Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
File:                     AvViYsnox9E0TfKw-MJdoTq9YiI.mft (raw, json)
Hash identifier:          FfFpYRnx0rGeimW570L2ToAOwK7yeXQyMtWgAvPPU3E=
Subject key identifier:   81:A5:FF:C8:71:B4:93:18:55:03:D1:9E:BB:7C:FB:8D:18:53:D3:3D
Authority key identifier: 02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22
Certificate issuer:       /CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
Certificate serial:       01976D3E093F4685C1207838711F594B3C2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
Manifest number:          07DE
Signing time:             Sat 14 Jun 2025 07:01:11 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:11 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:11 +0000
Files and hashes:         1: 1--_Zcgs6dmSejokLiM_ybNoSeYY.roa (hash: WtkOeqxSouyMu3WCH8w+fCLALFhCyGea7LlfmEYOb0U=)
                          2: AvViYsnox9E0TfKw-MJdoTq9YiI.crl (hash: i/PWjFCyYJiTb0vUBR4d5ThKhgJGD7GfGP2kIKzb4D8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:09:3f:46:85:c1:20:78:38:71:1f:59:4b:3c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
        Validity
            Not Before: Jun 14 07:01:11 2025 GMT
            Not After : Jun 15 07:01:11 2025 GMT
        Subject: CN=81a5ffc871b493185503d19ebb7cfb8d1853d33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ff:eb:7b:14:5c:e6:f9:be:37:aa:96:3a:34:
                    95:2d:99:d9:d9:6e:05:5d:17:91:75:2f:a0:d4:12:
                    a1:b5:b9:61:f1:46:b9:d6:d4:e6:96:c0:d0:e0:5c:
                    c6:20:27:18:e7:d6:7a:87:44:91:af:62:72:42:35:
                    95:d9:30:62:dc:8b:53:35:19:e6:05:f2:46:44:71:
                    b3:b0:03:79:63:5c:b8:04:1b:c8:75:d6:fb:df:30:
                    84:20:e5:83:65:fc:b9:96:3a:e6:13:83:fe:7b:4a:
                    1e:12:e3:6f:33:81:e3:5e:b6:c6:3d:f0:5c:f5:b7:
                    68:01:b9:cd:a0:86:3c:f3:8a:54:50:76:43:8c:5f:
                    ce:d6:a0:6a:a2:59:2b:5f:cf:e3:bd:8a:18:27:b6:
                    99:4e:0f:21:2a:55:e9:5d:67:90:42:fc:16:14:2d:
                    30:ba:19:81:e4:7c:33:3d:61:1d:0f:28:4f:ef:25:
                    9e:a7:0b:23:43:f7:4a:3f:49:0c:55:bb:ee:2c:87:
                    cc:1a:bd:fa:a5:04:39:1e:cf:89:10:2d:19:84:b0:
                    2f:28:5b:2e:41:b9:45:26:b6:01:87:ac:a8:ae:83:
                    7d:60:86:c0:a3:fa:11:d1:03:1a:fe:d5:c0:0a:45:
                    16:28:5d:c9:18:fa:c4:6b:c5:01:f9:00:be:00:f0:
                    b7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A5:FF:C8:71:B4:93:18:55:03:D1:9E:BB:7C:FB:8D:18:53:D3:3D
            X509v3 Authority Key Identifier:
                keyid:02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c0:c7:9d:dd:2a:fe:41:cb:6a:c6:9d:d6:2b:91:53:69:bb:
         79:85:3a:3d:da:ca:94:7c:9e:dc:b9:9c:8f:32:92:ad:92:2a:
         17:30:7c:7f:ad:6b:3e:37:b2:db:c0:87:17:d3:2d:90:7c:68:
         b0:ed:12:30:ec:c3:65:82:a2:c3:54:64:84:4b:fd:97:80:2b:
         11:04:f0:98:16:ce:73:bb:29:a5:23:91:9e:74:9b:fd:60:ef:
         23:d8:16:68:af:86:b7:bf:ed:84:d9:0d:25:14:01:8c:17:c7:
         c8:26:8b:ea:15:eb:59:2b:65:e9:01:b0:54:bb:27:ca:ec:a7:
         22:f2:7d:07:02:07:19:9e:7f:07:8c:25:59:b9:68:c3:11:9e:
         ea:56:29:82:7e:c7:c7:41:76:75:5d:4e:60:1d:c0:27:af:7b:
         7c:e5:0e:61:fa:3a:f8:35:f6:d6:36:b7:5e:c9:ec:90:70:45:
         cd:cd:85:46:14:f6:f3:12:d2:45:4e:95:93:7d:18:1c:eb:dc:
         8c:51:e8:2b:42:87:19:5e:4e:6b:48:78:57:fe:fb:c9:18:11:
         ea:7f:33:dc:a5:cd:72:81:6f:8c:78:bb:b3:9f:cf:0e:96:c0:
         7f:52:0f:56:f3:5a:fc:49:e0:9b:1b:56:76:d1:f7:83:be:5e:
         6b:f3:95:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:30:05 2025 by rpki-client