Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
File:                     rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft (raw, json)
Hash identifier:          yZmgya1QktUEoTQjWZA4H/mnUosTgaGOMZhHOAgaupY=
Subject key identifier:   06:93:B8:05:F6:21:A0:DB:A7:2F:AA:CC:4A:3B:31:C3:62:B0:C9:D9
Authority key identifier: AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A
Certificate issuer:       /CN=acd6be97bcfe12becbe82b7841047f57972a935a
Certificate serial:       019778D3A733C5444E90735F527F25BB2D3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
Manifest number:          0569
Signing time:             Mon 16 Jun 2025 13:00:26 +0000
Manifest this update:     Mon 16 Jun 2025 13:00:26 +0000
Manifest next update:     Tue 17 Jun 2025 13:00:26 +0000
Files and hashes:         1: 6wOJsAVY-euwnRWmrQyAWiR15SI.roa (hash: is8qHNDUGOGtnmeZTaDPuu15VlXH7W1zJ6ndggR7ME0=)
                          2: rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl (hash: OVc4kRCDHtGT8oJaH5tivmCeLqylFdLBpl8ZLH73sF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:d3:a7:33:c5:44:4e:90:73:5f:52:7f:25:bb:2d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acd6be97bcfe12becbe82b7841047f57972a935a
        Validity
            Not Before: Jun 16 13:00:26 2025 GMT
            Not After : Jun 17 13:00:26 2025 GMT
        Subject: CN=0693b805f621a0dba72faacc4a3b31c362b0c9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:80:80:88:6d:ff:e5:5b:8a:cb:bd:c3:32:
                    92:86:4b:66:6b:32:de:e3:85:84:f1:4e:b4:3d:76:
                    23:c0:92:01:6b:c7:a4:6b:28:17:c0:ce:52:36:d8:
                    53:fb:d1:e5:0a:1b:a7:0d:6d:f5:41:58:a0:c4:14:
                    17:7f:8a:6c:88:94:4b:37:d5:d3:09:24:31:83:dc:
                    79:70:f6:f9:23:f9:67:ef:4d:f5:73:e1:d9:25:5e:
                    48:75:ac:28:11:fd:cd:a7:2f:e2:65:14:9f:94:60:
                    17:4b:c2:ba:f8:72:7f:38:db:ad:44:72:bd:d8:21:
                    72:3e:54:c0:4a:9b:35:24:fa:b6:0f:7f:97:39:39:
                    37:c6:35:4c:67:d0:bf:be:af:3c:20:16:bc:a3:80:
                    d6:c4:a3:00:86:5a:69:56:80:cc:e4:11:9f:d2:45:
                    a5:07:0b:f3:0d:93:33:15:1a:ab:df:f0:99:a7:b3:
                    c7:47:96:2c:32:d1:16:3f:5d:68:47:b8:37:34:92:
                    a1:6c:5c:b1:05:ab:58:76:67:2d:23:c2:0b:0a:90:
                    30:43:d1:4d:87:63:60:3d:97:e3:c6:59:9b:8d:20:
                    46:d7:39:0d:b8:31:78:12:07:88:b5:40:0f:72:5b:
                    53:e8:7d:90:02:be:c3:a0:74:af:a8:eb:bb:cf:6c:
                    d1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:93:B8:05:F6:21:A0:DB:A7:2F:AA:CC:4A:3B:31:C3:62:B0:C9:D9
            X509v3 Authority Key Identifier:
                keyid:AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:3a:83:83:54:f4:92:a0:a9:6e:c7:46:d3:5b:17:89:61:c0:
         9e:ec:54:f0:18:cc:11:13:40:8d:61:a7:75:9f:45:64:1f:73:
         44:53:1d:b5:c4:10:8c:e9:68:6f:9f:cd:66:15:85:fd:52:8e:
         42:2a:a3:9b:de:dc:e2:ce:d8:c0:d2:d7:f3:01:9e:a9:12:0b:
         5d:4c:5f:93:69:9a:06:32:2f:e2:60:0f:73:c4:ae:58:99:73:
         51:42:d7:fb:33:33:25:51:a2:04:46:11:01:bd:b9:70:87:a6:
         9e:37:f6:f4:65:01:c9:32:ac:83:a5:d6:38:f8:a3:39:c2:f9:
         ff:02:45:3c:55:45:1f:0a:98:72:c1:4e:3e:ec:07:de:e4:62:
         41:fe:37:e8:3c:ab:ff:1c:6a:c1:30:c5:fa:f3:86:80:47:17:
         12:5c:35:97:cf:5a:64:92:af:64:d1:6d:c3:a6:9a:8d:0b:cd:
         eb:9a:f4:c6:f3:30:bc:f4:c6:5a:5c:16:e0:25:d7:09:f2:c0:
         56:48:bd:e7:a3:77:98:9a:7d:47:ef:96:b4:9d:7f:86:78:7f:
         43:ab:45:c1:e8:82:5d:2d:bf:a0:97:b0:ba:1e:e7:bb:29:6e:
         2c:05:b2:82:af:86:60:59:1d:af:13:6f:03:4e:5a:97:bb:0e:
         d0:ae:0b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:46:27 2025 by rpki-client