Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
File:                     _im9i7SagJlrRg9QKO1SqOBXwLE.mft (raw, json)
Hash identifier:          SDQsi7aM+5/garzo7dkq0JaAQikWHetMpXQk5grrXfc=
Subject key identifier:   A9:5A:9D:BD:5E:EB:1F:F2:AD:C9:69:2F:15:5C:40:EC:A0:EA:1A:0B
Authority key identifier: FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
Certificate issuer:       /CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Certificate serial:       019774F75303ABAA07E0ECB61B6F3FF067C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
Manifest number:          1348
Signing time:             Sun 15 Jun 2025 19:00:55 +0000
Manifest this update:     Sun 15 Jun 2025 19:00:55 +0000
Manifest next update:     Mon 16 Jun 2025 19:00:55 +0000
Files and hashes:         1: GKGUA1ULBuEBg6UZcKqTCkNmhrM.roa (hash: S+MOcu2hV7fbEQM0gv8ckh0dyXeXiOXULnIXULZ3i+k=)
                          2: _im9i7SagJlrRg9QKO1SqOBXwLE.crl (hash: 8KMimd772atAip8KHXIPlAN6rWFoQpmmURmZmKlCv0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:f7:53:03:ab:aa:07:e0:ec:b6:1b:6f:3f:f0:67:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
        Validity
            Not Before: Jun 15 19:00:55 2025 GMT
            Not After : Jun 16 19:00:55 2025 GMT
        Subject: CN=a95a9dbd5eeb1ff2adc9692f155c40eca0ea1a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0d:f1:70:8b:00:f7:d1:99:af:21:53:bd:7a:
                    c4:42:ee:db:d3:9e:12:34:bd:a0:6a:a4:f3:66:9c:
                    e2:fa:84:ce:f7:a4:a7:35:d7:85:9e:3e:1d:3b:7a:
                    d1:2f:ce:ea:17:f0:36:e9:58:9d:3d:2e:4e:ce:3d:
                    2d:09:63:80:5b:f6:87:3a:d9:da:15:a8:d6:17:9e:
                    10:da:55:72:7f:be:30:3c:37:d5:f0:4b:a2:20:8e:
                    e7:bf:57:67:7c:12:1a:21:96:a1:6d:f5:d5:b8:11:
                    b7:c4:46:72:09:f5:c9:42:56:99:b2:aa:ba:a5:9a:
                    15:01:ce:77:64:35:b2:aa:98:18:c9:4f:c0:0d:e0:
                    fd:2e:65:6f:7a:29:ed:e3:14:8b:3d:1a:90:46:53:
                    15:c1:05:ca:17:03:2d:67:f3:7a:b4:ac:c3:4d:db:
                    59:58:12:19:06:88:93:ed:84:47:0e:25:4d:3d:5b:
                    56:1d:74:86:ee:39:f9:53:3c:40:61:68:c0:d9:c9:
                    8b:88:46:99:cd:ac:2c:3d:f8:35:ce:66:6d:94:7f:
                    3e:f3:fe:c0:50:32:01:10:89:4a:3a:81:88:77:45:
                    c8:f3:35:d3:85:e1:2e:39:88:cd:e1:05:98:f1:3d:
                    24:0a:a3:fc:60:28:0c:58:6a:ed:83:cd:47:5b:bc:
                    59:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5A:9D:BD:5E:EB:1F:F2:AD:C9:69:2F:15:5C:40:EC:A0:EA:1A:0B
            X509v3 Authority Key Identifier:
                keyid:FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:75:4c:87:97:c1:a2:67:6a:69:22:de:03:2d:5e:9e:47:b8:
         c0:8a:2d:65:a8:6b:5b:50:3f:0e:ff:af:58:17:d8:35:d8:99:
         e0:60:6b:d5:c3:bb:70:1a:ba:51:c2:df:08:b6:96:de:3c:99:
         07:7d:6d:e5:90:e1:cf:46:c2:50:90:c3:77:de:1b:37:e5:95:
         1f:75:66:d7:9c:08:1b:4b:16:4d:32:fc:6a:56:c0:1c:83:7f:
         f8:a8:83:a7:43:fa:c7:b2:60:48:b0:46:36:f1:c2:07:1f:ea:
         a0:61:f3:99:8d:9a:8e:d6:90:86:8c:4e:9f:22:5c:18:5f:e4:
         e8:51:2f:24:18:d7:42:b5:64:05:2b:62:67:2c:7c:10:78:de:
         72:50:93:8a:10:38:15:6c:95:39:12:38:a6:47:ab:5f:c3:16:
         b0:3a:b1:b9:50:d8:92:85:03:db:99:50:84:07:93:d1:8b:9d:
         63:a7:40:fd:0a:53:f7:ba:1a:9e:03:89:d0:87:54:65:d6:83:
         1e:75:78:ae:6d:56:88:07:de:76:fc:be:a4:6c:73:04:4c:69:
         1c:e1:11:e8:09:f8:80:07:39:fa:5b:9b:3d:e8:da:4f:cd:e4:
         40:ba:a9:f9:55:07:48:76:69:36:f3:63:f9:95:f5:56:8c:e1:
         22:48:2a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:59:09 2025 by rpki-client