Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
File:                     k7MitZBI4Qe5Sm2wZVevXwycKQw.mft (raw, json)
Hash identifier:          0ptyKcfdwA5rcnvwYXq0uvLtVNoE7QPLiHLWw79LIHA=
Subject key identifier:   39:11:3F:9D:AA:C5:0A:3A:E4:56:F0:B1:A9:14:25:6C:10:C8:5A:5F
Authority key identifier: 93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C
Certificate issuer:       /CN=93b322b59048e107b94a6db06557af5f0c9c290c
Certificate serial:       019769610F62DD7C00BA3E1840D59F462743
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
Manifest number:          151F
Signing time:             Fri 13 Jun 2025 13:00:58 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:58 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:58 +0000
Files and hashes:         1: F5bs6DNVTHOaUsVHiFb7UzCDu7c.roa (hash: w/qr34whaxn4VYChdCHJu1JeKElghciF+2vacPtM24Q=)
                          2: k7MitZBI4Qe5Sm2wZVevXwycKQw.crl (hash: CuGtOmF29Ns6HpsqyyJ4OfL9w3I7L05OoCCBqChab8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:0f:62:dd:7c:00:ba:3e:18:40:d5:9f:46:27:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b322b59048e107b94a6db06557af5f0c9c290c
        Validity
            Not Before: Jun 13 13:00:58 2025 GMT
            Not After : Jun 14 13:00:58 2025 GMT
        Subject: CN=39113f9daac50a3ae456f0b1a914256c10c85a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5e:bb:b1:67:97:32:3a:ff:ba:c3:50:ab:d6:
                    9a:a3:21:b2:8c:83:80:ca:3c:9a:b4:02:4c:e0:2b:
                    4f:a9:5c:ba:30:cd:a5:f7:b6:4d:5d:d7:c0:8a:d1:
                    b1:69:34:fa:59:31:ba:a4:2a:f6:b3:57:30:35:18:
                    d8:f0:a3:a1:b0:35:16:73:86:41:bd:42:72:87:07:
                    22:c0:76:a8:ab:d1:c1:6b:01:c6:4d:56:ab:b9:a8:
                    66:01:ab:1f:7a:c0:66:20:fb:7b:16:88:4e:69:be:
                    84:28:a9:6f:b2:2a:72:5c:46:14:8c:4a:b8:b2:94:
                    43:00:67:1b:5e:88:aa:0f:4e:af:c6:1c:38:5e:52:
                    c6:fa:5a:f8:0f:8c:bd:7e:99:06:ab:bd:ea:e4:38:
                    3e:fc:86:68:70:86:73:b8:16:69:64:c5:22:fa:65:
                    5e:7c:42:bb:84:40:74:25:f3:0b:27:fc:3f:66:2e:
                    27:c2:f2:ba:0b:74:f9:7b:84:f7:69:ac:19:73:82:
                    c1:6a:c3:90:86:fe:58:ae:e5:8c:27:44:65:55:ad:
                    c9:ac:8c:d0:d0:7e:cd:81:63:c0:df:ab:97:c4:6e:
                    2f:43:ce:20:9e:71:e0:e9:e7:37:e4:25:19:fc:55:
                    5e:67:70:8c:b8:ea:a1:cc:54:f1:35:65:5c:73:86:
                    16:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:11:3F:9D:AA:C5:0A:3A:E4:56:F0:B1:A9:14:25:6C:10:C8:5A:5F
            X509v3 Authority Key Identifier:
                keyid:93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:53:d3:68:9f:bb:c6:08:96:b7:22:34:82:d4:8f:d6:64:ba:
         7c:cd:0b:46:92:81:fb:24:25:54:7d:18:73:43:96:04:38:f2:
         24:37:e8:a9:31:3a:40:af:eb:75:c8:ae:92:f4:a5:d8:94:e2:
         36:bd:6c:9a:28:f2:a0:cb:c5:c3:4f:0c:a8:45:44:f4:63:e5:
         c5:f6:a8:a1:7c:69:ec:57:82:b6:27:c8:ef:3a:71:eb:90:70:
         f2:c0:eb:dc:b3:ba:d1:67:f0:0e:12:22:58:db:78:58:cb:e5:
         c2:0c:03:70:ac:c8:cc:2d:25:ea:48:0f:03:85:e2:fe:d4:f0:
         ec:ca:50:47:aa:b5:d8:4e:e8:d4:bb:98:a3:83:6b:35:ba:5c:
         6b:58:9f:dd:b1:64:3d:63:23:a9:fa:6c:47:fe:df:4f:32:b9:
         de:55:cf:fa:99:86:be:f5:80:cc:d8:3d:cb:ea:b0:f5:3f:e6:
         51:f2:27:ad:db:28:92:02:1d:a4:1e:77:c4:e0:50:d9:50:6c:
         1d:56:9e:61:88:38:36:0c:bc:41:1b:36:8d:ab:72:10:f9:a0:
         f4:13:fb:1c:b9:99:99:ff:92:cd:72:9a:5c:03:ec:15:f9:1d:
         07:38:f6:50:8a:da:50:8b:e3:0f:6b:ca:79:f8:f8:37:65:6e:
         d7:c3:c6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:14:56 2025 by rpki-client