Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
File:                     kPwsEuoXAhuorOBiGJfwhW2sJVk.mft (raw, json)
Hash identifier:          oNzaKykBfoqzgJaFk7Yla/AjSYE3vnp9rK+hXK3rZgY=
Subject key identifier:   DD:9D:12:AA:37:47:0F:03:3A:6D:F7:9E:31:35:A3:87:C1:ED:E4:88
Authority key identifier: 90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
Certificate issuer:       /CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Certificate serial:       0197711A20CF46A3F0CAFCA1EB89B4363381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
Manifest number:          050B
Signing time:             Sun 15 Jun 2025 01:00:27 +0000
Manifest this update:     Sun 15 Jun 2025 01:00:27 +0000
Manifest next update:     Mon 16 Jun 2025 01:00:27 +0000
Files and hashes:         1: 1UaL0XGyomh-a1T0dddj6cyPZOw.roa (hash: rWkejV4n3vRWEBULaZLAottNh8bz5UFXPG009n2D40A=)
                          2: TJKRQbRuvDSDZyucPaqU760l18U.roa (hash: gKuY1GA/NcHekZckeHEZ/7H1szBu0AiOQJ9VIhFkajs=)
                          3: kPwsEuoXAhuorOBiGJfwhW2sJVk.crl (hash: SAEoqRvJNTwCK5Qr/DI/Heg6unDVwaMl05OqbJpjY0Y=)
                          4: mWYkGMEMrO_nHDH4dqasaNk-p_c.roa (hash: OCHhjAiwakmpsRoIjxkgKbh8p1tQzGvkxI9kPgktEoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1a:20:cf:46:a3:f0:ca:fc:a1:eb:89:b4:36:33:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90fc2c12ea17021ba8ace0621897f0856dac2559
        Validity
            Not Before: Jun 15 01:00:27 2025 GMT
            Not After : Jun 16 01:00:27 2025 GMT
        Subject: CN=dd9d12aa37470f033a6df79e3135a387c1ede488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:be:df:09:85:4b:c5:7e:0d:96:b9:8a:a2:
                    89:95:23:af:b0:15:c8:e8:fb:ae:36:8b:60:be:68:
                    ab:92:ee:37:3c:1a:3d:8f:5b:b8:8d:13:6a:2b:e7:
                    17:ec:e7:37:5b:2a:c9:5c:13:43:43:51:33:09:05:
                    44:fb:e0:64:17:0f:8c:ae:b3:27:83:78:ce:81:e5:
                    d3:be:74:13:f0:c0:1d:ff:a6:2f:45:c2:9c:d2:ec:
                    60:eb:4d:d1:61:1c:bb:56:48:88:ff:67:8f:69:cd:
                    44:63:d2:de:12:4b:46:96:aa:41:e4:6a:46:1d:11:
                    8c:43:86:32:7f:63:cb:99:9d:9b:82:ef:46:15:16:
                    50:06:5a:65:75:07:8b:ba:d6:fe:4a:70:5a:b0:70:
                    e2:60:e1:25:09:0a:a6:54:a3:9d:d4:c0:1a:27:49:
                    77:f2:49:23:40:ef:3a:9f:80:34:32:17:42:9b:93:
                    87:27:cd:f4:e6:b7:e4:49:7c:65:c1:8c:53:13:2d:
                    c3:2d:18:a3:62:75:b0:17:ef:0c:8e:19:92:72:10:
                    6f:84:af:16:30:99:95:b6:19:ec:52:1f:4a:f9:60:
                    91:5e:29:27:55:70:06:4e:9a:04:39:40:26:84:55:
                    4f:21:cf:c8:91:44:b9:4d:06:06:52:f0:4d:d3:03:
                    4d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9D:12:AA:37:47:0F:03:3A:6D:F7:9E:31:35:A3:87:C1:ED:E4:88
            X509v3 Authority Key Identifier:
                keyid:90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a7:80:b3:2e:7d:f8:0e:54:4a:65:16:67:09:6d:60:e0:d8:
         15:37:07:4d:71:e8:75:60:a9:22:46:a4:2e:a0:0c:02:32:50:
         64:64:dd:eb:35:da:ff:7b:66:3d:8f:4f:21:b7:be:da:6b:5b:
         18:39:4e:18:b9:c9:15:66:64:cf:2d:98:54:ce:c3:66:33:b3:
         92:5e:17:a7:44:df:ff:93:85:29:0c:c6:78:05:d2:cf:02:aa:
         39:20:a8:5a:30:f1:0e:84:d3:3f:7a:2c:95:0a:60:0e:cd:d6:
         5d:91:27:6f:de:e7:18:4b:f5:3e:0e:a0:b0:45:3e:84:1d:1f:
         20:b4:ab:e5:07:ff:2b:1d:64:0e:f6:05:67:8a:5d:ec:cc:e1:
         b6:97:d0:5e:6f:26:ab:1a:96:a2:91:ac:95:85:9f:85:93:96:
         71:f1:14:34:bb:b7:39:c3:21:b0:b6:b6:4f:ff:05:bc:31:07:
         5d:49:83:49:ba:38:b1:22:14:b8:94:5f:93:ce:17:8b:95:72:
         b6:8d:3f:90:1c:70:b7:5e:fb:59:c9:8e:9c:89:c0:5b:2e:84:
         68:8b:b8:2e:93:99:e2:91:60:ef:41:81:5c:10:8c:f9:ea:d4:
         5d:21:34:c0:6b:af:f4:d0:a3:d6:93:bd:4a:73:ac:89:19:a6:
         1e:07:6a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:33:12 2025 by rpki-client