Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
File:                     evoTWyBy38xO87VBwTa8gAHvQwc.mft (raw, json)
Hash identifier:          hWi+RpcvW7K4zUDWCVMaikr10UnUVSUYq5CrZcqa4TM=
Subject key identifier:   43:99:28:26:2A:F0:61:5F:F0:23:A2:7D:AE:74:67:9F:A7:B0:B8:8B
Authority key identifier: 7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07
Certificate issuer:       /CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
Certificate serial:       019770E3B48045FE199C19572B89CBD6583F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
Manifest number:          0A14
Signing time:             Sun 15 Jun 2025 00:01:00 +0000
Manifest this update:     Sun 15 Jun 2025 00:01:00 +0000
Manifest next update:     Mon 16 Jun 2025 00:01:00 +0000
Files and hashes:         1: 1VFRaILqnJnJB3yngV6vDeJcapk.roa (hash: CqxIJgH7ih1CRmTJoFGPX9x50D1IUJFOHfeDDgVZwRg=)
                          2: evoTWyBy38xO87VBwTa8gAHvQwc.crl (hash: +8jADlfqSdbs1dxe4ayVumb6O+v9O3VkevJx6pTtnTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:e3:b4:80:45:fe:19:9c:19:57:2b:89:cb:d6:58:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
        Validity
            Not Before: Jun 15 00:01:00 2025 GMT
            Not After : Jun 16 00:01:00 2025 GMT
        Subject: CN=439928262af0615ff023a27dae74679fa7b0b88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:53:75:b3:08:12:ad:ac:0a:62:9a:e2:86:
                    86:1a:d9:79:e0:ab:25:47:8e:26:43:fe:14:c6:09:
                    f1:fa:c0:9a:27:cb:66:c0:7d:09:61:c5:71:ad:14:
                    b2:84:d2:3d:27:e3:2f:11:05:cc:83:5f:dd:92:df:
                    a2:7e:37:5c:ca:32:16:f3:ca:23:c1:f6:ab:6f:15:
                    9c:3e:63:b5:69:f7:ba:9a:9a:2f:6f:54:dc:e2:fc:
                    e0:a3:47:fc:8b:97:7f:d9:e5:3f:24:17:7a:ef:d9:
                    94:50:e3:4a:dc:db:e4:51:77:50:1d:96:f9:46:bf:
                    7d:66:92:00:6e:0e:06:2a:f6:84:ff:41:c8:3b:cf:
                    a3:5b:a5:64:9c:92:3a:45:11:db:1a:d9:44:63:83:
                    05:bf:d2:ca:8c:ec:9d:db:ee:0b:aa:3c:94:73:25:
                    f0:42:31:27:50:bd:be:60:44:04:ae:34:ff:92:ba:
                    fa:3d:99:12:cc:b9:3c:2c:79:bc:8d:27:49:84:52:
                    36:04:72:0f:ca:c9:12:81:d7:ef:f2:8b:a7:17:e8:
                    47:15:53:6e:f1:1b:a0:38:e3:eb:6a:a1:60:f5:ea:
                    e2:8f:d2:e5:e6:11:91:75:23:89:fc:aa:b8:61:5e:
                    ca:0b:8b:f7:42:57:53:9b:9c:4c:e8:df:15:0c:7b:
                    34:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:99:28:26:2A:F0:61:5F:F0:23:A2:7D:AE:74:67:9F:A7:B0:B8:8B
            X509v3 Authority Key Identifier:
                keyid:7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:0f:6c:cb:4f:7e:96:30:eb:1c:81:41:20:46:31:e6:8e:80:
         66:a7:29:26:60:96:11:16:67:b7:62:09:31:f6:05:20:76:f6:
         c9:63:bb:57:68:cc:35:84:59:23:0e:20:ba:c6:0c:b6:9a:60:
         86:fd:fe:51:fb:3d:9f:47:1c:ec:a2:f2:83:8a:48:41:8c:64:
         90:d0:07:54:d0:d4:26:c1:eb:4e:48:b2:b0:d7:1e:91:dc:43:
         68:c0:0f:a9:1c:69:95:7c:5b:25:7e:dd:13:11:85:14:85:d4:
         a4:68:01:26:7e:d4:29:30:d1:13:8a:2c:30:90:8f:aa:9e:87:
         48:ef:d9:37:a8:d4:ef:fd:c0:2e:4a:64:b2:f0:c6:a1:8a:d7:
         c5:16:1d:a9:34:c8:d1:5d:44:2b:42:15:24:c1:ae:80:31:5f:
         3e:ab:4b:94:1d:c5:7f:c5:ba:6b:36:3a:78:b6:c9:c0:02:b2:
         e7:05:b8:cf:85:ed:f2:77:53:00:95:04:36:d5:98:c0:9e:a8:
         98:a2:61:9b:3f:6e:0a:45:e0:95:5d:61:6d:14:84:fd:cc:aa:
         0f:f3:71:e0:2e:e8:17:4e:00:9c:14:ce:ce:f5:db:ae:47:83:
         82:5d:42:5e:cf:49:bb:9f:ee:f2:72:92:a0:aa:25:26:94:48:
         b8:24:49:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:13 2025 by rpki-client