Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
File:                     Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft (raw, json)
Hash identifier:          M09VZCoUKE4oIkIEZmMiElUNw/uPGunpqrtFkzebfko=
Subject key identifier:   BC:5A:0C:77:16:8C:9E:BD:DC:43:E2:FA:24:87:DB:64:B7:27:D3:84
Authority key identifier: 32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
Certificate issuer:       /CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Certificate serial:       019771F64DBCB290BD3D09937E7D60D14ED5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
Manifest number:          0335
Signing time:             Sun 15 Jun 2025 05:00:56 +0000
Manifest this update:     Sun 15 Jun 2025 05:00:56 +0000
Manifest next update:     Mon 16 Jun 2025 05:00:56 +0000
Files and hashes:         1: HuIbCcMZ3U5fal8WQko5r7hmFPE.roa (hash: gsiwtZ3Lpg7UUxzfKZ1xNGJGO5Bt4L0AcldZ67+uEoo=)
                          2: Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl (hash: Xs/zvT/plTSnAprskvPz0q4Zory7wlbXzsqsolChTCc=)
                          3: fY7PiVaNASL9YPra9k_iCHjE_QA.roa (hash: o0Z+yqTEUGOR+lt86tr/WH+kJG6LQkAy74XbI2VEuOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:f6:4d:bc:b2:90:bd:3d:09:93:7e:7d:60:d1:4e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
        Validity
            Not Before: Jun 15 05:00:56 2025 GMT
            Not After : Jun 16 05:00:56 2025 GMT
        Subject: CN=bc5a0c77168c9ebddc43e2fa2487db64b727d384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b9:85:11:a4:ce:10:12:3a:52:0a:0e:c3:c8:
                    fc:06:d4:a2:85:c6:55:99:8f:08:08:54:91:24:a7:
                    8e:2c:44:77:f6:d6:b9:21:d5:de:02:1d:a3:6b:f3:
                    a6:31:c5:d5:02:c1:28:93:90:14:bc:48:1d:29:3b:
                    7e:3d:54:84:df:b3:ff:7e:53:c0:ae:ed:3e:b2:2b:
                    e5:78:4a:d4:6f:03:9a:0d:70:25:90:87:b5:1b:9d:
                    d5:c6:91:cb:6c:56:ad:eb:fe:03:0e:53:08:1b:4e:
                    d1:bd:c0:47:6b:74:1e:84:d1:96:85:79:e9:65:8a:
                    45:5b:f7:b8:16:aa:25:7d:c7:06:c3:1d:4b:67:c9:
                    b2:87:bf:a8:33:d9:4c:70:76:cc:81:14:4b:08:cd:
                    5b:a7:62:69:02:6f:11:86:94:85:f1:29:52:58:7c:
                    d8:98:85:94:3d:36:9d:d7:9f:dc:6b:ff:15:ce:c8:
                    93:0a:cc:71:b3:18:a5:6b:b4:f6:6b:8e:a9:e0:49:
                    8c:3b:80:02:db:5d:90:84:75:67:f0:ef:2b:65:b9:
                    86:39:2f:45:d1:b6:27:15:5b:1a:9e:cb:d6:3d:6f:
                    e6:9e:7c:98:ea:a5:90:fa:1c:13:c3:0f:a5:96:a9:
                    02:84:98:72:5f:90:d8:d4:74:d2:5e:af:60:44:21:
                    ba:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5A:0C:77:16:8C:9E:BD:DC:43:E2:FA:24:87:DB:64:B7:27:D3:84
            X509v3 Authority Key Identifier:
                keyid:32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:14:6e:54:09:56:cb:17:5f:77:98:3b:61:9c:1b:bf:93:ca:
         96:7b:59:c4:38:3f:fa:43:8f:1b:11:7c:31:cc:b7:61:f7:de:
         85:a3:4e:84:ec:5e:87:7c:ea:0a:c6:d3:da:20:e2:42:e5:96:
         39:e9:fd:ce:d6:03:2e:c5:98:1f:13:70:78:bc:11:ad:1a:4b:
         b2:a8:6b:1e:b6:75:18:2a:58:97:d7:48:b8:ce:18:12:ff:df:
         6e:40:d9:af:dd:d0:90:4e:b3:f2:0f:b6:08:9d:e3:52:08:d7:
         b6:e0:fd:09:ad:75:8d:f6:35:26:43:b7:c5:da:f4:06:90:8e:
         62:d5:56:d3:d5:21:8d:94:e7:31:bb:de:a7:9b:55:88:49:cc:
         01:10:98:e5:54:ad:bd:47:2a:e0:db:a2:82:32:df:74:36:29:
         b8:34:2d:42:c0:36:43:6e:8b:ac:80:6b:dc:b1:06:5a:23:e7:
         4f:be:ae:3c:78:6e:e4:a1:ba:ca:7e:dd:5e:8b:1e:7d:f0:a4:
         b0:3e:05:ea:09:43:44:47:4f:22:bf:05:80:d2:39:e6:fe:59:
         79:f6:d6:71:43:85:6b:a4:41:7f:5d:13:51:4b:e6:2b:01:cb:
         2d:82:32:1f:f8:c3:9c:ef:d8:b6:89:cf:46:b6:62:2c:2f:78:
         85:9a:5f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:16 2025 by rpki-client