Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
File:                     r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json)
Hash identifier:          gumFPTLXN0Xt233luq1AH4i+/0xc3Y5FcWMzTvPlYJM=
Subject key identifier:   BB:CA:56:C9:FF:CA:48:82:AA:06:61:3C:A7:4A:D7:B6:89:95:95:88
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Certificate issuer:       /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial:       01976BBCE849E3B724F7AE1762B1FA8432E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
Manifest number:          1464
Signing time:             Sat 14 Jun 2025 00:00:31 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:31 +0000
Manifest next update:     Sun 15 Jun 2025 00:00:31 +0000
Files and hashes:         1: 7BUAS9lNIJKrmgyqitmt4vjUchs.roa (hash: ZW63wkZvkBfaNmwpw8bvuYCpTs0W+QW7Uv70+dpsljM=)
                          2: 7DO8E30RGY4vAe7tIWHKTeq95P8.roa (hash: wO6AvUEPcj/+yaf4lye0oLqn75BJbLzeCB1mL+qhuus=)
                          3: Dc_MqXVzSSK77uzNogE5HgnhLwg.roa (hash: O7xD6oauj5YnrNkfW6IbaFJNVQOfp627wKoUhUJUb+c=)
                          4: F_q5_Z07qZI9DXW4KcpMFI_8MOY.roa (hash: UA+1oifvamJJirFIBnTAGXQVq0QT81TJRyTJ7BTxetg=)
                          5: HLeQFxpSAwO5N1pZKMX56Q-hB1w.roa (hash: +EuA9d7+91Ny4e4gzqH16NmmQUk9ZPnn92MghDjKpE8=)
                          6: QHGx9rBcGUaJTuZl4OFvkzmjZVA.roa (hash: ZZjwJdlY+j59oAR5+dW/8zpKf4al08hvm5qlRq5DDsA=)
                          7: iL0fpiq0g7Tpl8O9Cr71bc0UOYU.roa (hash: +0HQwj7rpV4acr+qdH/U1EOSgBMGpBNUkpCPoAIrOlE=)
                          8: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: CVtGka3j8KM3xv/fANcav7/R34uSAvYXHHz7e1NmvaQ=)
                          9: xJMh3j3GpShYCJoYtsAE4dqx3WU.roa (hash: k38ffw08ruTV3gYvZegSeTLOSKho9qw6Tw7LEO7WSjk=)
                          10: xmfrzoBs6Rhbg64vPzeCbbD4I6U.roa (hash: X1lH5bbTPug3DKbEg/bKjT6QG10Inw9lELIZLmoF2Qg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bc:e8:49:e3:b7:24:f7:ae:17:62:b1:fa:84:32:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
        Validity
            Not Before: Jun 14 00:00:31 2025 GMT
            Not After : Jun 15 00:00:31 2025 GMT
        Subject: CN=bbca56c9ffca4882aa06613ca74ad7b689959588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:8f:1c:32:de:75:9b:07:7b:2f:7e:98:fa:
                    a6:90:49:a7:a6:2f:be:09:04:81:04:39:44:52:a0:
                    00:b1:83:f7:ba:cd:3e:ba:c4:9e:64:2f:4d:57:0c:
                    c3:07:d6:4d:1b:d1:2d:bf:a0:15:ae:2d:c7:8a:07:
                    ea:85:f0:e0:4f:87:4c:92:9d:06:81:97:c5:81:81:
                    92:4c:e5:ac:4c:ee:09:1d:1f:37:6c:8f:d0:00:0d:
                    b9:8e:d9:4e:1b:be:70:d9:79:49:bb:93:e5:ad:08:
                    8e:36:8c:5b:5c:7e:ed:56:29:62:37:85:62:5d:ef:
                    cf:b9:e6:7b:00:dc:b9:14:ae:dc:94:ec:c9:a5:b2:
                    04:e7:bb:29:ef:9d:4a:62:1d:53:94:f2:d1:4e:da:
                    7c:c8:3c:21:49:30:94:ac:59:d6:5b:0b:ca:c8:47:
                    ac:03:53:c3:5c:26:d4:4e:df:12:cd:07:4d:21:eb:
                    c9:b7:ce:68:f2:6f:ab:5c:39:02:b9:44:c4:fb:d5:
                    3a:6e:8c:dc:95:87:2d:5f:29:50:65:c4:1b:b8:c4:
                    51:0f:b0:e3:6b:26:73:fc:f1:9b:b3:12:6c:eb:f6:
                    52:f4:97:50:20:af:08:3f:aa:04:a2:ff:43:eb:74:
                    2c:d0:76:a8:ff:3d:9e:4c:c7:6a:44:db:1f:6e:c4:
                    98:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CA:56:C9:FF:CA:48:82:AA:06:61:3C:A7:4A:D7:B6:89:95:95:88
            X509v3 Authority Key Identifier:
                keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:6f:4c:5b:65:67:2c:c9:44:0c:eb:13:18:c8:54:6d:eb:39:
         c1:41:0d:3b:3f:5d:59:07:0f:20:f7:db:92:26:53:c2:dd:e6:
         97:bd:38:5c:4e:56:dc:2d:66:91:fc:93:cb:11:3f:f0:ed:66:
         61:65:62:83:af:dc:aa:e5:ea:b2:d2:4a:bb:fb:62:89:50:a7:
         53:19:12:a9:7c:59:34:28:ec:14:e6:d0:11:3b:56:be:dd:74:
         11:54:a6:1a:6d:d5:b8:b1:30:58:dd:74:df:f5:d0:72:e6:50:
         c0:e8:ff:06:ae:e1:eb:6b:ad:59:95:55:c8:06:4a:f1:bc:b7:
         a0:b2:1f:0d:87:13:5d:ac:ae:29:c6:9e:b7:72:33:5b:35:5e:
         33:dd:f9:00:d9:b0:13:1c:ab:08:23:b4:c6:bf:d2:bc:ef:d9:
         a8:6e:46:f1:13:47:d0:c3:fb:c3:2a:8a:d9:c0:31:d4:60:cf:
         b2:64:ed:9d:94:d3:2a:40:9f:e6:73:20:ec:74:32:8a:ff:25:
         90:5b:7b:95:98:eb:90:b1:76:ad:30:36:97:d6:76:15:58:9f:
         35:d6:1e:23:57:15:24:10:27:66:49:42:d4:63:81:5a:1d:55:
         ea:58:1f:3e:f4:44:da:38:b4:93:61:64:29:19:0b:0e:8e:ec:
         b5:8d:28:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:19:21 2025 by rpki-client