Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
File:                     ti1M7HgzBZI-NJftiE8cRFtOePs.mft (raw, json)
Hash identifier:          gL39f4PNvVq4zyYaUOzFwR9/QGwFVC57UGSMoTOl1Cg=
Subject key identifier:   1C:A1:F3:DB:81:25:37:E9:0F:56:97:4A:44:16:A8:AE:44:06:B7:28
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Certificate issuer:       /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial:       01976BBD99993CDBC40D640DC00869DE4C76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
Manifest number:          062D
Signing time:             Sat 14 Jun 2025 00:01:17 +0000
Manifest this update:     Sat 14 Jun 2025 00:01:17 +0000
Manifest next update:     Sun 15 Jun 2025 00:01:17 +0000
Files and hashes:         1: 1ZLLlpQFZQkTqIBAHCc5d1VfoKs.roa (hash: y420UM0xhYvhHVANW5cNvzv2FZY2TvVXtMQ3bLwlcAQ=)
                          2: 8Xela-Mee_pqE6lNQZEN8AVVhbk.roa (hash: flOn1eLeJfWoU1RqKxgqMYYYNSbe2kWfLTasPQluV+s=)
                          3: Lu657SoGRO5i41akpdqVykwmDPo.roa (hash: L0TXwFUTYgd55jn30MVoW0Y/jyiw8Ro0oBxR271bBjw=)
                          4: mWU4uI3AED3kVRIGqsNYpuYsgY4.roa (hash: Fq84oAvE6fP7h+/uIBzyy7ivRhelDe2jm1K3Ltmpeog=)
                          5: ti1M7HgzBZI-NJftiE8cRFtOePs.crl (hash: 62RZhwMxIgEd3bDMAfQu7WS6m+4+el7H+WNfRn69rH8=)
                          6: uvReHNZu0Zx8p75NQaqJP-qKUVY.roa (hash: KwvRsYUs0tG71ha16eVgbI+g8wMn509oBtGucdJdGuU=)
                          7: vrn7liTWiOV54a6bn1xF4EHebFc.roa (hash: mJIlU8Z+TC1dGYbjGa/ajMktQWJNT60JPY6KVtsPkZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:99:99:3c:db:c4:0d:64:0d:c0:08:69:de:4c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
        Validity
            Not Before: Jun 14 00:01:17 2025 GMT
            Not After : Jun 15 00:01:17 2025 GMT
        Subject: CN=1ca1f3db812537e90f56974a4416a8ae4406b728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:04:44:a0:22:b2:83:08:70:3b:ff:18:0e:96:
                    7c:43:4f:00:05:0c:22:f5:17:d6:d2:75:da:97:87:
                    be:39:cd:5a:eb:ea:d7:97:64:1c:99:b3:ba:26:35:
                    ec:af:4c:bd:44:05:4d:43:d4:a5:e5:43:c1:be:b6:
                    bb:1e:db:42:0c:51:09:83:5b:6b:97:75:e1:36:64:
                    3f:51:b9:cb:e3:95:ca:ef:38:91:7a:ce:fb:59:47:
                    55:15:15:83:70:ad:79:98:49:22:9e:5e:b0:62:2e:
                    d3:0b:40:7f:d1:11:d1:a3:70:98:c1:76:ac:95:1b:
                    b7:14:41:68:ec:cb:e6:fe:bd:15:73:e3:57:3f:63:
                    38:9d:89:ea:41:8a:c2:23:45:d7:0f:de:fb:7e:7e:
                    a8:0b:3d:00:2e:2d:6d:a1:30:aa:5c:03:57:6d:e0:
                    52:13:41:ba:df:24:ee:8a:0a:d8:96:b9:8f:0e:2d:
                    3b:5e:58:d9:00:df:fd:b1:b2:f3:d9:88:72:3d:b7:
                    d7:e5:cb:25:74:47:94:98:24:a0:f0:0b:60:21:dd:
                    e1:69:b9:34:b9:a8:36:5b:13:98:8b:0c:98:e8:91:
                    f7:14:17:8e:57:9b:0b:20:05:d2:d7:64:20:93:cf:
                    f3:6d:b6:41:8a:33:f1:ac:cb:9a:72:e8:c1:64:b1:
                    c6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A1:F3:DB:81:25:37:E9:0F:56:97:4A:44:16:A8:AE:44:06:B7:28
            X509v3 Authority Key Identifier:
                keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:0f:20:74:0e:63:fc:39:5b:91:5a:a4:11:75:2e:39:c7:96:
         ce:ef:22:bd:b7:c2:aa:cd:27:3d:d8:3e:2b:5e:ab:b9:3f:bd:
         71:4f:97:33:3b:8a:52:11:e0:c9:09:ab:c0:a7:e4:e1:9e:da:
         d1:29:6a:3f:18:bc:2a:59:be:9c:78:7d:65:07:f5:a1:fe:01:
         47:da:ce:b8:98:48:a5:70:01:bb:7b:05:6a:8d:4a:43:e5:dc:
         35:70:64:76:ae:b0:15:04:c3:b9:1e:08:ac:96:f9:c2:9c:ba:
         be:d4:28:d2:83:d6:0c:f0:f7:78:1b:70:bc:be:42:9d:54:17:
         a5:c9:a2:2f:bf:a4:a2:77:16:44:dc:f0:9e:08:bd:29:73:f6:
         7b:ee:69:72:35:18:54:80:12:da:1e:27:70:14:c1:23:9e:2a:
         e1:96:55:76:59:b8:46:71:28:5d:29:db:04:fa:24:47:85:2c:
         dd:0c:a9:b4:09:73:c1:fa:9a:e1:57:e9:e1:f2:c0:03:a8:94:
         00:88:67:3d:71:c5:4e:a4:f5:40:a5:19:3d:df:3b:83:f5:fe:
         23:d9:66:86:55:d7:9a:36:7a:70:9d:0b:e3:77:ac:8b:c4:30:
         19:e1:94:69:7d:f4:98:69:59:6d:b5:bc:77:a0:49:d7:0e:19:
         14:47:c0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:29:05 2025 by rpki-client