Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
File:                     mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft (raw, json)
Hash identifier:          8EQu1HjKSUSwUawq8u6LmQzNrwMZP/UwjLcKWeN95xo=
Subject key identifier:   2F:9C:8E:0D:AA:63:27:F0:C3:C5:06:82:D1:9A:E4:E4:37:41:DA:00
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Certificate issuer:       /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial:       01977C79E1718510F96C4BFA536744D7CD7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
Manifest number:          12F4
Signing time:             Tue 17 Jun 2025 06:00:51 +0000
Manifest this update:     Tue 17 Jun 2025 06:00:51 +0000
Manifest next update:     Wed 18 Jun 2025 06:00:51 +0000
Files and hashes:         1: H3YMBp1HWn_yJUmsVDSZTkgIRZk.roa (hash: dsjF1p38BaFKD263jEWfJjaYNNkjDPWbd8s7iYfLKf0=)
                          2: cDHrUcS9iBRAhgzIa-0oojwM6x8.roa (hash: a6MRkFy47YCdZj55gPSM8dAPHE9bL49pr9pcP+5WZCo=)
                          3: gQFR0ws8EpADtXwJYL1_rKqtUCU.roa (hash: O/ujjDYhXza5+3b/lt0kt/wL12KlNYtlZgn4DDp272Q=)
                          4: ipnQ83UpKa8sWrTXie04nVeOWrE.roa (hash: LCyjANuJcWqupF1L+w0MaO/qngWjk1y0gHyBxfWyWgs=)
                          5: mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl (hash: XPusNle7iUkwGSVDrtEqdjm9xU+9Ya7/AuBpoZjl4h0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7c:79:e1:71:85:10:f9:6c:4b:fa:53:67:44:d7:cd:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
        Validity
            Not Before: Jun 17 06:00:51 2025 GMT
            Not After : Jun 18 06:00:51 2025 GMT
        Subject: CN=2f9c8e0daa6327f0c3c50682d19ae4e43741da00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:20:50:91:0e:da:9c:c6:cf:68:59:75:40:8d:
                    ce:2a:e8:1d:c4:d4:ed:43:bf:7b:fb:5c:e6:d5:88:
                    80:c5:75:56:78:95:ad:fa:2d:90:d5:c0:6c:8e:ff:
                    4a:14:23:c0:da:5c:40:a9:e8:e5:58:b1:7d:a6:02:
                    b1:18:85:2e:7b:55:a2:0c:82:5d:17:15:f6:19:88:
                    a6:b1:d1:13:ee:96:1e:c4:a3:ae:06:b8:f8:51:c1:
                    63:24:ee:c1:9b:30:f1:d1:f3:cd:c6:28:64:01:a6:
                    9c:b8:34:05:dd:d5:22:ba:6d:4b:e4:b8:89:b4:a3:
                    31:96:98:00:9b:78:f6:78:c6:60:8f:f8:1a:c0:b4:
                    1b:8a:d7:40:a7:88:df:6b:33:07:c3:68:d5:f1:ee:
                    a5:6c:12:29:2a:eb:69:aa:2d:de:48:51:fd:26:c5:
                    4a:ca:63:d8:ca:7f:4f:8c:fa:83:d2:e5:1d:e0:bf:
                    85:fb:99:3d:75:50:9b:97:2b:23:ba:66:97:19:b9:
                    7b:93:e9:43:ae:eb:46:8b:33:5f:9e:c0:21:f7:3c:
                    2f:29:8c:9b:09:57:37:b9:0d:7b:50:42:3c:ed:f0:
                    33:c2:84:0a:cf:b9:b1:a7:00:88:08:51:f8:92:ac:
                    83:9a:72:48:f5:ab:44:41:7a:6b:7d:74:60:6f:09:
                    42:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9C:8E:0D:AA:63:27:F0:C3:C5:06:82:D1:9A:E4:E4:37:41:DA:00
            X509v3 Authority Key Identifier:
                keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:3f:22:ee:fb:63:80:fb:92:70:8f:31:bd:03:35:9d:64:96:
         c6:fd:af:3d:8c:36:79:5b:c0:e2:94:d7:42:3f:40:0f:43:8a:
         9b:97:35:f8:8a:a4:dd:14:06:4d:f0:92:f9:96:5a:d1:c6:4c:
         ee:a2:27:79:76:06:1c:99:19:e6:51:8b:c4:aa:27:c8:d1:ea:
         d8:63:f5:cf:be:41:a2:62:cc:ea:c6:87:5f:f0:a6:84:f0:d3:
         0e:6b:1c:37:35:52:e6:64:34:4e:0e:17:32:4e:d8:9b:bf:99:
         6d:7b:4d:8d:1e:40:ac:42:23:36:47:b6:73:7a:c8:88:a8:d0:
         a9:2a:70:ff:31:16:8d:72:c5:a6:e7:92:5b:81:c6:14:d5:66:
         4c:ed:ee:c7:16:1d:77:74:3f:9e:5c:84:b5:55:92:35:6e:ee:
         4a:01:48:71:42:3f:fb:12:06:b6:5b:65:2b:0f:68:6e:83:65:
         61:b1:d2:61:45:d7:94:90:6f:75:17:dc:f0:e5:80:43:bd:0b:
         df:28:46:1d:50:55:bc:9b:c6:6d:16:ca:54:3f:c0:17:b1:a8:
         b2:6b:bc:d2:78:1a:df:66:fc:3c:3e:07:91:55:a4:0e:f6:11:
         84:79:03:71:f2:76:57:d5:65:3f:ea:2d:cd:41:65:5e:f3:dc:
         b6:b3:77:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:10:14 2025 by rpki-client