Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File:                     v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier:          cMOuGmcKQ7QKN5wjGqYop52iH3C4SIUKqNT1QzwtX3c=
Subject key identifier:   60:D8:E8:35:2C:3D:E9:47:5F:6E:47:5E:B1:C7:81:F7:1B:5C:F7:31
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer:       /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial:       01977376F7439417C0375A344985DFB6180C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number:          146B
Signing time:             Sun 15 Jun 2025 12:01:05 +0000
Manifest this update:     Sun 15 Jun 2025 12:01:05 +0000
Manifest next update:     Mon 16 Jun 2025 12:01:05 +0000
Files and hashes:         1: V8R9NuBsBMtjM8dngpbvo3MJx5s.roa (hash: kncxVZkCgNT2UYYst35neieskR5Qm/mNu8V3+IA6Ku8=)
                          2: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: cgrLTzXaqpaVQpM/w6EACzhcj+kvDFihzEUo0x0pJaw=)
                          3: yd8_f-atyxFNKtcv_cFVTfpnZt4.roa (hash: pN1o2J3yJeBV6MHLs3BSzPMoqupOmN0yj1atUVgcuyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 12:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:76:f7:43:94:17:c0:37:5a:34:49:85:df:b6:18:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
        Validity
            Not Before: Jun 15 12:01:05 2025 GMT
            Not After : Jun 16 12:01:05 2025 GMT
        Subject: CN=60d8e8352c3de9475f6e475eb1c781f71b5cf731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6b:28:eb:ae:e5:30:cb:4f:a7:33:5f:87:3c:
                    8b:2a:5a:f0:6b:ef:3d:1a:4a:0a:8e:4b:c0:df:e6:
                    b1:58:52:61:4f:75:60:54:e8:66:00:05:ab:b1:0b:
                    e3:cd:ca:19:8a:44:76:ac:51:c0:bd:dd:35:a3:c0:
                    87:fb:14:ec:8b:7b:fb:b6:19:81:ea:84:27:3d:1a:
                    59:b6:d3:6b:2c:39:80:a2:66:9e:3e:76:a7:1b:16:
                    7e:68:ea:f2:a0:3b:65:37:f6:47:6c:c1:ff:16:ab:
                    e2:10:09:c5:44:a7:64:39:6c:dc:01:00:35:55:80:
                    fd:14:af:ee:8c:39:a3:4f:8d:e5:5a:76:03:50:6e:
                    a0:f5:43:d2:f4:2e:0c:4f:9e:1f:4f:83:55:d4:7f:
                    41:cd:c2:c3:fd:d7:5d:c5:89:68:83:04:b5:7a:a4:
                    7b:56:3c:79:87:fc:de:a8:d8:07:a5:19:28:06:47:
                    52:50:47:b8:13:f1:1a:8f:e3:21:b6:d5:f9:52:84:
                    31:0d:ef:c7:01:77:fc:22:af:2d:db:46:ee:61:c0:
                    70:b7:f1:db:5c:9d:4b:93:0a:7a:22:80:e4:3a:a2:
                    bd:ae:3a:00:c9:20:0d:51:62:33:0b:2e:e1:ec:a1:
                    a7:de:a2:6a:ce:c8:59:15:28:51:e4:e1:4a:f7:52:
                    e5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D8:E8:35:2C:3D:E9:47:5F:6E:47:5E:B1:C7:81:F7:1B:5C:F7:31
            X509v3 Authority Key Identifier:
                keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ae:15:33:ae:05:02:72:d7:bb:70:a2:15:ac:4f:2d:fd:55:
         91:6a:77:b5:8d:0d:db:36:40:5d:ca:75:2a:53:c2:d1:70:78:
         12:9c:41:46:32:13:43:87:d2:05:4e:07:29:09:a6:b8:03:18:
         1e:c9:a4:2e:f1:e3:52:36:71:20:9f:ca:d9:4a:1f:ad:20:96:
         fb:c9:a8:2d:08:70:b1:67:a1:6f:75:3d:7f:76:71:f3:72:07:
         85:8c:4b:a2:ed:63:6c:ee:f7:b3:f1:3b:51:fa:b7:e1:2d:59:
         35:58:51:73:5e:3f:90:3e:15:85:9c:ca:a0:ed:b5:65:e0:c6:
         1f:f4:06:e3:1f:3e:b6:7d:3c:3e:cb:5a:c6:3a:5a:f2:8e:e2:
         20:e2:7f:8f:f1:c1:50:57:da:c3:62:79:18:6c:0c:ea:51:f2:
         e7:c7:cc:f0:cf:9e:a3:71:5e:b0:a2:4a:20:7d:11:ca:13:cd:
         f1:9a:9b:8f:6f:85:5c:02:04:29:19:fa:ee:04:69:0a:52:c5:
         1d:fd:84:c0:72:e8:3e:50:66:b2:e1:d5:02:ca:50:73:da:64:
         c4:b3:5b:d6:61:57:c0:e7:63:dd:f8:b6:40:1d:ba:2d:ff:66:
         92:52:d3:b2:3c:79:05:3d:c0:b5:3c:f3:b0:5a:c6:14:f3:64:
         a9:4d:01:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:37:47 2025 by rpki-client