Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
File:                     dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json)
Hash identifier:          cArMYA9GQE6iCsSWsMaGvPVdYIYgzTZ13RAiN9wfTpQ=
Subject key identifier:   20:5D:73:26:26:F6:42:0F:98:58:1F:53:8A:10:13:2C:FC:B0:2D:4C
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Certificate issuer:       /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial:       01976F2C4D442D31C6E8FFC26E0BBC63EDCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
Manifest number:          134F
Signing time:             Sat 14 Jun 2025 16:01:03 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:03 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:03 +0000
Files and hashes:         1: O2QrsRpu21AzPFWSKx6-icFIuDk.roa (hash: yYvXQaBaDt2Fw+c7tWeP9pRQ80CLvEe29rG4qx33m94=)
                          2: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: MfpfoKcGw7Uj3Pj70BxRSQkOM9408M+4cM1SVAw/Hpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:4d:44:2d:31:c6:e8:ff:c2:6e:0b:bc:63:ed:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
        Validity
            Not Before: Jun 14 16:01:03 2025 GMT
            Not After : Jun 15 16:01:03 2025 GMT
        Subject: CN=205d732626f6420f98581f538a10132cfcb02d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dd:5c:9d:04:7b:23:e1:d1:fd:d2:9d:4d:0a:
                    9b:7c:a6:33:83:97:66:60:de:1b:45:d4:a1:8b:bf:
                    a1:a8:2c:ae:e0:cd:c8:0f:7f:a2:3a:8f:3f:c1:4c:
                    bc:2a:21:be:01:93:d9:fd:ef:68:bb:ac:f2:9d:a7:
                    95:b4:be:a4:6b:9c:28:d1:74:59:91:8a:5b:8d:a0:
                    2b:68:88:68:29:56:73:82:27:f5:4e:44:7f:19:df:
                    2f:39:10:94:91:a0:02:a8:d7:92:71:52:cd:7f:ee:
                    8b:c8:d3:09:96:a8:9d:22:12:41:bc:f4:47:75:43:
                    1e:95:39:aa:88:5a:d0:50:ba:c3:16:f7:dd:12:1b:
                    5c:db:ec:2f:09:a1:c4:c2:37:4c:95:6b:5e:c6:8b:
                    f5:15:f5:fa:82:5b:8c:e6:88:64:41:0a:5e:d4:3f:
                    b4:15:46:55:60:32:ed:11:04:a9:6e:07:fb:8c:1f:
                    24:fe:28:3c:84:c8:a1:a4:68:cb:72:0e:ac:10:99:
                    fb:f4:22:ae:15:02:b7:dc:4e:68:d1:30:dc:2a:8d:
                    1b:ad:f8:d4:58:8d:e5:62:12:7b:fb:e9:5d:ab:9f:
                    90:5a:dd:d0:15:6e:21:e3:01:34:eb:fd:e9:d6:82:
                    15:f0:07:d9:37:00:ce:4c:43:fb:43:f5:5f:11:3e:
                    be:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5D:73:26:26:F6:42:0F:98:58:1F:53:8A:10:13:2C:FC:B0:2D:4C
            X509v3 Authority Key Identifier:
                keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:4e:86:ea:84:49:11:71:05:4d:37:58:59:41:4f:4b:59:b1:
         5e:d5:3a:89:d5:5a:e2:d1:a3:ec:0b:7b:d9:5a:3b:81:f6:3c:
         8d:6e:cb:0a:29:2b:aa:03:cc:e6:07:0b:3d:de:7d:fe:bc:61:
         f7:28:96:0c:d6:41:b0:5b:47:de:0d:30:95:10:06:7c:eb:29:
         2a:7b:dc:bb:cf:dc:74:f2:d1:36:0f:c8:50:b9:5d:d2:06:19:
         0f:37:fe:ed:22:ca:ee:a4:35:4e:d4:b7:a7:92:56:38:a4:0b:
         c7:fc:79:bd:f5:22:63:9d:69:03:cc:26:46:7f:fc:00:41:19:
         d8:65:cf:2b:d0:22:37:ab:fb:e6:dd:a6:f7:92:7b:66:c7:05:
         54:a0:50:c9:5f:22:07:ab:9c:c4:16:90:1f:13:05:f4:db:b9:
         94:be:88:2d:30:41:75:fb:d3:b3:90:49:a1:be:1b:5d:3e:0c:
         a5:b3:ce:ac:2b:19:eb:0b:80:4d:77:7c:52:fc:1a:e4:62:6e:
         f5:7d:c3:77:4b:ce:94:fb:cb:f9:72:73:b3:22:25:81:94:2e:
         b9:f2:32:36:3e:6b:81:2f:df:c2:84:d1:8c:c5:42:5e:f8:24:
         3b:82:a5:eb:18:bc:87:63:01:21:ba:f7:e8:2a:e2:01:ec:ec:
         ec:50:44:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:45:38 2025 by rpki-client