Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
File:                     aNogbIPVBeJUs-88dlD5-5NFNDU.mft (raw, json)
Hash identifier:          +PmR3qzF3nwkadIDKFoMWP4x8iA2V4JOUxnddlnlbDk=
Subject key identifier:   FE:CE:80:E4:83:12:C8:70:95:7D:BB:E4:3C:B4:B4:B3:B3:1B:06:A2
Authority key identifier: 68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35
Certificate issuer:       /CN=68da206c83d505e254b3ef3c7650f9fb93453435
Certificate serial:       01977D1EF1BF02EE3910B2748EC8295333AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
Manifest number:          0886
Signing time:             Tue 17 Jun 2025 09:01:09 +0000
Manifest this update:     Tue 17 Jun 2025 09:01:09 +0000
Manifest next update:     Wed 18 Jun 2025 09:01:09 +0000
Files and hashes:         1: 9yjOyCjaNQvZmslgCNfY4UdjDvM.roa (hash: BLcuMbjq4mGuK5Vn41A+M+OAou14cd2H96ukojI5mmM=)
                          2: aNogbIPVBeJUs-88dlD5-5NFNDU.crl (hash: woWVtO+0giKCvfQy0aB8WtHkqRENS3J6SMMogGBFiok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7d:1e:f1:bf:02:ee:39:10:b2:74:8e:c8:29:53:33:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68da206c83d505e254b3ef3c7650f9fb93453435
        Validity
            Not Before: Jun 17 09:01:09 2025 GMT
            Not After : Jun 18 09:01:09 2025 GMT
        Subject: CN=fece80e48312c870957dbbe43cb4b4b3b31b06a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bb:de:1d:84:74:5f:b8:66:11:62:e5:63:a3:
                    9b:1f:8f:39:d6:fe:16:1a:51:fe:9e:db:a4:70:20:
                    7d:a5:1c:43:b1:cd:d7:ef:5f:a7:55:78:6e:28:ee:
                    11:dc:7c:57:91:5a:f9:c9:8a:9c:31:c3:ae:65:38:
                    21:93:13:b5:38:a3:b2:00:42:85:37:2e:56:13:82:
                    14:8d:e0:52:07:bc:b8:5e:ba:92:35:e5:7c:60:4c:
                    cc:1e:da:16:81:6c:73:97:a5:02:1c:3e:3f:84:3a:
                    40:a7:ba:a5:16:38:1f:92:09:20:2f:77:a4:61:c9:
                    55:19:e5:c1:f5:f5:35:12:cb:11:f5:af:2b:03:92:
                    73:bd:14:19:f1:00:9a:0e:c6:f7:87:a1:ef:2a:3a:
                    bc:f1:4f:6a:e2:99:8b:21:53:92:b7:4b:f0:e6:7b:
                    68:00:3a:6f:f0:c5:88:b5:ea:6c:7a:27:26:59:6c:
                    27:9d:fd:9f:44:9a:f2:32:45:e4:ba:5b:c7:0a:f8:
                    96:7f:42:5f:3d:1d:fd:55:13:7c:74:41:8c:28:b2:
                    22:f6:f5:b0:f3:c1:36:f1:54:22:c7:40:bc:97:81:
                    d4:86:28:4c:17:9f:ca:65:89:66:cb:f8:b7:ea:4f:
                    52:52:72:75:7c:92:d2:66:e4:82:a5:8b:48:4c:9b:
                    31:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CE:80:E4:83:12:C8:70:95:7D:BB:E4:3C:B4:B4:B3:B3:1B:06:A2
            X509v3 Authority Key Identifier:
                keyid:68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f9:2a:db:f3:3a:f6:88:0b:df:8c:1e:60:26:3a:de:2d:cb:
         eb:f3:b1:f0:96:b7:84:f5:60:16:0f:e7:ca:f9:fe:13:7b:b0:
         46:63:af:be:14:06:7f:57:d3:f9:fb:fe:af:15:5b:13:0d:ba:
         7c:78:8a:cc:fc:2e:9c:be:8d:0b:45:ac:d7:b0:54:31:a9:33:
         6a:3d:e6:91:f9:21:05:d4:50:b2:65:26:80:cc:b3:a0:9d:d0:
         73:56:ce:6e:7e:2e:5d:31:aa:d8:1d:ea:97:af:ce:17:c1:d5:
         ae:75:fb:e5:30:37:08:46:c7:2f:20:08:2e:10:05:1b:d2:45:
         92:60:25:10:3f:ee:1a:10:db:df:39:a2:51:ee:a4:6a:08:73:
         23:b4:1d:b4:02:03:ca:24:86:6e:d3:69:30:fc:86:13:5f:5c:
         ca:7e:cb:7f:58:f7:85:43:90:ac:20:c0:38:e0:c1:ed:30:93:
         02:05:da:3b:c9:95:02:8c:35:63:83:86:e2:29:98:48:85:cd:
         33:59:2a:df:51:f0:fc:f0:87:35:a2:0b:36:32:5b:37:fc:03:
         1e:a5:4c:e2:98:83:76:ec:cf:b6:93:6f:cd:30:e0:32:6a:dd:
         0d:b5:0f:bc:34:d5:8a:fa:69:fd:e8:b0:4d:68:4b:ef:fb:e2:
         b6:fc:ce:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:13:45 2025 by rpki-client