFE36A4AFC1FC2F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 14:00:53 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:53 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:53 +0000
Files and hashes:         1: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl (hash: WTnTWxLPTgramyHixbfK+KLqYMAsliT8wOR+CdT/Nic=)
                          2: QCvbSuskCQwLxFQrUoOouHi3diY.roa (hash: sXGvHwha1X8v4xaWgUMHB+2ZrDbhHWTJfZknYl2gSe0=)
                          3: dWbs3GSCk40VoHUjYwOcmy7b-Zk.roa (hash: B1PLAXt5mt+DEIRs6h0vcjXyP629Yb4hYyTjCDjQz0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:53:00:f6:d9:9f:d2:ff:e3:6a:4a:fc:1f:c2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13764a52c85e07e33749743d23a5a24d096df147
        Validity
            Not Before: Jun 28 14:00:53 2025 GMT
            Not After : Jun 29 14:00:53 2025 GMT
        Subject: CN=9de09d2da51b3f19a6cafd5319002f07023568a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:57:b7:d8:87:ef:1e:19:b0:70:99:4e:56:02:
                    10:ca:12:81:d5:13:bd:f3:a5:7f:99:a0:22:b2:18:
                    86:4a:78:a5:0e:10:93:92:10:3e:09:6f:05:a2:b8:
                    22:dd:a3:aa:22:99:b5:0c:bd:68:37:90:3e:bd:da:
                    22:8a:19:ed:92:fc:9c:94:19:8a:8d:14:cf:b7:b2:
                    a7:5f:46:df:f5:7d:fb:74:df:70:ce:62:4d:ae:8c:
                    7d:19:7b:7b:3e:f6:2c:7d:1a:ae:d6:01:47:56:23:
                    1e:06:2e:13:c4:6e:2e:77:ff:ef:2e:c3:8b:c1:d6:
                    8d:9d:ae:93:b0:76:d6:54:1a:6f:80:23:4f:0d:f7:
                    ac:d0:79:a3:4a:6b:4d:99:65:67:70:5a:fb:d8:58:
                    46:24:a0:5f:e3:9b:c8:a0:f3:95:1f:78:2d:ab:97:
                    4e:64:c7:42:8b:45:3e:29:d1:39:3d:a5:1d:9d:b9:
                    d7:35:c1:31:40:e7:5e:83:73:ed:c7:dc:cc:c1:51:
                    67:95:2f:f4:db:6b:47:3c:d0:de:fb:9b:4c:b7:7d:
                    31:35:6b:5d:74:1f:e7:d9:9d:e4:cd:d3:24:00:05:
                    67:ea:4b:a9:2a:3a:5d:56:43:55:67:a3:d7:53:f4:
                    61:c6:13:b6:19:ca:c9:d4:72:d0:59:63:19:92:ef:
                    12:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E0:9D:2D:A5:1B:3F:19:A6:CA:FD:53:19:00:2F:07:02:35:68:A8
            X509v3 Authority Key Identifier:
                keyid:13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:71:9b:3a:97:57:58:f2:b9:07:90:83:1b:98:e9:d6:98:c3:
         47:1d:b4:da:d6:de:12:03:c0:cb:5d:ed:70:d0:67:e5:c4:d3:
         b6:09:5d:00:74:bf:ac:a8:8f:fe:63:c5:ca:06:d7:7c:5a:e0:
         ce:68:1c:dc:18:df:82:58:1b:b4:3c:16:8d:c6:1a:e5:c7:c3:
         e2:f0:1a:84:db:dc:5f:35:2b:73:8d:02:07:64:c4:f4:63:0e:
         20:41:54:d5:d7:6e:f3:ed:a1:66:d2:e3:2d:a2:5a:eb:c2:4b:
         b3:d7:0a:5d:34:64:78:e2:bf:02:a4:df:b2:bc:da:e9:b2:ba:
         31:99:c0:d6:b7:3f:06:03:28:a9:56:53:62:7f:23:89:cd:b6:
         00:ef:11:a2:25:0e:61:50:e0:08:56:f9:e7:65:dc:85:49:78:
         83:e2:a8:78:0f:b9:ff:28:07:df:17:2a:63:2d:5e:c0:e1:b8:
         7d:a0:d5:24:39:96:75:fe:2a:34:17:ec:27:ca:29:86:02:fc:
         2c:2d:50:2f:63:ae:6b:8b:5c:74:9b:78:98:ca:bc:08:89:91:
         7b:79:c7:25:82:e1:39:20:6e:7d:6b:b9:1f:37:71:11:6c:e2:
         49:6e:85:a5:22:aa:54:4e:b7:86:09:d3:a0:67:4a:60:23:72:
         48:16:e8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:20 2025 by rpki-client