Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
File:                     mUT4EqDgAsOOhOR2KL26A4WYCQs.mft (raw, json)
Hash identifier:          oG2HSpiFOMXsmWPvoQLGRLyUcsMXZvvA8RepFTnV9j0=
Subject key identifier:   43:8D:08:5F:B6:1B:CF:E7:AA:9A:9C:97:FC:F8:DF:54:F1:3D:09:EB
Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
Certificate issuer:       /CN=9944f812a0e002c38e84e47628bdba038598090b
Certificate serial:       0197775328BB54C4A9975FF5C03130AB0066
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
Manifest number:          0B21
Signing time:             Mon 16 Jun 2025 06:00:27 +0000
Manifest this update:     Mon 16 Jun 2025 06:00:27 +0000
Manifest next update:     Tue 17 Jun 2025 06:00:27 +0000
Files and hashes:         1: 8bKL0IbQOSgAyNHMsOTwdqXxmBA.roa (hash: SiMZDaqzDjVBWVjWC+CfQKEVMp/aAzgNg3WOueNrYnY=)
                          2: TOZ32S2cTtEqOAugUTe4Diokmjc.roa (hash: ZfLvnSZb+3P/Lwkuj8mzNGrvWl0G71GHwv4eE3pKqaY=)
                          3: aWPrtGmH1Yyr9JygOmf8I8XXZSE.roa (hash: rxPNfyseh9mYpYa5sMESZMtb8GzaNyszUYWBRocITXE=)
                          4: mUT4EqDgAsOOhOR2KL26A4WYCQs.crl (hash: 9b2eO0oX/koofwi7Cj3gv/sHXyOqAREyMxEt48e0m0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:53:28:bb:54:c4:a9:97:5f:f5:c0:31:30:ab:00:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b
        Validity
            Not Before: Jun 16 06:00:27 2025 GMT
            Not After : Jun 17 06:00:27 2025 GMT
        Subject: CN=438d085fb61bcfe7aa9a9c97fcf8df54f13d09eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:50:7a:0e:e4:36:cc:6e:72:52:4e:6d:ec:
                    55:c1:b2:af:0e:93:36:bf:d0:a0:07:19:36:b2:49:
                    0e:c0:db:a2:c8:9d:f3:9e:96:b7:97:e2:de:b4:7c:
                    57:77:64:f4:de:cf:21:64:c2:30:77:43:4c:47:d8:
                    aa:8d:8f:12:f2:15:0b:14:d1:0e:b7:a8:f9:92:2b:
                    04:e0:c4:3b:a8:29:8b:7e:81:1f:b4:b4:0c:aa:28:
                    82:9d:14:19:67:67:64:49:6d:e8:25:73:47:51:6d:
                    cb:e5:99:25:09:a8:31:ad:16:3d:aa:1c:8d:4a:e7:
                    19:14:8a:e6:10:27:60:3a:14:8c:65:c1:88:d5:a4:
                    9e:ad:f2:82:ec:41:14:ef:2b:6e:cb:74:fc:75:50:
                    57:1c:d1:7a:65:da:b9:81:4c:59:88:c1:b4:77:55:
                    a1:f4:54:37:b2:de:29:ca:4e:e6:ca:8e:2a:e1:fc:
                    f3:22:02:40:ba:5e:a1:a8:ec:6e:53:06:e3:a2:7e:
                    ef:de:c3:ef:e3:73:6a:68:68:47:e2:e3:49:4c:3d:
                    35:2d:35:45:0a:79:ac:39:76:69:f3:c2:d6:a2:7f:
                    95:19:ad:27:ee:f4:db:b4:ef:87:f4:f3:ff:8b:c4:
                    67:cb:26:fc:e4:8d:23:29:40:8a:0c:9a:ca:25:74:
                    36:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8D:08:5F:B6:1B:CF:E7:AA:9A:9C:97:FC:F8:DF:54:F1:3D:09:EB
            X509v3 Authority Key Identifier:
                keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ca:21:cb:c7:5e:81:92:5b:35:4a:40:b8:51:ac:3f:37:93:
         7d:3d:da:65:0b:f1:c5:dd:34:93:84:be:9d:22:db:57:b5:6a:
         4b:ab:54:06:25:aa:ac:e5:a5:13:c0:23:07:22:b7:7c:bb:ca:
         c2:00:b7:0d:0c:9b:71:3f:9c:b2:65:22:99:d5:a6:92:76:c9:
         0c:ff:2a:7c:3b:34:4b:1e:45:29:55:82:f0:a3:c9:b4:54:dc:
         ea:46:87:f3:8d:e9:50:a9:7f:a5:b9:81:6d:df:48:79:44:f5:
         c9:11:2f:1a:36:15:ff:2b:d9:39:ce:8f:a1:1b:f3:e6:dd:ab:
         b6:34:16:c8:97:a9:c4:a3:b9:8f:e4:bc:e8:1f:2a:e9:1f:b7:
         92:b1:94:7b:2a:e0:6b:da:4e:7f:8c:1b:df:c7:ed:a4:47:bc:
         a3:da:65:e2:17:2d:b8:c5:ee:12:84:33:3c:a5:c5:6d:9b:a2:
         1d:fd:d2:9d:cd:71:45:00:eb:f7:30:b9:67:8c:9c:14:9c:cd:
         fb:42:3a:b0:6d:fa:9d:92:da:1f:e1:c6:62:c1:43:b3:e8:e1:
         76:47:be:8e:73:b1:96:48:5e:1e:d6:46:b6:35:f7:f6:39:07:
         93:42:cb:c9:7c:9f:05:f7:e1:0e:22:f7:02:61:20:f4:cb:fd:
         3e:3d:ba:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:14:33 2025 by rpki-client