Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft
File:                     Akbop20wx8BJW8XOjuURD-qyhuY.mft (raw, json)
Hash identifier:          LQt+nfVWLcqaYDMuIDWq3jaHuaabtuoH4rjwjMI5x9w=
Subject key identifier:   B8:48:6B:19:D0:A0:C9:98:9A:9C:2A:A8:9D:7C:3B:8C:06:23:39:C8
Authority key identifier: 02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6
Certificate issuer:       /CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6
Certificate serial:       0197857C7F5F97D2CB4A87EBE3EBC83ABAE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft
Manifest number:          144D
Signing time:             Thu 19 Jun 2025 00:00:18 +0000
Manifest this update:     Thu 19 Jun 2025 00:00:18 +0000
Manifest next update:     Fri 20 Jun 2025 00:00:18 +0000
Files and hashes:         1: 3uIWyZ2-NdDfWkBz-Cz4ehXcDXw.roa (hash: MQ45FFneVJjtvuTav7T4FKF/BiqudQZo8fk5fSUR0xU=)
                          2: Akbop20wx8BJW8XOjuURD-qyhuY.crl (hash: hrPNshvbXytWwSO6V00AePIA/WutuhrEJ0TEVfwCCJg=)
                          3: PawZ63YCzLh66nBk8KkHzYsa-D8.roa (hash: MbGnyPjYsuuNw4Rc4to6au5h1LGwPajvRQALk91Nf/M=)
                          4: XFa9l_0cz21XUFqVHAhuFVoXl64.roa (hash: O42Bcxzs4yOQXX2kULBWDWVCdsdJQDwpjOWp8Rqh6bk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 23:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:85:7c:7f:5f:97:d2:cb:4a:87:eb:e3:eb:c8:3a:ba:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6
        Validity
            Not Before: Jun 19 00:00:18 2025 GMT
            Not After : Jun 20 00:00:18 2025 GMT
        Subject: CN=b8486b19d0a0c9989a9c2aa89d7c3b8c062339c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1b:c5:3b:69:f3:5f:1a:81:6f:62:b7:fa:d4:
                    c6:fd:13:04:64:f0:4d:3c:ac:a7:c4:06:dd:56:2e:
                    05:64:27:45:61:09:09:62:d5:bd:42:3d:e3:fd:a7:
                    fd:60:9c:4f:07:29:d6:84:92:42:fe:7a:71:f9:64:
                    e0:d7:2a:85:a3:26:88:4a:ed:06:dc:20:49:df:9b:
                    5c:a8:94:c9:3e:15:4c:86:f1:88:92:27:6e:ed:fc:
                    59:ab:0b:00:fc:db:f2:4f:15:5f:79:8a:7b:9c:7f:
                    80:32:11:73:85:54:43:fb:45:dd:18:01:d7:08:46:
                    68:45:aa:5e:b3:de:1f:5b:0d:47:85:d2:79:58:6b:
                    f9:70:d9:e5:76:da:f6:38:05:7a:f5:3d:6c:03:27:
                    af:71:9d:5f:46:23:6f:df:78:8a:4b:3f:fb:68:b0:
                    73:36:f1:db:3c:74:05:1e:e2:2c:61:94:99:0a:4d:
                    f3:d7:5c:2a:08:33:49:8f:07:1a:c9:67:a4:d1:35:
                    c4:ea:05:20:c0:ad:e0:8f:d6:ae:90:fc:d9:27:47:
                    9a:de:68:6b:8c:29:98:da:97:12:0a:9f:99:61:ad:
                    29:4c:80:ed:f1:f4:0b:af:d0:d8:0b:6e:98:1c:38:
                    64:d5:55:6b:95:92:7f:ec:4e:0e:e3:c5:33:8d:47:
                    71:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:48:6B:19:D0:A0:C9:98:9A:9C:2A:A8:9D:7C:3B:8C:06:23:39:C8
            X509v3 Authority Key Identifier:
                keyid:02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:91:fb:43:7f:68:2a:b8:80:f1:12:b6:e3:cf:50:39:38:b2:
         c6:05:5b:a4:3e:6f:b2:ac:cf:4e:59:15:03:cf:8b:6e:47:62:
         d0:a8:d2:b3:27:71:61:2a:dc:0d:44:34:ea:73:a8:48:35:27:
         0f:ff:3c:3f:88:42:95:55:9a:f0:ec:4d:6c:f3:4f:7c:6e:5e:
         d9:d7:1f:9c:54:7b:28:24:a7:21:0d:b8:1d:e8:c7:c5:68:d8:
         ac:6f:93:cd:8d:55:1d:25:d9:d4:cd:39:61:77:0b:36:e7:b7:
         41:53:fc:91:0e:c2:66:0f:5e:89:24:25:4e:e7:f4:10:9c:bf:
         8f:60:be:a0:1b:db:4d:65:ac:28:75:e2:11:c8:55:b9:ba:23:
         26:63:fc:40:8b:65:78:1e:30:66:2d:7a:16:5c:0e:cd:71:c5:
         e7:f6:ff:4d:7f:8c:45:50:02:7e:07:06:07:40:e2:37:5b:3c:
         0d:f3:c5:0c:bd:a2:70:2b:97:c3:36:c9:a2:a5:d1:a8:dc:36:
         84:0b:b1:83:7f:82:2b:64:79:10:35:15:45:1b:6f:11:e5:08:
         cd:f5:98:de:c4:2b:5e:5e:01:59:d6:6a:a5:2f:d4:be:7d:95:
         ef:21:2f:a8:14:40:d1:d8:f8:4c:b4:fc:37:50:bc:4a:64:49:
         88:e1:90:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:40:01 2025 by rpki-client