Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
File:                     b4bJ980XO7zR22Hg8bTr4FwbnKE.mft (raw, json)
Hash identifier:          vmGbi0Y2Gyb3xiTGmMKCiyyNfD/+9IDvkfono9SoRUg=
Subject key identifier:   E7:D7:7A:81:0E:46:85:57:F6:C1:1E:18:A2:CB:CE:86:ED:66:03:0B
Authority key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
Certificate issuer:       /CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Certificate serial:       01977A1DD8A1A3C692FF658FFDCCFAB5D20A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
Manifest number:          0FA6
Signing time:             Mon 16 Jun 2025 19:01:05 +0000
Manifest this update:     Mon 16 Jun 2025 19:01:05 +0000
Manifest next update:     Tue 17 Jun 2025 19:01:05 +0000
Files and hashes:         1: 7BXDP2MXXtjiuKfCj7kGQbobaJg.roa (hash: dX4O/Ud+qTWtCLczeQoZeg+HV0IvLYclumW7g97KhD4=)
                          2: b4bJ980XO7zR22Hg8bTr4FwbnKE.crl (hash: o1oxS5ch4oUYYYU5/hPp0c/FmjRzScvCkNSryfEumSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 19:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:1d:d8:a1:a3:c6:92:ff:65:8f:fd:cc:fa:b5:d2:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
        Validity
            Not Before: Jun 16 19:01:05 2025 GMT
            Not After : Jun 17 19:01:05 2025 GMT
        Subject: CN=e7d77a810e468557f6c11e18a2cbce86ed66030b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f7:ba:3a:77:d7:79:7f:78:c5:31:30:00:02:
                    db:11:21:e8:80:c5:c5:46:7c:b9:4c:1f:72:95:a7:
                    73:ef:3a:93:3f:cb:83:bc:91:a3:87:9b:0a:ef:22:
                    fa:d1:22:0a:40:df:c6:a0:4e:f6:2a:8a:c2:67:8f:
                    45:a0:93:2e:c2:53:f2:95:f2:41:d5:d7:3b:73:b7:
                    8f:18:2c:d9:cc:ee:59:c8:5d:2e:c3:c7:43:d2:70:
                    ba:f6:7d:07:9a:1d:6c:5d:e2:83:fb:cd:5b:99:6b:
                    9a:5d:84:f8:90:bf:e7:ee:a2:8c:10:37:ea:29:23:
                    18:45:95:1e:b8:85:f9:a7:0a:af:01:82:b2:9e:7f:
                    07:e1:22:66:78:f7:48:93:f2:cd:94:65:b1:66:9c:
                    86:92:3e:ba:c1:1c:1e:32:d8:b8:f8:b5:5f:8c:d7:
                    3c:27:d6:02:6c:a7:19:f6:48:80:66:c3:67:f3:8e:
                    84:68:a2:a8:27:58:d7:af:c2:32:93:6b:fd:ec:f7:
                    7e:8d:44:09:0e:e2:2f:fa:98:90:4c:75:c3:e4:8c:
                    d9:24:78:e0:b6:ef:13:2b:03:9b:d6:44:00:fc:db:
                    8b:52:3f:19:3f:38:cd:28:33:0c:c0:cc:89:52:04:
                    a0:94:fc:0f:a1:97:71:53:5f:9a:20:65:3c:06:a9:
                    85:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D7:7A:81:0E:46:85:57:F6:C1:1E:18:A2:CB:CE:86:ED:66:03:0B
            X509v3 Authority Key Identifier:
                keyid:6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:63:f9:ef:95:b8:25:45:51:d6:2b:83:a4:3f:57:c8:02:0f:
         21:8b:14:3a:0d:e5:37:3e:b4:cb:4b:7b:bc:a0:73:53:18:39:
         f6:ba:4c:f3:d2:53:57:f3:a7:2b:be:22:fb:f5:fd:97:a6:63:
         40:ed:8f:90:ec:93:c5:01:66:b3:64:af:75:93:2b:16:04:63:
         7f:e6:b6:c9:7d:32:8e:ea:1c:5f:20:7d:d5:af:db:b2:35:f7:
         3d:22:85:ce:81:2e:6f:bd:16:f3:94:b4:aa:69:69:d0:e8:4f:
         ea:34:d8:42:67:f8:69:b9:b4:73:ee:b9:da:40:e4:1c:08:3e:
         e9:57:a0:d1:35:2e:78:d6:2a:38:4a:d0:85:b1:7a:21:d9:39:
         cb:85:02:2a:68:26:7e:e3:41:53:93:3b:bd:35:ba:ac:e4:2f:
         54:f8:aa:f5:78:44:23:8f:52:8b:5f:96:e3:10:23:3f:1c:10:
         eb:9b:64:73:67:98:6e:01:4c:66:4a:4c:0c:e6:e8:73:82:f4:
         6f:ec:8a:1a:fa:68:bb:e8:ce:3c:59:56:3b:f3:7e:a0:ab:87:
         04:53:76:f4:2f:4e:a5:03:a0:ed:6d:c8:fa:6a:6d:e2:5a:e8:
         09:fa:10:51:d6:8b:4f:f2:de:74:a1:0d:c9:95:19:55:38:c8:
         31:e5:27:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:17:57 2025 by rpki-client