Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
File:                     KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft (raw, json)
Hash identifier:          jVfW2o0Ss7cMrloLaMjZPTuglHjKMGtF6VpUfhXqens=
Subject key identifier:   F3:66:2D:7E:64:A0:CB:58:2E:98:4D:6F:81:3A:D3:CD:54:60:3F:64
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Certificate issuer:       /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial:       01977AF97D8FADB7E5C36BF8470E70212A70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
Manifest number:          0A75
Signing time:             Mon 16 Jun 2025 23:01:00 +0000
Manifest this update:     Mon 16 Jun 2025 23:01:00 +0000
Manifest next update:     Tue 17 Jun 2025 23:01:00 +0000
Files and hashes:         1: 3n7I_kSrxdGXM-Yy8kH4fsc4pN8.roa (hash: s/PREhsDL5iYmJE9h5sCUC+jgqMKpegaWts1GqNWSms=)
                          2: FV9U3Yv2I7_2992_Tu4mBiIQFlI.roa (hash: /WpBV6VXQYMepV5lfUa4zJ1OtPuJRJ1gNT7mbz//kPY=)
                          3: IvOVPi4Jk0LAA7IyC_lBmoedUPk.roa (hash: iVbMNdqQVbnDfCnhCbcyzkADBiETtoTlj0kjeIAta6w=)
                          4: KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl (hash: CUgBv9M6b8k0t60ADPeIqg77lPPVUKyUi+UXkGA6GyE=)
                          5: T16pm2MQEAUE2FMbSssYLk6CkTk.roa (hash: 7uW7JXvNCvoGIxe5Z6TwqqTVQIqIp/L1A4jFvTPd0mc=)
                          6: VJKr8K21Xfen5uk1xCfGFVJrqNs.roa (hash: kXpjzIlwN+Gv44HIvCkq7vJ72G9g6c72ZjdAcBJOo5Y=)
                          7: _54CIVi2Yw4yngdpfKbMO07oyqo.roa (hash: TM5Ay2NTiDiELYyiOeCmFyJPSSpITIxR/LNxTfFDHDg=)
                          8: c9AU5dwP8sQuOBrK2TPaexkm-2w.roa (hash: rSgCsdAaOy2GK2SsQ0HASyv7OgScD7Kz2kXb5Hn5ibY=)
                          9: ca6XJ5NiIiIJ1gn26NWoBZY1OOE.roa (hash: m0MfY3W/yHtAcpQIPruy2IhGfS2aQQkvwxrvdJx1dpE=)
                          10: ozTUlRS2BP8xxCFNOquOdzTJVac.roa (hash: l1UJXUEegLYZKNp2zf9niVjLEqjlu26RHLObHLwCBJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:f9:7d:8f:ad:b7:e5:c3:6b:f8:47:0e:70:21:2a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
        Validity
            Not Before: Jun 16 23:01:00 2025 GMT
            Not After : Jun 17 23:01:00 2025 GMT
        Subject: CN=f3662d7e64a0cb582e984d6f813ad3cd54603f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:d9:e8:95:fd:dd:74:b9:a2:7a:73:cf:71:
                    bc:b5:10:8d:55:8a:1d:32:03:28:0f:1b:fb:a8:cb:
                    64:90:85:a9:51:23:86:a6:ed:e3:a4:5e:a5:09:db:
                    08:f2:27:4e:d5:94:a5:e9:93:d4:ed:ee:50:32:b3:
                    97:83:61:29:fb:63:5d:43:a7:4b:44:d1:2a:4d:7a:
                    75:17:0b:31:4b:8c:82:0c:2b:85:e3:b3:e0:da:98:
                    ac:97:46:4c:6d:7b:f8:ce:0a:f9:9c:d4:06:2a:d3:
                    de:50:5b:d1:4f:46:25:6d:0f:8a:6c:66:01:f9:7b:
                    f6:a2:0e:49:99:70:9e:cc:1f:c3:77:49:da:57:25:
                    fa:64:ba:86:67:d7:08:40:02:31:4d:46:ee:93:6f:
                    2c:89:23:b6:c4:3f:3d:d1:96:4f:3d:72:b1:1b:cf:
                    89:05:53:99:5f:9a:52:18:d3:3c:b7:66:56:79:0c:
                    00:ea:46:f8:38:57:de:56:e0:0d:b6:f8:c7:de:40:
                    a5:0e:1a:d5:4c:0a:83:2a:c0:e6:af:4d:5f:fb:e2:
                    8d:a4:56:ea:24:bb:fd:8b:e5:ea:90:fc:f7:bc:cc:
                    61:a8:6c:04:f2:f3:c0:86:6c:51:ab:06:25:b0:72:
                    1b:4e:30:c1:7b:27:11:86:a8:cb:dc:8f:f4:36:5f:
                    23:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:66:2D:7E:64:A0:CB:58:2E:98:4D:6F:81:3A:D3:CD:54:60:3F:64
            X509v3 Authority Key Identifier:
                keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c0:fa:78:a1:cc:3f:80:d1:cd:9d:85:de:23:d2:b9:83:e2:
         77:69:16:ae:d1:2a:6a:eb:c6:e7:1d:dc:9f:88:11:9a:46:24:
         2f:c4:a4:8f:0f:09:2b:5b:4e:74:4a:12:ce:af:30:0d:e5:a6:
         83:e2:db:f7:03:44:b8:3a:3e:59:f0:9e:e4:73:68:6d:58:fe:
         19:fd:28:a6:62:c0:7b:81:68:f7:01:07:83:0a:16:97:8f:48:
         51:c4:51:93:ca:c7:76:0b:a0:12:e2:69:7d:4f:75:08:d2:7c:
         14:4a:af:13:fa:47:e9:94:41:7e:6d:cb:3c:47:74:94:4b:e8:
         c5:43:8f:e5:13:ac:a1:28:d3:ad:04:60:9d:02:4b:85:ee:6a:
         4c:46:ff:94:62:1c:49:e7:13:5b:3a:22:d0:3f:6b:05:08:0d:
         87:2a:2f:ea:9a:bb:af:a7:0f:87:c8:84:6e:7c:4f:37:54:7b:
         68:b2:d2:eb:a0:e6:70:b2:8e:26:d8:ed:89:99:cc:39:be:bb:
         4a:7b:f5:6d:34:5d:d1:93:4e:bd:82:16:37:8a:98:50:8d:79:
         50:96:dc:e4:1f:89:29:09:38:52:dd:af:92:78:a5:76:46:e4:
         37:1b:bf:6a:86:32:bc:34:8a:51:74:c9:2e:31:3a:c7:1a:3c:
         76:29:c1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:28:34 2025 by rpki-client