Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
File:                     rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json)
Hash identifier:          mrD9reVlvBirIhBJNftbLtwV4zYjUtkByAsOeJVgbwI=
Subject key identifier:   D7:26:1D:49:5E:62:4B:6B:62:70:A9:56:0A:A7:11:0E:46:89:41:9E
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Certificate issuer:       /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial:       01976F63119D11E796143785B9FDF79936B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
Manifest number:          1453
Signing time:             Sat 14 Jun 2025 17:00:52 +0000
Manifest this update:     Sat 14 Jun 2025 17:00:52 +0000
Manifest next update:     Sun 15 Jun 2025 17:00:52 +0000
Files and hashes:         1: 1-qo2IZfSQe_p35VuNGg4c_fEmc.roa (hash: ZNytEtjJE3PoSw4fLaCNFgz51wqNOEOmou9bPPKVA2c=)
                          2: 2ax4rXEQA4dV7JremBmC0hQtaug.roa (hash: R/IKnZobJlpQGcUf505T2eKyq/irMcu2IrwltIWV+u4=)
                          3: D7oUSyhrzSWYYWl3XhQsUS72Yg4.roa (hash: gFrsONax/RUGkygvJXfVvu2wc5r7m/Z6tusuo2v3M6g=)
                          4: JOxitDZrH06_7gdJfTN1yzrI7bs.roa (hash: I4I1UDRrHD91eVymVzkfYVMUc8wdJt2DaDwRY1upCck=)
                          5: OBaSZfmehcZUBqMMFijQNwThNdI.roa (hash: 7APqv18WVWke1FDylnRooW5eMht73lWY6YprLban2L8=)
                          6: XukASID4vdHx7vc_ang5UnSgHH8.roa (hash: DxLEWXez2e/d5+PqlJRiByRJ5SsEhSAc9iljhU9E7yk=)
                          7: j5-XW5coEbjIakLbav-a-xkoxss.roa (hash: 3PeUPnbjaNU5eTMyl99skfbBuUv7EoDvaqaX+1+rQl4=)
                          8: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: HJPujCP3Gbxfnm2vCYWP5C5R+eXycQDGmzfZSLo7Qmo=)
                          9: zZkIW74qXtltgoLUxRfnjX8t5Bg.roa (hash: CVMBCJyn+beuTJEHswvGuHQF9hMYEJm+xn7R7IlaPlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:63:11:9d:11:e7:96:14:37:85:b9:fd:f7:99:36:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
        Validity
            Not Before: Jun 14 17:00:52 2025 GMT
            Not After : Jun 15 17:00:52 2025 GMT
        Subject: CN=d7261d495e624b6b6270a9560aa7110e4689419e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:af:3d:3d:a8:fd:b0:19:df:61:83:bc:09:63:
                    98:fd:6c:80:ed:04:df:69:b1:cb:a7:ed:8d:5e:21:
                    34:69:12:c9:ff:00:25:63:63:15:c2:4d:40:3f:ba:
                    80:76:c6:3d:ec:1e:85:ee:ac:c2:3e:7e:23:14:04:
                    66:20:cd:15:5e:03:9c:31:3d:a4:6b:f9:b7:2e:12:
                    16:5a:3e:35:2a:16:46:9d:dc:48:3c:85:af:d7:78:
                    42:8f:4d:ad:3f:f8:19:be:2f:b7:9e:52:73:a8:06:
                    bd:ac:8c:ce:9b:f5:13:a1:4a:52:aa:a5:6f:08:d5:
                    a0:f0:48:b5:62:7a:de:1c:c3:14:61:a9:5d:c4:7e:
                    06:c0:17:43:5f:b3:05:25:e3:9d:ab:80:61:5e:f2:
                    91:28:6e:1a:67:a4:e6:73:e3:00:e6:2d:55:e0:04:
                    f2:fa:af:44:d0:09:56:ce:2e:88:3d:5e:c3:6e:b2:
                    91:6a:c0:5e:6c:be:a3:bb:f9:16:24:d0:37:2e:65:
                    47:44:24:c0:ae:ca:3c:e6:39:e3:30:7b:8d:e7:cf:
                    d7:ec:b8:f6:43:eb:e3:65:42:9b:50:7b:31:ff:b2:
                    8f:fc:b6:5c:ce:67:ac:5f:19:55:2c:6f:cc:c9:ce:
                    88:44:bc:97:a3:ea:e7:a9:8a:ea:5b:61:c6:98:9d:
                    e6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:26:1D:49:5E:62:4B:6B:62:70:A9:56:0A:A7:11:0E:46:89:41:9E
            X509v3 Authority Key Identifier:
                keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d2:b4:47:ee:59:25:37:40:15:18:ac:65:37:68:35:e2:29:
         dd:fd:e1:f3:bc:5c:b0:d9:ed:78:5e:86:19:d8:b6:56:3e:15:
         aa:e6:cf:6e:34:0e:8a:a2:ac:ef:7a:04:3e:13:6d:32:2b:bb:
         d6:77:1f:c6:67:3e:27:99:44:cc:38:55:a9:f3:ef:be:12:4b:
         ca:b2:30:87:c7:ca:d4:c0:4e:d1:83:93:75:30:25:42:22:2c:
         d3:74:6a:a7:1d:c2:3d:25:6d:5d:f0:14:41:33:37:2a:3b:85:
         37:47:6d:7a:ec:f1:13:b7:71:49:1c:6e:be:a9:77:18:c0:50:
         c4:61:2e:cf:4d:27:23:57:d9:a6:9d:33:f6:63:c4:7a:de:09:
         8b:67:b2:bb:f4:10:68:bb:21:44:b9:cc:67:66:5e:63:f1:cb:
         17:79:91:0e:bf:00:d9:bc:9d:e4:73:f9:7a:bd:e5:06:0d:43:
         ed:4f:ea:4f:59:c0:f3:11:f9:09:92:00:1b:e1:70:38:bd:28:
         bb:39:94:91:2f:04:9a:90:a9:f3:3a:5a:57:06:c4:86:a1:30:
         20:f2:61:33:66:04:b8:c9:8b:f3:b4:85:78:58:5d:ba:ac:af:
         b1:f4:8d:04:ff:f0:bd:4e:2d:18:d1:29:41:3b:6b:b2:d2:d5:
         4d:8d:45:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:38:48 2025 by rpki-client