Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
File:                     mNZvua2ttqkFe_YKqj_1LGZUBBg.mft (raw, json)
Hash identifier:          3TbwGnxaBUVhWIwK/LF8FsXTFJrq5z5lu8/V3TdEyXo=
Subject key identifier:   16:BB:53:45:37:24:5B:EF:D9:46:84:CE:91:74:2F:11:D7:9B:9F:08
Authority key identifier: 98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18
Certificate issuer:       /CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418
Certificate serial:       01976D749ACE16AA86054518C8671DBE27F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
Manifest number:          0AE7
Signing time:             Sat 14 Jun 2025 08:00:47 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:47 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:47 +0000
Files and hashes:         1: 7j9uxnJfVl55LcxAf_fr4i2drjY.roa (hash: 7whaNaNl7Pm7UlaWsp36rTim4yAY8fmMQU6Aiv7KQCs=)
                          2: mNZvua2ttqkFe_YKqj_1LGZUBBg.crl (hash: NgHV+ssndhgLBneFilX2uJ68jytQV3fP8FwKtfdgKUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:9a:ce:16:aa:86:05:45:18:c8:67:1d:be:27:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418
        Validity
            Not Before: Jun 14 08:00:47 2025 GMT
            Not After : Jun 15 08:00:47 2025 GMT
        Subject: CN=16bb534537245befd94684ce91742f11d79b9f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cf:a7:07:06:a6:c0:f6:fa:91:49:86:50:a7:
                    ee:64:e1:d5:a1:35:e5:5f:9f:2b:32:90:59:57:1b:
                    0e:1d:9b:61:8b:44:db:b0:0b:63:18:4a:53:cb:da:
                    21:99:be:b7:bc:ef:dd:1e:b0:ba:0f:b7:ff:c3:83:
                    3b:cd:fb:48:e1:e6:ca:b9:ac:78:db:02:8b:bb:a4:
                    93:26:f3:43:d6:8e:db:8f:c2:d7:f7:5b:68:03:31:
                    4d:2d:d1:15:01:67:43:7d:85:a5:aa:62:61:09:4a:
                    8d:09:38:4d:e6:fa:41:03:c5:73:dd:a3:a3:a1:f5:
                    cc:26:bc:3d:99:af:47:6a:8c:1d:07:a3:9e:30:eb:
                    85:b2:10:77:aa:37:67:a4:2a:44:36:48:55:e8:ea:
                    b2:22:c9:50:5b:96:b1:ba:f5:42:54:40:91:f9:3a:
                    40:08:a1:f2:50:02:5f:37:51:03:86:9e:c3:bb:11:
                    e8:67:d7:f3:c2:93:98:74:57:b4:76:80:b5:20:64:
                    23:f5:08:8c:8f:62:9e:72:9e:06:8e:f9:5f:41:6a:
                    80:e1:02:61:e4:10:fa:e0:00:08:00:00:38:77:ec:
                    2c:2c:ff:d2:35:7b:b1:f5:65:96:7d:48:b0:8e:43:
                    ed:fc:03:0b:9f:16:bd:18:b5:b9:0a:a0:5d:f4:01:
                    6b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BB:53:45:37:24:5B:EF:D9:46:84:CE:91:74:2F:11:D7:9B:9F:08
            X509v3 Authority Key Identifier:
                keyid:98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:6a:d4:83:10:2c:f1:37:3d:b2:20:3a:e7:8a:9c:a0:50:c2:
         d5:e9:9a:50:d4:b7:94:66:1a:e5:2b:ae:fe:49:db:08:6d:74:
         5b:2e:a9:98:9f:71:5b:35:fe:56:01:8b:0f:51:83:f8:81:a2:
         27:de:a1:0d:2b:95:81:7b:2f:20:d9:b8:1f:72:89:61:d1:c4:
         8f:ad:c5:f8:00:5a:47:3e:54:a7:63:4d:b0:ee:12:d4:63:6c:
         12:4d:bc:24:41:fe:53:58:d4:82:ac:0c:5a:41:f9:e2:10:55:
         28:8d:2b:2b:e4:0d:93:ee:63:7c:24:dc:e1:5f:5a:96:ec:5b:
         67:22:90:26:ca:d3:bc:58:08:a3:b0:08:22:99:0b:4c:eb:c3:
         af:d2:6d:79:42:ef:c5:3d:5e:ec:e4:47:f6:67:b1:0a:3e:80:
         62:1d:f8:24:bf:92:a5:a2:64:4e:57:cf:b4:13:76:6f:3e:0c:
         b6:0c:59:17:ea:bb:35:31:03:27:9d:32:3d:a2:76:6e:8f:c6:
         23:06:c4:f1:8f:ed:ff:29:6e:05:e6:fa:fc:83:de:57:38:68:
         92:5c:51:82:8c:7c:06:ba:11:59:9c:7b:ab:ed:06:b4:28:23:
         44:b3:a6:1d:3b:e0:a5:51:bb:2f:b1:1f:5d:ef:74:ce:11:ef:
         46:42:f1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:17:43 2025 by rpki-client