Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
File:                     p8dUTotILSMRkDcG7tckBJ_jhb8.mft (raw, json)
Hash identifier:          WRqlDVBY+yDuVkoBiH1KvR3p9o4J6SupfcotLNWCd5Y=
Subject key identifier:   AA:44:65:66:31:B0:C4:D7:16:53:F7:1F:C5:31:1A:FF:E0:3C:11:C2
Authority key identifier: A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF
Certificate issuer:       /CN=a7c7544e8b482d2311903706eed724049fe385bf
Certificate serial:       01977C79F8AA8D0C300D67E2078C757F09F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
Manifest number:          1019
Signing time:             Tue 17 Jun 2025 06:00:57 +0000
Manifest this update:     Tue 17 Jun 2025 06:00:57 +0000
Manifest next update:     Wed 18 Jun 2025 06:00:57 +0000
Files and hashes:         1: 7mKsLxZ1YUursivxbDFLaTJwj3E.roa (hash: FPzsPJGqWdwrFvseNY78lYszDWnEn2Sc/ADORiyM6K8=)
                          2: F6GbEsOwyyG8o8bV63EAhvgPv20.roa (hash: EM9ccbF4wbMzML21gfy8G7ZsIEgbEwrm+BJcQvLh9SE=)
                          3: p8dUTotILSMRkDcG7tckBJ_jhb8.crl (hash: LlGu9cpunh8QWWeS4BUVi66OL2fbw824VxXS3Zydw2Y=)
                          4: zTYC0rihbvQfm9oWRaiGAXMBQqs.roa (hash: 6o0tQLujWnAnKLQhjlOk4ynnEvtZuILHNK+l2Zgw0QA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 06:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7c:79:f8:aa:8d:0c:30:0d:67:e2:07:8c:75:7f:09:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7c7544e8b482d2311903706eed724049fe385bf
        Validity
            Not Before: Jun 17 06:00:57 2025 GMT
            Not After : Jun 18 06:00:57 2025 GMT
        Subject: CN=aa44656631b0c4d71653f71fc5311affe03c11c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cc:09:89:27:2c:de:fd:db:f6:1f:b2:e6:ef:
                    51:a6:58:57:6f:01:18:0d:92:1e:09:a7:76:4e:b0:
                    81:3d:3b:76:91:57:85:ed:a9:63:a3:0d:23:6c:fa:
                    05:76:52:7d:8a:6a:b0:0e:5b:66:00:4d:4b:c4:49:
                    71:0c:4f:9f:7c:d5:65:48:cf:cf:89:2a:17:fd:11:
                    37:23:fb:77:c1:9f:40:2c:a0:50:5c:53:d1:d4:85:
                    f5:0d:11:dd:af:96:1f:66:fb:bb:65:3e:26:07:0f:
                    c7:bc:4f:db:ca:52:4a:7b:1a:65:c7:2a:53:7b:51:
                    96:d2:ab:d7:1d:ad:37:37:e3:5a:1a:cc:18:9f:6d:
                    f4:db:82:68:48:fd:b4:ef:a6:45:39:a4:63:47:06:
                    b5:cb:b1:52:e8:98:b8:76:f3:dd:73:cc:c6:63:1c:
                    c7:ba:a3:8b:5a:c8:f5:03:4f:14:30:bd:24:6f:4e:
                    90:04:fc:1c:32:59:cd:6a:37:a0:69:29:72:70:b8:
                    10:c8:8f:3e:37:0f:ac:17:8d:59:2a:7a:cc:4b:0f:
                    88:fe:9f:0d:78:27:2f:0d:91:ee:17:42:eb:ca:93:
                    aa:e0:24:d7:b5:38:9f:bb:ea:d7:b6:1b:9e:87:cb:
                    be:b6:9e:f8:1b:eb:78:39:a8:89:2a:6e:e2:de:14:
                    98:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:44:65:66:31:B0:C4:D7:16:53:F7:1F:C5:31:1A:FF:E0:3C:11:C2
            X509v3 Authority Key Identifier:
                keyid:A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:db:97:0e:b1:3d:d0:ae:5b:73:60:9c:9e:4b:25:ee:76:7a:
         7e:81:2d:83:a8:64:14:7b:a0:23:c0:68:d6:56:4f:61:29:97:
         33:41:2e:16:65:3f:e2:83:9e:ca:32:f3:14:4a:15:89:37:15:
         e8:b2:2e:28:14:76:50:0b:12:4a:24:34:ff:de:6a:02:a5:6e:
         be:0d:fc:1e:92:65:30:ab:66:3c:95:74:bc:34:1f:78:ae:39:
         4f:18:a0:53:22:fb:53:2e:12:b2:4e:03:c8:2c:d9:b4:d6:06:
         e5:92:cb:7c:3b:9a:91:41:a4:8a:0e:43:9f:09:46:d9:14:fe:
         a2:52:14:3d:e0:5b:a5:14:a7:b1:f8:87:89:d1:6e:d7:ad:1a:
         28:f6:2a:35:52:88:ed:c3:09:0c:31:62:b9:fb:d1:55:60:8d:
         c8:be:9f:14:5a:b1:96:26:dd:ce:f4:b1:92:c5:3f:3d:ca:17:
         1f:39:9f:19:41:7e:43:b2:60:ec:15:c7:b0:17:bb:7d:f4:e3:
         e4:bc:39:a1:20:35:bd:32:73:e1:54:18:22:d4:07:79:07:5d:
         27:1f:7d:05:bb:2b:b9:4c:af:d1:b4:54:c4:ef:ed:dc:c3:01:
         9d:a0:ac:58:61:a3:58:de:26:91:1d:f1:dc:38:15:97:26:1d:
         1d:a1:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:16:25 2025 by rpki-client