Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
File:                     AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json)
Hash identifier:          JU1BAYQl0uVS+s8j++8abCSwQEUaahUwJE9VnQ88Qeg=
Subject key identifier:   FF:71:D9:AA:FA:97:CB:FA:7F:E9:2F:01:25:7F:68:26:23:F8:1A:0D
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Certificate issuer:       /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial:       01976E87752C7938258D0225FFAC02B2D4ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
Manifest number:          08C2
Signing time:             Sat 14 Jun 2025 13:01:00 +0000
Manifest this update:     Sat 14 Jun 2025 13:01:00 +0000
Manifest next update:     Sun 15 Jun 2025 13:01:00 +0000
Files and hashes:         1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: +r4MdlTKv3k/K+4o1B1uJTJYmlTQCx1h/CP07FY3hjo=)
                          2: KWN7lbu9UX4daUEdNDAK3ZMrFAk.roa (hash: WqU1UFiFL55OvehHLohuI3Znyc7Zm1Aa844JXIgkQ7A=)
                          3: RuH2k0iAjasiUyAH22AdPFV5Ae0.roa (hash: +Reg0vgoBRw6w4QQfuC6Wd/elCxMYo7/ChLckPoqJlc=)
                          4: wC6GvOL96y7ng1OaBtu0ACc0Uv8.roa (hash: Pb/46jJY/4NqGVEPi/tZl2cVHTdO0P2kZSbGSJnkcFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:87:75:2c:79:38:25:8d:02:25:ff:ac:02:b2:d4:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
        Validity
            Not Before: Jun 14 13:01:00 2025 GMT
            Not After : Jun 15 13:01:00 2025 GMT
        Subject: CN=ff71d9aafa97cbfa7fe92f01257f682623f81a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:74:aa:a5:75:c1:51:a0:94:3c:94:01:d3:
                    07:c5:68:b5:93:0a:a9:9d:f4:00:58:f1:38:47:2a:
                    6c:14:84:02:cf:e1:36:a5:40:83:fd:23:b5:dc:3b:
                    a8:2a:69:b9:ae:d1:9d:8a:be:4b:0d:3d:8c:1a:dd:
                    d4:73:a8:73:c4:ad:01:1c:a3:9d:4f:34:9b:ef:7f:
                    aa:6b:37:e1:6e:2c:57:ae:1c:87:64:01:e5:75:97:
                    3b:23:d0:7e:d4:fa:21:ff:29:0b:ca:29:b4:65:dd:
                    5b:25:27:76:a4:13:b3:52:3f:3e:c7:14:0e:44:fc:
                    89:bc:5f:a8:61:01:a2:98:1e:19:9e:93:ca:64:2c:
                    eb:88:08:a0:15:52:c0:68:cb:6d:e3:ca:10:c5:d9:
                    5d:84:0a:ec:7b:3b:0d:61:4a:e4:57:fe:71:7e:e4:
                    70:39:cb:31:2e:ed:7d:52:49:2e:fb:99:2d:df:2b:
                    e0:b3:e7:12:0b:e3:35:35:01:fd:7c:b9:02:f1:45:
                    8d:ff:bf:57:22:35:b3:9f:4c:6d:f2:c4:4e:b4:12:
                    87:a1:09:18:a9:ab:33:d0:68:d8:94:22:d0:c6:c6:
                    28:1f:f5:85:eb:82:5d:8d:d5:75:80:93:86:36:53:
                    70:1f:5e:7b:0a:51:e9:e7:6a:bf:22:00:7e:5b:21:
                    1e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:71:D9:AA:FA:97:CB:FA:7F:E9:2F:01:25:7F:68:26:23:F8:1A:0D
            X509v3 Authority Key Identifier:
                keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:0c:27:8b:27:e0:ba:f6:6d:98:9d:2f:d5:cf:10:20:0d:03:
         14:40:be:ed:e6:05:49:1a:0a:a3:b9:83:9e:ef:2f:b0:6a:de:
         43:df:4b:f0:7d:85:dd:0c:57:89:72:f6:de:4f:ce:ae:fd:bb:
         fd:c5:4d:28:53:d2:af:3b:d8:4c:33:80:7a:b9:8c:9c:88:3c:
         fb:4e:fd:cb:5d:c4:81:0b:4f:67:53:ec:db:f0:3d:22:e9:29:
         48:c3:8e:91:64:15:f9:eb:64:81:92:ee:9e:af:c9:24:cf:30:
         5d:d1:97:18:1d:20:ce:b2:8a:d8:3c:e5:cf:3e:a6:30:ec:b3:
         2f:db:e0:11:46:c8:c8:66:4e:8b:99:db:c9:c5:a0:d0:36:18:
         2b:d8:8a:ad:dd:e6:f4:f8:aa:f5:4c:2c:8e:20:c7:3f:05:c8:
         32:86:5c:76:1e:b5:21:25:b2:6a:33:f8:b3:7d:08:ae:75:bb:
         b7:a3:73:cb:72:66:eb:ed:8f:ca:31:25:4b:67:49:f8:08:4d:
         77:bd:4f:5a:14:99:9a:45:a1:43:12:3e:70:a7:39:4a:f4:87:
         44:8c:fc:d4:87:f4:95:05:f9:c3:4f:8f:07:b7:fa:e3:b5:21:
         ee:1c:4f:d9:02:63:c7:7e:a0:25:42:a7:f2:9d:9a:12:d0:2b:
         1a:57:ed:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:32:06 2025 by rpki-client