Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
File:                     _ASHoE9apEK-UZoXyyuyLXg98js.mft (raw, json)
Hash identifier:          B6DzgQDiPXUALxJOp16iVFnmtObJuFAZBzO0kwXys5o=
Subject key identifier:   C2:05:C5:65:A2:17:90:BC:A3:16:20:39:D9:6B:21:9E:E2:0E:A7:86
Authority key identifier: FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
Certificate issuer:       /CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Certificate serial:       019770E321635A1BB9538590A02EBA72A682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
Manifest number:          1112
Signing time:             Sun 15 Jun 2025 00:00:22 +0000
Manifest this update:     Sun 15 Jun 2025 00:00:22 +0000
Manifest next update:     Mon 16 Jun 2025 00:00:22 +0000
Files and hashes:         1: TWYnB52Oavk9789kFBH_TtsFA20.roa (hash: Lo6TIcgKkzIrKcc1K5udX1XvguvwpolYTItBn5Pxknw=)
                          2: _ASHoE9apEK-UZoXyyuyLXg98js.crl (hash: OVcZJqEAEmF6Y7e9pGh4Yv4XkHyaz0aN0vUorfEp2kc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:e3:21:63:5a:1b:b9:53:85:90:a0:2e:ba:72:a6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
        Validity
            Not Before: Jun 15 00:00:22 2025 GMT
            Not After : Jun 16 00:00:22 2025 GMT
        Subject: CN=c205c565a21790bca3162039d96b219ee20ea786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:24:95:4a:6d:dc:51:27:1d:ff:19:6d:cc:4e:
                    eb:e3:dc:9f:cb:1c:b5:d4:d0:0d:07:4b:08:52:a3:
                    e7:2e:5d:67:98:11:87:22:f9:35:7f:cc:fb:12:a0:
                    f6:85:f8:20:50:38:db:77:32:bc:df:0c:0c:cb:4c:
                    76:f9:4e:8b:ad:bf:58:88:98:5d:8e:f8:b4:9c:6c:
                    97:aa:c8:5d:d4:3b:5f:4e:82:80:5c:ac:10:29:08:
                    bf:f6:5e:20:8b:f4:fc:a3:b6:c1:c2:a4:4a:97:ac:
                    6c:2e:8c:ad:7f:03:4f:71:cb:5f:57:b1:1f:fb:27:
                    79:c8:6b:c3:70:52:5e:a4:ec:97:95:93:1f:04:aa:
                    20:b2:b1:cb:49:8d:24:4a:fb:11:9d:3d:15:cf:4e:
                    3e:40:b9:ba:5e:82:d9:74:9d:bf:50:65:90:92:2d:
                    4b:e7:f4:c1:37:ef:a4:b8:2d:f7:2d:19:96:15:b3:
                    3e:56:88:ad:67:d5:54:92:a6:b3:2a:9a:57:17:89:
                    83:df:98:7e:67:01:a6:ad:4f:76:bd:5f:e6:55:fc:
                    ff:03:b8:de:4b:5d:1b:0e:ff:a4:9e:7a:fb:9e:1f:
                    b7:c9:c2:95:c7:e8:a4:83:c6:e0:04:f8:aa:43:d4:
                    60:67:2e:41:28:73:f5:a1:0e:c8:b2:44:40:af:1b:
                    d4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:05:C5:65:A2:17:90:BC:A3:16:20:39:D9:6B:21:9E:E2:0E:A7:86
            X509v3 Authority Key Identifier:
                keyid:FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:34:6a:54:41:b1:fe:0f:bb:2c:b8:59:c9:f2:10:2a:ed:72:
         be:20:5b:54:ee:5e:18:58:c3:69:1e:4f:34:61:48:84:dd:40:
         7c:7c:9b:42:f0:b0:f9:ec:a9:49:99:8d:3f:39:60:36:48:89:
         6e:50:c9:e9:e1:fe:6b:b8:c0:9b:47:8e:8f:5b:d4:cc:6a:bc:
         4d:0d:46:93:2e:e1:2f:53:0c:da:94:d9:3e:da:fe:7d:15:ec:
         06:30:d3:33:ef:f9:50:e5:26:10:77:b0:5f:fd:8b:b7:0e:40:
         15:7b:9f:4a:38:29:51:f4:fc:02:d1:91:ef:4a:88:71:bb:2c:
         3b:3e:c4:91:56:07:51:5d:59:be:aa:8d:a9:d4:b5:3d:3e:f9:
         cb:65:5a:cf:f5:7d:7f:49:f4:5b:00:5f:38:43:34:c9:bc:76:
         b8:dd:47:16:41:f7:b5:57:ff:c9:8e:11:e1:4d:fc:1f:b0:18:
         0a:71:95:e7:fc:d7:5f:ce:94:8a:a4:5d:48:b7:be:1b:c5:a8:
         42:b0:80:01:d3:e9:1d:3a:0a:fa:bf:7a:15:0a:91:25:2d:31:
         c6:e3:3c:ce:e2:e7:51:16:28:cf:03:6f:6b:be:57:ff:b7:b7:
         46:44:87:46:d4:5c:5f:4d:8d:69:1c:91:5d:98:96:e3:09:f9:
         6d:3a:c3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:05:30 2025 by rpki-client