Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
File:                     iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft (raw, json)
Hash identifier:          LgutAljA+5CXSMO1hyRXZ2qPzDl88FX8BDPyqPt/D+4=
Subject key identifier:   A3:81:F6:9A:15:73:95:D6:FD:1F:FE:60:40:D1:8D:59:C2:D1:2B:55
Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
Certificate issuer:       /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Certificate serial:       019769CF1F782BAAA0D7C5ED0F52FB0B9C6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
Manifest number:          0D4D
Signing time:             Fri 13 Jun 2025 15:01:11 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:11 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:11 +0000
Files and hashes:         1: 0IndqmA5xgu2CF_jwxX-2bd09ko.roa (hash: CG/Zn9dtirhwk2tnBTHiZTYDu08mvtaBnxe37T6W3lo=)
                          2: 5Ea_oFY8Vhazk22dtpgBa5iqoHc.roa (hash: HWgeP0eaAdQydyZn5ncNASieHJEe9+L9FHT51xwkTtA=)
                          3: Rgi2MqRe28scNXwPSUaBJHXLnRM.roa (hash: miWc+jt8vObsSbUl+pf5rxC6Fyzqxyz42FOUYU27xXk=)
                          4: TRBQVmMokpp5WIUu-pQ0K07JW_Q.roa (hash: xwruf72RJWsw/csbKOoYp0tCE7jhLOGyB7VhjHcP5lE=)
                          5: htFXYL1G4eCbcC3mPYaIkosKB6Q.roa (hash: oJWFKr4H9EjNjtC5DQyq80O2d4aINMVPyWSnIqkyv3g=)
                          6: iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl (hash: Vq99TskN0f9fR8Jfs9A9lUvJwU4zJtq66e38aPGQNw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:cf:1f:78:2b:aa:a0:d7:c5:ed:0f:52:fb:0b:9c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
        Validity
            Not Before: Jun 13 15:01:11 2025 GMT
            Not After : Jun 14 15:01:11 2025 GMT
        Subject: CN=a381f69a157395d6fd1ffe6040d18d59c2d12b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d0:80:cb:22:4e:5f:cd:e7:10:ec:f5:ff:c9:
                    73:04:3d:e3:f7:5f:6b:b6:bb:23:eb:06:68:2d:6d:
                    d4:b2:1f:53:74:61:78:b3:b3:bf:a3:ef:52:02:e6:
                    fd:b7:94:0d:2a:90:07:e8:a2:22:20:6e:f2:e9:97:
                    3c:2a:fa:b0:03:9a:37:eb:82:ed:15:90:05:9a:3d:
                    6f:99:98:b6:6b:e2:eb:35:75:b2:1f:ee:cf:56:ae:
                    5b:8f:a4:63:f8:37:f2:ae:de:11:bc:52:01:d1:36:
                    8a:7d:f5:50:b6:08:85:9c:34:4e:ec:a6:99:62:53:
                    cb:49:0f:59:e5:4d:e1:ba:66:3f:7b:eb:bd:c5:b4:
                    c2:3f:b5:ec:39:19:36:20:4c:7b:95:56:eb:9b:e2:
                    f7:77:21:53:2d:fb:25:46:e6:f5:33:e8:d3:27:a4:
                    67:87:d6:b8:a2:0e:0f:10:d1:ee:5b:ee:48:f6:bb:
                    69:c1:f1:fd:47:87:54:be:ad:fb:8d:e9:82:92:4f:
                    6b:97:f0:14:d9:5e:ca:8f:7f:fd:8d:7b:5a:67:12:
                    08:49:96:5c:ff:34:d8:4d:2c:11:87:90:5b:fc:45:
                    8f:cd:06:ff:d7:61:97:cf:b0:fd:c1:2e:f6:dd:cd:
                    86:34:8a:95:05:1c:f6:03:33:f5:79:77:5f:25:69:
                    78:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:81:F6:9A:15:73:95:D6:FD:1F:FE:60:40:D1:8D:59:C2:D1:2B:55
            X509v3 Authority Key Identifier:
                keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b0:2f:6a:ac:a8:75:00:ed:08:d4:7a:61:1d:b4:e4:86:f4:
         a2:d3:ef:e8:54:46:d5:be:4b:be:6a:1e:59:b0:53:70:40:a3:
         fe:35:1b:75:4a:6f:18:17:02:ca:2a:ea:36:0e:5b:c1:0f:72:
         89:44:43:a7:b7:76:45:e3:a3:fe:d9:50:d8:f0:72:89:5f:8f:
         f3:02:20:2b:8a:83:e4:99:2d:c6:21:9d:ea:9a:47:9c:f2:e8:
         5a:6a:fc:73:e4:eb:4a:00:e0:a2:f2:00:45:04:91:1a:09:a4:
         fb:48:73:b9:f2:64:6f:af:84:06:0d:fa:0c:16:e2:d0:95:34:
         1b:c5:dc:b4:93:e5:ca:aa:8a:10:d4:0e:ea:fb:08:cc:b1:1d:
         dc:39:4e:35:7d:e8:19:f0:48:f7:75:07:a0:95:52:c6:25:51:
         e1:1b:3f:6c:b9:d0:c7:7c:f4:bb:f0:55:32:12:dd:ef:9e:9f:
         43:e2:b8:cd:b2:7c:99:4f:53:94:3a:40:a2:87:77:63:37:b4:
         ca:d1:29:8f:ec:3b:da:ad:5c:87:3b:a2:77:c9:77:01:27:04:
         f8:46:60:ec:fa:03:30:ca:bf:23:bd:da:ee:4e:01:df:3b:e8:
         5f:c4:f3:a4:83:8e:0f:12:bf:24:66:0d:34:1f:56:cf:5d:61:
         d0:ad:4e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:22 2025 by rpki-client