Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
File:                     piqMeh9qTJSeAntTadl9dXbhR_g.mft (raw, json)
Hash identifier:          /TwW7LPxd5wjsYNG0JncfzNXl+Q+IapktFye/gtVmsg=
Subject key identifier:   F1:76:9A:2B:37:19:32:95:5E:DD:EE:69:3E:4B:58:60:9B:CE:8C:F6
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Certificate issuer:       /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial:       019774F740B573E543B9BA9EAB4DD416193C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
Manifest number:          09D6
Signing time:             Sun 15 Jun 2025 19:00:50 +0000
Manifest this update:     Sun 15 Jun 2025 19:00:50 +0000
Manifest next update:     Mon 16 Jun 2025 19:00:50 +0000
Files and hashes:         1: BxgD-RrZabBuEEfFQkOR7JzPkYA.roa (hash: Dbgg4n4USIHYY1LVI9yt8KqtluJXraRBx7hK71/1AxU=)
                          2: _HboziFCCXY6Aftni-9e_QXHS7Y.roa (hash: 1Dtm7p4VO9zPNWsz+P/VL1I6c+v4X7GMgtJoAtf8pBU=)
                          3: piqMeh9qTJSeAntTadl9dXbhR_g.crl (hash: 1bbe6bVk6NNvXw5+Yk5ePCU2q/fmV7HNasd7zXIBvs8=)
                          4: y3UMX5qqKpS7PayD_PFfS-9xYiA.roa (hash: 1x0+PMsy7NMRlTF0Iq4hoHsB7a+mNEhOddx/6ZAYPrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:f7:40:b5:73:e5:43:b9:ba:9e:ab:4d:d4:16:19:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
        Validity
            Not Before: Jun 15 19:00:50 2025 GMT
            Not After : Jun 16 19:00:50 2025 GMT
        Subject: CN=f1769a2b371932955eddee693e4b58609bce8cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a0:77:ae:90:bb:94:59:ea:da:9c:c0:65:f8:
                    27:0b:18:df:0e:44:b4:29:b6:ad:8c:d5:5d:47:93:
                    2c:dc:bd:34:16:46:e8:a7:b6:cc:fc:51:e6:60:77:
                    6e:b6:73:a8:49:9c:83:2b:f5:62:9d:ff:ce:5f:54:
                    e9:28:33:81:bc:6b:0b:2b:e6:5a:51:3d:9d:06:aa:
                    fd:54:7f:d8:92:93:13:3d:08:d5:48:77:11:ae:a6:
                    af:85:4f:7f:32:b5:8f:33:1f:22:88:a6:64:f6:61:
                    d3:19:0a:f3:8a:91:55:36:d6:35:c3:cc:36:86:8f:
                    b9:4a:75:10:ab:4f:8b:3d:34:9d:1f:0a:df:80:07:
                    79:b9:d6:cf:31:33:86:32:39:19:6b:45:b2:92:d7:
                    9b:bc:c6:62:0f:d1:f7:c0:9a:90:4e:de:53:ed:7e:
                    81:3b:ee:ee:d4:db:70:1e:b2:2f:8e:e9:ef:99:a2:
                    41:04:01:ec:03:d4:f2:d0:05:0a:7b:aa:8d:b5:fb:
                    75:1d:71:16:c1:a4:81:0c:86:31:87:f7:43:d1:c3:
                    46:f0:64:e7:f5:63:92:a8:c0:cd:9f:02:bc:3b:50:
                    c6:46:49:1b:4f:14:57:25:d1:b4:66:b1:cd:f4:20:
                    29:86:b1:72:94:5d:8e:8e:0a:e2:fb:b1:c8:b2:55:
                    bf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:76:9A:2B:37:19:32:95:5E:DD:EE:69:3E:4B:58:60:9B:CE:8C:F6
            X509v3 Authority Key Identifier:
                keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ed:e6:25:da:cc:3f:43:d1:38:d8:67:78:46:1b:cf:03:ec:
         f7:23:2a:a6:df:28:c7:88:59:62:37:a5:04:88:fc:8b:ca:ff:
         96:5d:b8:59:34:5d:a3:95:fb:55:76:14:35:96:1a:6b:b9:9e:
         9b:d2:61:c3:4c:7e:85:05:f6:39:59:69:17:b6:80:f3:07:87:
         1c:05:52:f9:cb:dd:0e:6a:80:91:85:43:e5:e4:d6:2a:5f:6b:
         91:a9:c4:e8:75:0c:de:4d:36:16:0c:af:08:9d:5d:ce:57:a1:
         5e:c5:35:fa:11:e5:a4:b8:e1:60:1d:f8:d0:fa:f8:ae:38:a8:
         d4:8a:dc:e9:12:22:7b:d6:82:65:8a:f5:ec:6f:7e:6a:0a:1d:
         45:d7:d6:0f:9d:0a:23:46:86:07:84:e3:4c:ee:1a:66:62:f9:
         20:32:16:df:1f:88:5c:eb:90:79:da:18:5b:1b:e6:b7:08:75:
         11:20:99:31:25:f9:bb:54:63:95:a5:fe:e2:05:35:32:5a:32:
         3e:fd:05:49:6f:98:da:64:08:7a:50:70:00:7b:04:73:92:df:
         31:35:01:09:00:f4:57:74:ab:67:1c:ed:63:c1:48:16:59:38:
         d1:85:3d:12:f9:9a:09:1d:35:f2:ff:0a:68:95:6a:fa:a1:89:
         d4:a9:c1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:02:54 2025 by rpki-client