Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
File:                     cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json)
Hash identifier:          Bk0hpCRxgHVPXzy0J2gYR+mkeBAI3uT87DjRTn8ctA8=
Subject key identifier:   01:E6:FE:2B:F6:EE:BA:BA:D8:E3:EC:46:13:27:77:3F:D0:2C:A4:13
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Certificate issuer:       /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial:       01977309393001143234D3137468EEA3BA82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
Manifest number:          0E9C
Signing time:             Sun 15 Jun 2025 10:01:13 +0000
Manifest this update:     Sun 15 Jun 2025 10:01:13 +0000
Manifest next update:     Mon 16 Jun 2025 10:01:13 +0000
Files and hashes:         1: 349zjBrXxWXdbWEBD0TY_PcES-4.roa (hash: dTkBBehXJumOuwcY3aMRaxc4m1QE9Au6OaxONrVwqa8=)
                          2: FGloAOGdHctONwf864BFw9r6804.roa (hash: idNgzg92xFKVGDg8Q8+8kqcQjJU43tGKLwcMZ1BO8+8=)
                          3: QeA9h5gc7h5TROkBqdTQKlfxGiI.roa (hash: wvC6P2mkgiV/WDCXbKURUPeQIyZPZgtW7FSvBfEWp/8=)
                          4: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: k7DVcvF96VBJAtvGZkcbTkGcxgS9hRRroaaPDnI5AiY=)
                          5: f4DXZiMB_Ff_0JwzJIxf0LcmHB4.roa (hash: BYRfPeQZzgZNAMB4knpfUfsNVjUgJWJmqeqw3IISPlY=)
                          6: rguLiIijQORjnghvpZcGDmu1SjU.roa (hash: JNesrlv42ZJgaFQwOxaZT3TmKgM6sVVqVrh2EttTKxs=)
                          7: zWJS9qIiKhPDTGBp07EnN-zc5Ok.roa (hash: UIbGdiKmqLamnBzWNetbuRIAxAE+Pp02kC9Gg2VRxdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:09:39:30:01:14:32:34:d3:13:74:68:ee:a3:ba:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
        Validity
            Not Before: Jun 15 10:01:13 2025 GMT
            Not After : Jun 16 10:01:13 2025 GMT
        Subject: CN=01e6fe2bf6eebabad8e3ec461327773fd02ca413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b2:e6:86:04:ea:fe:6a:ff:bb:62:d5:9d:ff:
                    5f:dd:aa:ca:87:64:30:d2:6f:29:2c:1c:e4:41:60:
                    43:d7:37:ff:ac:12:c5:fc:42:e3:21:9a:74:3b:5b:
                    14:df:40:84:e6:81:ef:11:ab:13:07:c2:4c:61:81:
                    6a:d0:4d:6e:f5:16:8f:6b:bb:5a:e6:90:1f:1a:b3:
                    29:82:33:6a:f3:ec:4b:98:3a:3f:63:48:8d:8a:df:
                    b9:63:ef:da:62:31:42:9c:82:97:bc:15:5a:7f:27:
                    94:47:19:7e:5a:05:49:15:69:53:6e:88:20:e1:d9:
                    c0:9b:8b:9e:cb:fb:80:a7:7e:51:6b:b7:e4:79:57:
                    2e:fd:cc:be:10:23:0a:9c:09:aa:73:44:22:c1:0f:
                    10:81:ab:97:05:64:0e:2b:db:40:cb:ea:bc:21:82:
                    f2:16:93:73:ea:00:a4:1f:17:fa:03:d8:83:e7:c5:
                    d5:fd:19:06:56:cc:8f:d0:74:cb:02:f5:23:bc:5d:
                    b1:7a:aa:13:a3:8e:82:ce:22:9c:f4:96:bd:c3:b9:
                    46:c8:09:ef:13:b5:25:61:87:2c:8d:73:d4:45:21:
                    27:fa:f3:7d:37:9a:a8:fc:33:18:6a:a2:37:fd:cb:
                    b7:33:64:c9:e1:7c:3d:67:2a:f4:b4:9b:67:df:9a:
                    5c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E6:FE:2B:F6:EE:BA:BA:D8:E3:EC:46:13:27:77:3F:D0:2C:A4:13
            X509v3 Authority Key Identifier:
                keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c1:67:ac:55:7c:71:2a:7d:17:bb:47:bd:1a:ce:60:ec:68:
         08:4e:f2:e7:e3:78:9e:96:ed:12:19:e1:5a:5b:f3:d4:ff:b8:
         af:15:65:75:0a:94:98:06:e5:db:9d:be:be:95:3f:91:84:a3:
         1e:eb:06:71:6b:ea:da:0f:77:63:73:8e:a8:82:1c:5f:a3:d3:
         ce:26:58:d3:6c:e5:e6:04:74:dc:c4:2c:9d:74:07:78:6d:4c:
         b2:25:c8:c9:16:8d:46:6d:76:6c:77:98:12:7e:4e:10:4e:d8:
         42:16:87:b4:56:79:20:b7:fd:51:33:ed:f2:cb:b0:ce:98:b2:
         29:38:2a:a8:3d:4e:63:6c:5e:15:5d:e6:20:07:fa:30:fe:4d:
         29:3d:9b:99:e1:00:e5:5c:50:4e:af:47:53:81:4b:18:aa:f7:
         3a:fb:f2:00:a5:c1:d6:93:eb:5e:d8:96:67:8a:d9:db:a0:e0:
         ab:ef:49:08:ff:ed:0f:55:07:63:2a:f6:80:8a:18:f0:0b:f8:
         e5:06:d1:1d:5c:d6:5b:c0:72:fb:f7:d8:aa:49:d0:96:29:fe:
         ef:47:38:ef:c1:a3:e2:fc:d6:18:14:15:bb:de:c5:cb:67:67:
         00:f6:1e:85:ad:81:64:e6:75:e4:44:ce:9a:45:ce:43:d9:70:
         27:5f:cf:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:16:29 2025 by rpki-client