Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
File:                     RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft (raw, json)
Hash identifier:          zeOPR1PLYffZBkh8N9fc1z44rKvF4+N5t5mkc++ojAg=
Subject key identifier:   6F:30:71:35:3F:0B:B9:3E:46:D8:52:4D:6B:6A:B6:CF:8A:06:44:FF
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Certificate issuer:       /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial:       019786FD5B487F0C58DF9159DC0C5A3D030C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
Manifest number:          15A8
Signing time:             Thu 19 Jun 2025 07:00:40 +0000
Manifest this update:     Thu 19 Jun 2025 07:00:40 +0000
Manifest next update:     Fri 20 Jun 2025 07:00:40 +0000
Files and hashes:         1: BFq1km9XkHnmoDoXJVc27vizfZA.roa (hash: cHrkhcCjIdFy9DEItV+YoEGVfmLA0+VuuQv0zsT4f+Q=)
                          2: QVRWqhYUwIkNvJnwNn5ilovQsG0.roa (hash: ECIpmtTYGjYR3kRGmh6WnnV42XGn8NJAMdwXjOT27zA=)
                          3: RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl (hash: b4Gt6O1vOIf2Q2ESaBZYcj22ypsWskjovTTCYSf6qHE=)
                          4: Y9K3JlofK8POwOywRHQ-b7Rojd0.roa (hash: abVW39/CWooNu9JnN4E4q2eaNvJVrXWE5ieZckwkUSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 07:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:86:fd:5b:48:7f:0c:58:df:91:59:dc:0c:5a:3d:03:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
        Validity
            Not Before: Jun 19 07:00:40 2025 GMT
            Not After : Jun 20 07:00:40 2025 GMT
        Subject: CN=6f3071353f0bb93e46d8524d6b6ab6cf8a0644ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:47:22:a8:9f:7b:51:6a:2d:26:60:55:bc:
                    22:1d:bd:06:ca:1f:50:7d:f3:7b:90:32:15:ac:c8:
                    b2:a6:40:b1:e4:f7:95:2f:0c:bc:01:ef:a4:8c:09:
                    8f:50:4a:45:db:68:71:53:b6:ab:50:21:ba:ed:96:
                    dd:1a:71:c8:89:22:d9:34:76:6f:94:ce:53:97:42:
                    a4:81:37:e8:f0:f4:8b:3f:4a:7f:a8:0d:9f:24:87:
                    9e:fc:b8:8c:d0:81:e3:1a:4c:37:a8:36:b8:85:cc:
                    47:90:47:e3:19:cb:e6:47:6e:e0:f8:49:97:c5:bf:
                    38:a4:e5:30:5a:b5:d4:6c:4c:52:6c:4c:6a:94:df:
                    29:6e:0d:33:6d:e2:3c:7d:96:ab:70:c7:a5:28:68:
                    bf:26:f4:05:1d:73:78:ba:55:a4:5e:bb:db:ee:7f:
                    51:f5:e3:b1:42:4a:78:c9:4f:af:07:5d:bf:33:42:
                    73:20:d6:ff:14:76:68:da:8c:e4:66:63:71:6d:13:
                    06:ea:bd:82:b1:b1:bc:06:2c:55:07:55:8d:3f:7f:
                    05:12:fa:10:34:1e:ac:c9:92:31:f8:8b:ec:0a:34:
                    f7:22:a4:d5:35:f6:b4:92:9a:04:a4:ea:3b:8a:69:
                    78:47:04:cd:28:d8:4d:a5:1a:0f:03:32:cf:5c:ae:
                    17:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:30:71:35:3F:0B:B9:3E:46:D8:52:4D:6B:6A:B6:CF:8A:06:44:FF
            X509v3 Authority Key Identifier:
                keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:2c:52:c5:11:7c:fd:ec:05:fc:84:ae:57:cf:fa:8c:09:98:
         e5:a7:40:87:5a:b9:dd:dd:0f:91:06:e7:1d:be:a5:d1:07:9a:
         26:b6:eb:64:10:94:ff:fd:83:fc:9d:cb:90:21:9e:74:52:2a:
         93:04:e8:77:38:66:83:d9:98:80:b7:36:66:d4:6d:a7:6d:b3:
         b0:99:ac:5c:e7:b7:f6:3d:58:fa:06:2a:7c:2b:a9:95:2f:b3:
         3c:72:ae:76:55:52:e1:a4:6e:c2:3e:a6:3a:2b:51:30:a4:99:
         43:54:29:45:df:85:29:f2:f2:b2:29:85:b5:ae:63:01:46:b2:
         5a:40:f3:c3:4d:1f:e2:34:60:fc:99:03:9a:f3:9e:fa:75:c4:
         ce:67:aa:d7:5a:fc:d8:c0:64:ae:03:ff:18:35:b9:2c:ee:f9:
         0e:b6:77:16:3c:d3:91:3f:fd:82:da:ff:54:bf:39:92:5a:43:
         36:17:59:84:27:8b:47:32:87:61:0a:a5:24:a6:59:8c:ff:a7:
         67:41:f4:f7:36:b1:7c:ce:4c:c7:7a:25:41:1a:17:8c:a1:b2:
         60:9c:46:8e:9a:82:4c:5a:68:fd:0a:09:6f:81:0e:ad:c6:a3:
         43:ff:30:86:d7:3d:09:48:d0:a8:1a:ba:dc:af:e8:73:bb:54:
         b2:7d:a8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 12:35:20 2025 by rpki-client