Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
File:                     0KpKGno60j-q4q6un6YZTwISgSk.mft (raw, json)
Hash identifier:          f0mZHsGQsQ1QINUROSSRQJxQM2SrkAd06h5dkkxtmjQ=
Subject key identifier:   B3:2D:19:06:15:29:64:03:FF:F8:9B:50:06:00:6F:06:03:65:70:EE
Authority key identifier: D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
Certificate issuer:       /CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Certificate serial:       019785EA9C9EACBACAE6A7891F360E5CE0FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
Manifest number:          01B7
Signing time:             Thu 19 Jun 2025 02:00:34 +0000
Manifest this update:     Thu 19 Jun 2025 02:00:34 +0000
Manifest next update:     Fri 20 Jun 2025 02:00:34 +0000
Files and hashes:         1: 0KpKGno60j-q4q6un6YZTwISgSk.crl (hash: KcxJpETk6/xkPKOaYhaIMMgNETVf+h6XDfXC6ZUs7vI=)
                          2: BPcKYotNA4ZeZvm82W73v75zPQs.roa (hash: oHpWOGTj/PoKbHsHCYFs8uXPSnbHGEoV8KY7k9zJBk4=)
                          3: GkxGrjdz0A7AWmifnWDimQZWI38.roa (hash: tHXJR2KGAG4wHE8bdFOYoF9Jdtd+4jQD2aXhMHJzWK8=)
                          4: OFO40pbXY33B4_R6m0vxzmJtlaE.roa (hash: OKgJmR90SzKnzfJWjgu0f1y4g1wd7HW3UjBatZfs5A8=)
                          5: ief4j2bb-cAvwzzS1T0xB8OgxGk.roa (hash: cv2vWMrY2M65pVapU15+XFEE8tVsd4Na8PnjBxEQRuA=)
                          6: wkwsgzJc2eo9ng8QQ8kvMc3qjbc.roa (hash: +iuoTytPo6r5GmeijHeI4hmWR8iJmhnqPLAkE9k79sI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:85:ea:9c:9e:ac:ba:ca:e6:a7:89:1f:36:0e:5c:e0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
        Validity
            Not Before: Jun 19 02:00:34 2025 GMT
            Not After : Jun 20 02:00:34 2025 GMT
        Subject: CN=b32d190615296403fff89b5006006f06036570ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:00:ae:0c:4d:26:7f:74:70:70:c3:4e:cd:ab:
                    bb:3a:1c:1f:3f:33:b1:be:f8:54:fe:d5:46:07:42:
                    35:a3:f8:20:34:d9:5a:06:ea:c8:4f:e0:64:94:53:
                    39:a5:7b:31:87:0c:80:6a:7d:eb:7d:f0:9f:ca:f4:
                    42:59:2a:ef:5f:25:0f:7e:79:6a:91:b1:5f:e5:b4:
                    1c:91:f3:b0:7e:79:84:0d:cb:ce:de:f1:4f:cf:ef:
                    9e:0b:c5:4c:36:5b:72:c8:35:ac:8f:cc:de:64:33:
                    d6:3f:51:05:a2:35:c8:cd:18:09:bb:e4:64:da:f6:
                    0f:62:ee:56:70:16:07:8c:59:e8:ec:fa:d2:33:39:
                    76:d3:34:b0:90:22:db:4a:b1:72:36:3b:68:5e:f9:
                    03:6e:4c:30:52:b7:6b:25:4e:01:d4:c0:4b:75:31:
                    17:fa:20:8d:d3:d3:ed:12:31:a0:25:57:a7:2b:fa:
                    af:67:90:8a:a9:fd:7d:7d:75:2b:99:a3:65:47:9e:
                    88:41:86:42:5c:f1:d6:d0:61:ed:45:88:96:d9:bf:
                    cb:46:fe:8e:de:12:31:0a:bb:81:d5:42:ee:8e:8f:
                    5e:ed:5c:b5:89:58:e0:de:93:e8:fe:1b:a6:b7:fa:
                    86:e5:e9:0b:a0:18:c5:fd:5e:a0:1c:da:5a:2b:2e:
                    1f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2D:19:06:15:29:64:03:FF:F8:9B:50:06:00:6F:06:03:65:70:EE
            X509v3 Authority Key Identifier:
                keyid:D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ea:78:c7:9f:18:d2:70:55:71:02:c4:71:16:f2:e8:03:dd:
         ee:6d:f0:d0:f8:31:5b:40:cd:b4:3a:78:5f:7e:55:ad:7f:07:
         09:23:5a:0a:48:e6:dc:eb:29:e8:9b:88:5f:2d:c9:42:b4:53:
         9e:a2:6f:1b:7e:fb:b0:b0:22:af:f3:ee:46:d9:c0:4c:4f:25:
         2c:4d:cd:43:e4:f4:86:9b:a7:fc:6d:fa:f3:a8:e3:96:92:92:
         03:74:78:44:60:e5:e2:79:dd:2f:97:1c:8e:e0:1d:9d:0c:43:
         cf:4d:fc:bc:41:b2:b7:8c:e5:69:f5:f4:0c:53:1a:a4:8b:85:
         0c:d4:7e:a7:59:da:44:20:64:9f:15:9c:43:90:40:cd:1c:86:
         1b:5e:fc:90:ba:c1:a3:1f:6b:d5:60:a9:17:9d:c0:69:c4:c3:
         9f:fd:28:83:0a:81:ed:f7:ca:37:02:da:fb:b8:84:c8:5d:1c:
         51:f8:01:c4:85:cf:ad:33:10:2f:c2:0a:08:0a:08:e0:f2:42:
         e7:9d:e2:f1:96:04:ac:f8:34:ec:75:42:2f:05:6a:a6:97:b8:
         2e:e7:e1:8a:23:83:fc:5d:be:d1:cd:f3:28:36:aa:88:f1:1a:
         77:3b:85:36:56:e3:b2:95:67:ce:cf:fa:10:d9:5f:d9:78:13:
         1b:1d:9b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:01:11 2025 by rpki-client