Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
File:                     oZxkOUagWTlzVUINc7xF8U2ip2s.mft (raw, json)
Hash identifier:          wLuupLGtsJJ6coqpDyYU4V7cRl45+vDXQIomocoXc28=
Subject key identifier:   A9:E3:07:17:80:EC:81:FB:47:BD:2F:E9:A4:9B:86:25:01:4F:41:36
Authority key identifier: A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
Certificate issuer:       /CN=a19c643946a059397355420d73bc45f14da2a76b
Certificate serial:       01976C98B46D2EFF6F12810BB54FFFD26FD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
Manifest number:          14F6
Signing time:             Sat 14 Jun 2025 04:00:36 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:36 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:36 +0000
Files and hashes:         1: ID7EJVgdGpnmyne0NupoGtnpzek.roa (hash: ZeCQXddR8S6+kjzcEpoW2z9l/rn9G5gRDRbTRJiZ+0o=)
                          2: oZxkOUagWTlzVUINc7xF8U2ip2s.crl (hash: Sa8vel/vTePw98j3R7PWu2i0E0yQ6hG2+ZFIyGi6xkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:b4:6d:2e:ff:6f:12:81:0b:b5:4f:ff:d2:6f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a19c643946a059397355420d73bc45f14da2a76b
        Validity
            Not Before: Jun 14 04:00:36 2025 GMT
            Not After : Jun 15 04:00:36 2025 GMT
        Subject: CN=a9e3071780ec81fb47bd2fe9a49b8625014f4136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:f8:35:aa:50:cb:08:d1:c9:64:8d:97:b9:
                    bc:bd:9c:b9:1a:b6:4e:1c:78:fe:fd:31:4c:fa:a9:
                    a2:56:b9:ce:85:b9:cf:4d:9b:eb:10:2e:bf:d8:a3:
                    78:18:ad:a5:b0:c6:e4:5e:bd:bd:18:73:46:4c:90:
                    b5:a1:2c:5e:96:6a:30:91:7b:56:13:7b:cb:5d:61:
                    cd:ff:04:2e:66:de:e1:26:f4:d9:3a:7b:91:47:cf:
                    64:2c:ec:a6:8d:76:68:d3:69:af:a0:fc:ed:49:e4:
                    da:fa:5c:cb:b7:9d:92:e3:fe:b9:97:f0:d1:7a:7b:
                    9a:c3:54:42:5a:a7:0f:88:9f:e9:20:7c:05:d1:2c:
                    32:47:1e:7d:f1:a2:3b:1d:c9:62:86:84:74:f0:85:
                    32:86:27:c4:f8:6a:5a:33:8b:0a:ab:af:a5:21:d3:
                    e4:ec:1a:b2:87:a5:6f:fc:6e:ac:58:99:80:72:35:
                    4f:21:d5:2d:d3:43:54:6f:1c:d2:21:cd:ae:15:ec:
                    1f:ba:00:ae:7f:d2:01:4a:1f:56:bd:d0:43:b2:65:
                    6f:96:16:f1:62:56:f8:7b:1d:e3:d7:26:af:90:d8:
                    02:c8:1d:0b:d2:06:03:47:cf:5f:a1:4d:43:45:91:
                    05:07:cb:78:59:72:5c:da:cf:8f:f5:23:67:11:b3:
                    82:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E3:07:17:80:EC:81:FB:47:BD:2F:E9:A4:9B:86:25:01:4F:41:36
            X509v3 Authority Key Identifier:
                keyid:A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:01:64:0b:7d:ea:80:d5:1c:74:c5:7c:34:ce:40:ce:13:0f:
         ba:eb:1b:fb:7e:46:a5:bc:bf:31:8c:9f:1a:3f:ce:ef:da:cd:
         48:61:94:cb:87:d5:16:85:8a:ab:d5:47:0a:aa:e9:9a:b4:75:
         f7:8a:c1:5b:88:61:29:27:8f:f9:b7:ab:b2:ad:47:25:b4:a3:
         27:a2:52:4e:52:d2:d8:d8:4b:bc:6b:24:27:be:e7:7e:c4:cc:
         9f:16:cf:fa:13:ab:e7:d3:9a:76:4e:8f:85:ea:96:9f:a2:89:
         ff:9b:5d:b2:7d:25:b1:34:55:25:20:d6:f3:24:df:0c:96:c5:
         f9:af:ba:1c:69:ad:08:47:a4:e5:a4:3e:ae:3d:e1:c7:f0:22:
         b2:d9:20:26:c7:cb:ea:eb:fe:dd:38:87:54:22:13:74:1c:c0:
         2a:ab:55:24:ad:d7:48:f8:42:e0:eb:1b:79:60:ec:a3:30:09:
         9a:c0:df:74:32:65:90:c7:a0:86:a9:20:cd:b8:88:05:30:3c:
         a0:d7:ff:c5:60:09:f6:b2:59:80:40:58:d7:50:06:ca:5f:3a:
         43:15:3f:42:69:aa:48:ff:57:96:28:04:b0:ad:11:a8:c4:11:
         85:92:d8:3f:4b:94:94:ce:c6:ed:01:dc:33:4b:09:1d:6a:e4:
         98:2f:94:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:11:04 2025 by rpki-client