Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
File:                     AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft (raw, json)
Hash identifier:          9x4f1clruELEBoipmWTSdrvJf4pR7yzXafgVu9wVUQ4=
Subject key identifier:   FC:7B:B6:F9:B7:16:D9:0A:C7:93:53:10:23:EF:60:5F:94:5D:86:D1
Authority key identifier: 00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
Certificate issuer:       /CN=0007534eb77caa836f8f118630164e0236e5fe86
Certificate serial:       01976F9A2AD013B907F306FFF1C5FB03049B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
Manifest number:          0ABE
Signing time:             Sat 14 Jun 2025 18:01:03 +0000
Manifest this update:     Sat 14 Jun 2025 18:01:03 +0000
Manifest next update:     Sun 15 Jun 2025 18:01:03 +0000
Files and hashes:         1: 7elRG4gqnvY-kvee5EC-ljUx8zc.roa (hash: EBapcQW4LSNex4n/3b9OtP2KhuUXB5IUoQf2KZKkJ6Q=)
                          2: AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl (hash: gLDLoTlmWQ/7gSNHzbU+mm+Y7zaMFV6a1hn+mEmXvKs=)
                          3: GAzN8JgljKfA3A30CpTpB9I-ljg.roa (hash: rKanLHq74yk8hIMHAP3lf3yTM47zrxq0k/XrA6g5TqI=)
                          4: KlGeCuL83ckpFDxEzckjMn7_6RE.roa (hash: sQSDNJGP0PRAc42NznmCEsFt8+XssPeUkQMlKcFGyeg=)
                          5: cI0Z3sLe1xjrCwyg19NbzVWgf58.roa (hash: RgqBJJ2OAbbh0xonFH0+36oQyNXiwKW4rTJMbCMMDzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:9a:2a:d0:13:b9:07:f3:06:ff:f1:c5:fb:03:04:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0007534eb77caa836f8f118630164e0236e5fe86
        Validity
            Not Before: Jun 14 18:01:03 2025 GMT
            Not After : Jun 15 18:01:03 2025 GMT
        Subject: CN=fc7bb6f9b716d90ac793531023ef605f945d86d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:77:63:49:5d:02:8c:82:3e:f0:09:5f:49:8a:
                    3f:54:c4:2f:a3:a2:67:02:c5:09:fa:ec:f0:c2:46:
                    2f:d1:73:19:22:00:8f:ea:a7:4c:45:b6:56:61:b1:
                    2c:6f:b2:93:e1:1f:39:21:0b:97:7e:38:d4:b9:f3:
                    65:aa:c7:94:fd:de:22:6a:da:fb:33:9c:3b:16:45:
                    84:f6:6b:cc:75:64:92:06:80:b0:81:4e:a6:3c:e1:
                    16:a6:7e:bc:03:2c:fa:31:e2:bb:5b:f3:70:61:70:
                    94:96:84:c1:53:df:89:fe:16:a9:b3:6a:62:93:9a:
                    49:52:f8:1a:27:9e:e8:ae:ef:46:e4:41:8e:4d:03:
                    45:cc:69:57:24:85:04:15:81:0f:fb:77:cb:03:32:
                    73:12:5d:35:0b:23:ff:cd:8c:99:1e:b5:6d:cd:00:
                    c0:e4:72:f2:bf:24:37:bc:f7:8b:b2:42:5f:b8:44:
                    5f:a5:af:85:b5:f5:f4:e0:55:07:c8:b0:3d:87:af:
                    99:ca:f4:14:1c:57:53:bf:fe:dd:3e:67:1f:e5:02:
                    52:8b:41:f1:67:63:6e:06:74:f8:d9:af:3a:0b:f4:
                    95:46:90:3f:79:5c:56:66:d3:79:26:44:eb:1f:c8:
                    4d:4b:23:70:3b:b7:66:86:e8:4f:1b:b8:e3:e5:fe:
                    e0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7B:B6:F9:B7:16:D9:0A:C7:93:53:10:23:EF:60:5F:94:5D:86:D1
            X509v3 Authority Key Identifier:
                keyid:00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:34:15:e3:9d:b1:68:a0:14:ca:0a:cd:49:4d:bd:30:fa:3d:
         f7:5a:60:34:f5:74:96:4c:cb:d1:55:21:e1:25:13:c2:84:c5:
         70:42:01:46:8c:e9:32:c6:12:d8:ac:f2:95:d8:2f:a4:58:4b:
         26:c2:cf:23:c8:9f:34:6b:3d:ce:af:1a:66:6e:d0:e8:a0:6e:
         65:79:bd:0f:a4:26:cf:8e:11:39:f1:ef:c1:24:6c:4b:3a:77:
         66:81:7d:41:9d:01:2c:8c:38:17:3e:d9:bf:5d:1e:10:de:1a:
         4c:5b:66:fc:6d:ef:ce:62:c9:55:40:dd:c7:5b:78:2c:97:a4:
         7f:40:31:4f:b8:67:6b:68:89:7a:4f:db:3e:a0:ad:87:ff:5b:
         bd:98:46:3e:7c:eb:34:9a:9c:99:cb:00:a1:33:1b:b3:80:99:
         5d:44:5c:94:21:34:b7:b1:fc:3a:1b:ea:da:43:16:ad:7d:96:
         09:79:47:15:59:36:c6:be:e8:de:e0:4b:5b:a4:c4:d0:38:d9:
         07:78:a9:34:28:6c:b8:3b:fb:26:8b:cd:24:08:4b:32:3c:1b:
         bb:35:d2:3c:4b:fd:80:7b:e7:17:9b:13:25:6b:89:5f:de:0e:
         63:cf:19:eb:e3:06:5a:df:d3:4a:bf:86:15:7d:1e:12:78:78:
         ba:70:73:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:48:02 2025 by rpki-client