Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
File:                     o6znPa9SECzbhLf1aBKWlXoMmng.mft (raw, json)
Hash identifier:          Kk49rLSDgeymj5YnY7EKX+S5pWxHwjbv5hcd53MgvJc=
Subject key identifier:   26:27:49:54:98:12:BA:FB:54:76:1D:19:D5:B7:39:7D:D0:D6:FB:71
Authority key identifier: A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
Certificate issuer:       /CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Certificate serial:       019773098F24BA5BD85867EA923A99D83F61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
Manifest number:          078F
Signing time:             Sun 15 Jun 2025 10:01:35 +0000
Manifest this update:     Sun 15 Jun 2025 10:01:35 +0000
Manifest next update:     Mon 16 Jun 2025 10:01:35 +0000
Files and hashes:         1: PLwRwWOtSjw-0Pg41XEpQjuSA-U.roa (hash: lGtM/oEk7N2nkUdCvZFwDApY3dPL/dm/f6h+7RuL+gU=)
                          2: o6znPa9SECzbhLf1aBKWlXoMmng.crl (hash: cu9MLKLb5xyF95moa5CQQAynpUj+I5jstXXIyWEdOcA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:09:8f:24:ba:5b:d8:58:67:ea:92:3a:99:d8:3f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
        Validity
            Not Before: Jun 15 10:01:35 2025 GMT
            Not After : Jun 16 10:01:35 2025 GMT
        Subject: CN=262749549812bafb54761d19d5b7397dd0d6fb71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:48:96:36:64:ee:60:e9:54:c7:6b:17:e0:fd:
                    f0:1c:ae:ea:44:96:58:35:ec:27:57:70:14:40:4a:
                    75:f5:68:4b:b5:f6:2e:9c:c8:f9:d2:2b:b2:e7:92:
                    41:51:72:06:51:d7:49:2b:a2:e9:4b:69:97:61:3e:
                    4b:ab:21:8f:4a:05:db:27:fb:e0:33:8d:44:51:fc:
                    11:d3:c4:ed:df:8b:35:93:7c:87:7f:09:d5:d6:db:
                    7e:32:b2:14:40:b1:a0:ef:7e:74:e3:8e:c0:f3:07:
                    c4:5e:52:52:2e:d8:28:1c:60:c1:8b:d9:d5:50:67:
                    f5:7e:2e:53:93:62:42:0d:6b:c8:89:d9:a8:d5:ae:
                    91:e0:c9:f1:d1:53:88:77:a2:9d:d6:d3:52:e9:46:
                    62:fd:8c:0c:54:7a:0a:56:fd:b4:2c:dc:90:f9:a3:
                    20:dd:9b:73:9f:9f:a9:56:26:bc:1e:72:48:99:4e:
                    7c:f3:e1:04:12:2b:a9:e5:4a:53:c0:e8:a0:6b:43:
                    6e:49:5f:7a:ee:ec:b0:4d:00:69:65:e2:7c:89:45:
                    07:b8:3f:aa:a2:a0:ee:01:9d:38:33:98:d5:2d:9c:
                    49:3c:92:11:06:6d:be:2e:23:73:fa:d5:11:6d:18:
                    96:4c:ca:07:2e:6c:84:5f:93:22:4d:bc:b9:75:a4:
                    3c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:27:49:54:98:12:BA:FB:54:76:1D:19:D5:B7:39:7D:D0:D6:FB:71
            X509v3 Authority Key Identifier:
                keyid:A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:cf:1d:58:f7:b3:d1:67:47:d2:b8:36:52:18:81:34:45:f9:
         6c:ee:fe:03:fc:49:8e:23:69:b9:76:94:ac:70:29:85:89:b1:
         70:75:9d:61:c7:2d:35:ad:c6:95:bc:54:46:6a:67:c9:56:81:
         5f:58:58:75:22:37:02:43:88:da:65:9d:a4:9b:35:39:93:8d:
         e6:80:55:0c:41:8c:df:72:89:d7:83:d8:b0:69:0b:ad:44:ae:
         e1:a1:52:0e:22:2d:0d:b3:56:28:ae:7e:99:63:32:77:42:42:
         d6:9a:88:1b:92:00:a3:38:a7:86:23:2a:ef:de:a2:81:15:c7:
         cc:b1:27:a3:bd:12:f9:09:27:8e:7d:7e:ae:86:6c:49:8f:54:
         f0:53:a5:72:09:71:75:e1:f2:f7:1f:51:f2:ec:dd:9a:2d:98:
         0f:a1:d5:a9:a4:92:b6:e6:71:63:69:5e:98:10:9a:9b:51:91:
         a0:54:5a:62:9a:79:87:f8:bf:3c:05:95:2e:95:e7:58:c7:7d:
         6d:1f:90:ac:ec:6d:fd:66:a5:73:9b:0c:13:0c:11:98:df:b2:
         08:21:66:88:89:2a:4e:db:89:0d:ae:47:8b:f4:1c:6f:ea:40:
         67:9e:23:52:ed:4a:6a:5b:96:91:52:d8:1a:2e:58:da:da:ed:
         c7:90:cb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:16:43 2025 by rpki-client