Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
File:                     k1AwYeGuUD7GPZcLMIdd2T_6u98.mft (raw, json)
Hash identifier:          O8xa59+1/zvrsmMx9BgDuobBkXVRShOAhpyhNcQ+wXE=
Subject key identifier:   50:3C:2A:B5:C6:C4:A3:82:D7:E3:BA:1E:4F:CE:96:46:C6:EC:DF:71
Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
Certificate issuer:       /CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Certificate serial:       01976A05A1CD04815FAA399ABCF5F1678AA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
Manifest number:          12B9
Signing time:             Fri 13 Jun 2025 16:00:43 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:43 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:43 +0000
Files and hashes:         1: PLlM-caQciClvP4vmCR1thJm2Qg.roa (hash: 483jEz1mqdgxRO/yMJ0BYxcE+ZWZtXLMbpw6xeoN81k=)
                          2: UGR0Nm7XgEo_C52g4hZe_Rs5ZcQ.roa (hash: LA6rXbOmVl2jO/KpnJDcjc8gvW16w8N7yWXEbyRFi7Q=)
                          3: WkwzoKAp7V8ZhXL1g15aK61O6bQ.roa (hash: s5hrnFxpg0nBPQ3K+9u43Zz76gYas2owW8dLskXtTU8=)
                          4: i10NWUSGAIWexuZ8PjNhBDIKbUs.roa (hash: 1db21KiR5bFTQidbbCI1S4Ch0ZkfRZfQJSvHB/2+tIw=)
                          5: k1AwYeGuUD7GPZcLMIdd2T_6u98.crl (hash: add03BhrgvdEhaOCVVp9Kk81zLBgySxQQLM2I0HPW9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:a1:cd:04:81:5f:aa:39:9a:bc:f5:f1:67:8a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf
        Validity
            Not Before: Jun 13 16:00:43 2025 GMT
            Not After : Jun 14 16:00:43 2025 GMT
        Subject: CN=503c2ab5c6c4a382d7e3ba1e4fce9646c6ecdf71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:35:e7:67:02:94:d7:a8:69:2c:68:bc:3b:
                    70:c8:52:00:c3:3b:f9:9f:0c:3e:12:cf:e3:db:17:
                    7a:a9:3e:3d:e0:b2:c8:8e:4d:5a:a6:da:99:91:09:
                    e4:6f:f3:78:87:0f:59:c3:09:0f:5d:26:30:e2:24:
                    3a:20:43:25:7a:29:62:49:da:12:84:73:d6:9c:8a:
                    88:b9:77:c9:32:10:b1:f6:27:74:87:d6:c8:23:52:
                    da:fa:5e:9d:94:02:ac:da:b5:83:00:5e:70:19:04:
                    7e:0f:cf:e4:93:7a:fa:95:52:78:00:67:60:20:1b:
                    7d:8f:cd:8a:b4:b8:10:20:05:2a:22:03:14:89:88:
                    bc:eb:2b:ad:11:1e:51:97:04:0b:68:6a:a1:e9:8d:
                    51:60:6a:bc:3d:ad:88:17:d9:89:fb:8e:d0:b4:40:
                    ca:75:cd:82:b1:30:79:02:8d:6b:af:59:34:27:6c:
                    02:33:21:48:da:59:4b:a5:99:18:34:3c:cf:7d:57:
                    96:e8:bd:d1:27:0d:d7:58:31:8b:66:e4:19:98:85:
                    b6:9d:0a:5e:4a:a9:e6:e6:b9:7e:e8:77:22:13:d8:
                    97:2f:9f:62:67:bb:04:f4:14:58:08:80:ce:97:87:
                    b9:d3:7a:64:6d:49:c3:c2:9f:5e:bc:26:aa:3c:8e:
                    32:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3C:2A:B5:C6:C4:A3:82:D7:E3:BA:1E:4F:CE:96:46:C6:EC:DF:71
            X509v3 Authority Key Identifier:
                keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9f:8d:ef:59:42:7e:7e:6a:c3:b4:e3:6d:ea:2f:c5:c5:50:
         24:56:cd:48:18:59:95:ea:9e:b8:1a:78:49:2a:4a:a6:42:53:
         9e:2d:4c:a3:be:85:af:b5:0b:3b:93:39:73:38:43:94:b9:a0:
         af:7e:e5:56:0b:67:b2:69:c9:7f:84:a6:70:a5:b3:29:bd:5f:
         30:e7:6b:d6:95:1c:e8:3a:c2:f3:36:89:27:3a:12:4d:1f:92:
         ef:bd:b9:b3:e6:51:3e:3a:63:7b:ff:01:30:4a:6a:b4:2f:1f:
         57:24:68:0b:03:9b:c0:bd:4f:00:c6:c5:00:bf:92:4f:25:d4:
         ec:c1:75:e3:39:25:b5:e7:54:94:4f:43:b2:cf:ec:a3:70:2d:
         7f:fd:bc:6e:31:dc:aa:26:70:53:ee:19:40:c2:26:9e:69:a7:
         63:80:4a:dc:2b:76:df:62:78:3b:b0:78:52:74:71:0b:05:ad:
         5a:1a:80:da:dc:64:fd:35:c7:0b:48:9d:e8:a0:a1:2e:bb:84:
         4a:c4:a5:07:bf:44:6b:c4:76:32:75:1e:83:42:1c:2b:c6:24:
         b5:b4:de:e8:1b:63:72:cb:75:aa:19:26:ee:20:01:5e:54:cd:
         12:27:5a:ce:ec:ea:41:25:fe:39:2f:2d:70:d5:87:62:73:ae:
         7c:c2:e4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:16:27 2025 by rpki-client