Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
File:                     s2DwCXvkgcIbsdUchdRPZXQViqk.mft (raw, json)
Hash identifier:          8thNGdYobFGlJMwXUXeE1Qd3AvxqiLkg9CZCdhxWPk0=
Subject key identifier:   05:5E:44:FF:7D:A2:F8:67:0C:BE:1A:7C:DC:C1:C3:AD:6E:68:3A:20
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Certificate issuer:       /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial:       0197745287174C20B6081FE41D819C771377
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
Manifest number:          0604
Signing time:             Sun 15 Jun 2025 16:00:54 +0000
Manifest this update:     Sun 15 Jun 2025 16:00:54 +0000
Manifest next update:     Mon 16 Jun 2025 16:00:54 +0000
Files and hashes:         1: 0FvyRdwuNrCgMP49Gm05_Jf24wo.roa (hash: VrNtxHJD5r4AAcIekiYzDFEjX0OLNvQVaPqP96ejauo=)
                          2: XJdcwddEgs-q78gmSagWMovn85I.roa (hash: Je76MM+YNyOi1CdfvkLH4QNZ11rGS/XGNeifQiQFCLA=)
                          3: eRE1hc1OAUXn9B2yIqa6q1KtEng.roa (hash: 2kkOJHVByX9Ad1TRTPwMrwhabgTLNmB9YR0YC04Cis4=)
                          4: s2DwCXvkgcIbsdUchdRPZXQViqk.crl (hash: 2oYab1NEAZpUi1O2FalIFWX/nKuRQBNFwRwRoTmFkFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:52:87:17:4c:20:b6:08:1f:e4:1d:81:9c:77:13:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
        Validity
            Not Before: Jun 15 16:00:54 2025 GMT
            Not After : Jun 16 16:00:54 2025 GMT
        Subject: CN=055e44ff7da2f8670cbe1a7cdcc1c3ad6e683a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:a9:ab:f5:72:12:91:88:64:b0:f7:99:34:
                    df:44:1f:de:0d:3d:54:01:82:4f:32:06:04:5d:02:
                    f4:2c:a0:7d:90:3e:47:1a:62:90:00:c4:b4:bc:8a:
                    42:2a:37:fb:49:48:8e:53:f4:f3:c4:ea:b1:c6:bd:
                    f0:8a:af:48:a8:f5:f2:ac:f0:c7:a1:a6:bb:d8:f1:
                    0e:ea:99:78:ab:4a:39:1f:e3:d5:52:a1:b7:61:1e:
                    90:19:b9:1f:1b:5b:63:6d:38:bf:f9:25:a5:43:1d:
                    2e:8d:43:e5:34:41:66:00:6b:2e:89:e4:c7:33:7e:
                    53:6d:ec:05:68:2c:b9:3b:2c:46:43:15:be:4f:c9:
                    03:8a:0b:a6:86:63:a7:9f:d7:57:be:f0:d6:b5:7a:
                    cb:1d:8c:e9:14:88:2f:ed:c4:07:e5:7f:01:87:26:
                    b0:66:12:8c:5e:8e:99:b1:99:1b:4e:3c:40:0a:eb:
                    db:94:53:2b:5a:62:61:09:86:fd:fa:f8:1f:28:ab:
                    f1:9b:c4:3f:0c:64:42:75:5d:15:09:ad:fb:b7:ff:
                    bb:df:bc:f8:fb:0e:29:16:03:73:b4:3f:d6:a8:ff:
                    49:2c:79:36:21:0d:31:cc:64:a5:1e:b9:da:f9:6e:
                    6e:27:f5:d5:08:fe:c0:d5:0d:9d:57:98:34:47:98:
                    e9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5E:44:FF:7D:A2:F8:67:0C:BE:1A:7C:DC:C1:C3:AD:6E:68:3A:20
            X509v3 Authority Key Identifier:
                keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b9:1a:f1:97:69:82:47:b1:17:aa:be:49:e2:6a:65:76:50:
         69:a4:6d:9a:b5:91:29:77:4e:79:08:dc:e3:a1:24:20:23:cf:
         62:b5:40:59:f0:fc:89:e4:a8:8c:96:63:b5:5d:32:8d:e6:91:
         59:2e:dc:78:5c:ff:8c:a2:98:6c:72:96:f8:7d:7f:6a:ba:c5:
         4c:08:a8:3a:a7:51:27:d4:86:bb:ac:0b:e0:3c:d5:c1:05:d6:
         7b:2b:38:89:0f:54:2b:a2:a5:d0:36:90:18:06:a2:3d:63:3e:
         e9:10:79:90:c9:29:ed:67:18:70:c8:d3:22:d4:6b:db:df:c5:
         48:98:d5:d9:88:ab:32:20:f4:98:49:05:e6:48:53:65:de:3a:
         b5:3a:12:1d:6c:40:db:2a:49:40:9e:3d:2c:31:ed:9d:50:db:
         05:27:61:4f:64:e6:10:d9:1a:a8:16:37:66:91:be:54:4b:3d:
         59:14:5e:1a:ca:df:57:5b:e2:70:6f:28:a8:c4:ec:84:e5:21:
         f9:fc:46:d1:8b:37:e7:8b:59:0d:be:03:3f:87:ce:30:e1:39:
         3b:ed:7f:3f:84:dc:4b:34:66:33:bd:55:70:43:a5:de:6b:d9:
         51:e9:1a:10:84:bf:77:be:8b:00:6b:a4:d1:c8:10:b9:31:53:
         b4:3f:fd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:03:29 2025 by rpki-client