Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
File:                     A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json)
Hash identifier:          C3PobAmMTxUukiCRB/cCHDMaL6pRBYAur6yci9fnYzk=
Subject key identifier:   0B:A0:EA:DF:EF:A4:6F:93:AD:9D:8A:C0:45:4E:36:B7:1D:3C:95:CB
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Certificate issuer:       /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial:       0197741B90B563334FD14F81BE757855C8CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
Manifest number:          07D9
Signing time:             Sun 15 Jun 2025 15:00:52 +0000
Manifest this update:     Sun 15 Jun 2025 15:00:52 +0000
Manifest next update:     Mon 16 Jun 2025 15:00:52 +0000
Files and hashes:         1: 5cQ1B8qaCGZjX6eh03Gxbe2gyAs.roa (hash: UnXYlFiyJBM2cbEBf2cCAcTXlYLcyD51tGVhPbgsuJM=)
                          2: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: Nr7JW4JrQYDP5FcprAWHuxvLaj8yMf76otvQwIh8JMI=)
                          3: lVXMGaXCeYAS9UTzuCTj9xPIgOs.roa (hash: ACZLuIV4fCglmS12ajGiBEyZ0FBoWBDoJRm4zWyNSbY=)
                          4: m3FPA0gDGVnI8PjPCwmDJXS3am4.roa (hash: iJU0JEqNybrVIOi6Wb4fvKKuySMZyuaXFdEyadAN0OM=)
                          5: x-3D4SyWxTWtE8fU6h7K761mso0.roa (hash: KVo2GWCkNTOgM8bW+F4avHQXlq7DnsAvg8lQU9Oqt1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:1b:90:b5:63:33:4f:d1:4f:81:be:75:78:55:c8:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
        Validity
            Not Before: Jun 15 15:00:52 2025 GMT
            Not After : Jun 16 15:00:52 2025 GMT
        Subject: CN=0ba0eadfefa46f93ad9d8ac0454e36b71d3c95cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b4:e6:56:43:36:60:fc:35:34:7b:62:51:f1:
                    33:77:7a:e9:93:6e:72:42:3f:86:6b:cf:5d:d9:1a:
                    cf:55:7d:f2:f5:ac:08:d1:bf:73:84:5d:e7:c4:ba:
                    74:1f:14:78:3a:e0:8b:80:ec:7d:f0:a9:a1:f3:53:
                    d2:a1:c2:cb:9e:39:58:76:c6:92:47:76:89:f8:b1:
                    c8:1b:91:eb:06:a0:ec:ed:69:27:f3:2e:b6:87:33:
                    04:42:6b:f1:3a:b9:aa:e7:3d:55:70:18:d0:7e:0c:
                    4e:8e:ac:ee:ea:5d:07:74:01:65:75:98:86:c8:e7:
                    b6:b3:b5:1f:7c:76:be:46:6b:bd:79:3c:31:6c:a6:
                    98:a6:4b:ab:05:0a:41:f9:b0:8b:c2:88:0d:96:4d:
                    7d:cd:b0:2f:39:8f:5a:08:85:cc:d9:31:0e:ca:38:
                    9d:0f:33:32:2c:f7:aa:15:5e:51:4c:f7:4b:fc:9a:
                    0c:4f:20:92:ae:20:a9:72:4f:f1:a0:d3:fd:6a:a0:
                    74:93:62:15:9a:d6:b5:93:65:89:64:a1:d7:ea:73:
                    d7:0b:da:c8:80:76:34:b5:26:81:dd:dd:74:af:17:
                    5a:12:c2:77:43:ed:d2:5d:5d:00:7d:bc:28:30:6b:
                    f2:58:c7:da:bc:fc:82:d7:63:ff:d0:9d:d3:56:7b:
                    72:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A0:EA:DF:EF:A4:6F:93:AD:9D:8A:C0:45:4E:36:B7:1D:3C:95:CB
            X509v3 Authority Key Identifier:
                keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:9d:9a:6c:22:e1:db:3b:67:66:a5:eb:33:d6:b5:47:30:d3:
         30:38:f5:73:73:55:38:9d:86:f1:8a:c1:ec:e3:a0:d1:03:25:
         6d:8e:b8:0b:31:8b:72:61:93:c4:b2:b3:2d:3c:42:9e:d4:a8:
         c2:1f:fe:23:3a:84:c5:00:45:ff:22:3b:7e:90:ae:83:62:6e:
         ed:d2:81:a8:13:fd:59:dd:1b:48:6c:64:54:e4:2a:df:db:a7:
         33:59:7e:ac:0c:4f:31:6b:fd:03:bd:93:45:44:20:c0:47:58:
         de:6b:da:8e:e5:a1:28:13:c2:b1:45:7e:43:ca:2a:65:05:cc:
         58:1e:92:d2:86:a3:94:26:84:29:30:72:68:de:55:7e:56:9e:
         d7:a1:25:d6:97:83:36:95:9c:84:88:af:f0:06:4d:35:95:05:
         76:e8:91:c0:1c:8e:db:8f:be:a8:cb:02:26:1e:49:d1:fa:91:
         c6:49:6d:a3:0d:2b:87:06:d9:b2:6e:60:e2:06:37:3d:e9:b9:
         66:d7:07:61:c7:ee:28:9b:9d:ff:0f:e1:da:b6:42:d7:1f:88:
         08:8e:88:2f:43:da:c7:29:f9:3f:ce:6b:da:f4:c9:0e:30:6e:
         04:10:ed:13:09:5a:32:54:df:29:df:3c:7c:04:49:aa:80:57:
         cc:25:f7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:40:25 2025 by rpki-client