Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
File:                     sCqa8vxf6TxDFIqssTxRvpBMjkw.mft (raw, json)
Hash identifier:          kRdtKRti0fOW/GSZWoA9mUhJoIiBYKTZwmVubTxwd80=
Subject key identifier:   06:12:60:9C:15:F7:61:22:35:36:C9:88:69:98:78:77:13:95:CB:8B
Authority key identifier: B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C
Certificate issuer:       /CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
Certificate serial:       01976C98C874242856CAD462E1529D2F0E7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
Manifest number:          03C9
Signing time:             Sat 14 Jun 2025 04:00:41 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:41 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:41 +0000
Files and hashes:         1: RLYBpjQJ_nWnvtQxzs5jpfZ53LI.roa (hash: WydSL9s2ghSAkXvNPUv+LZJE2s3aihvIV2UvrS6hIBw=)
                          2: sCqa8vxf6TxDFIqssTxRvpBMjkw.crl (hash: wmznZqzsusOxLxfFsZTO+XZGZTtkeSg3tJWdILIJie0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:c8:74:24:28:56:ca:d4:62:e1:52:9d:2f:0e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
        Validity
            Not Before: Jun 14 04:00:41 2025 GMT
            Not After : Jun 15 04:00:41 2025 GMT
        Subject: CN=0612609c15f761223536c988699878771395cb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:95:96:8c:02:aa:f6:1f:5c:95:19:7f:2c:45:
                    08:49:45:6c:e3:b9:ba:8a:62:38:f8:0d:e2:0f:01:
                    8b:ff:22:49:06:a8:80:ca:9f:a3:7e:84:2b:aa:5b:
                    4c:95:53:ab:ce:0d:4e:23:da:54:41:4a:d8:64:8f:
                    d9:57:67:a7:07:15:f0:2f:a8:c4:38:ae:dd:07:87:
                    44:eb:3d:38:c0:b2:86:b6:a2:1e:21:c8:ba:c4:d3:
                    37:dd:5f:4f:43:ca:44:a4:ee:d8:fc:6c:74:57:9c:
                    ba:03:73:8a:e1:da:90:d4:15:c9:c4:86:ca:5e:d9:
                    0c:16:3a:2a:28:63:b9:4d:ad:1f:4a:9a:05:50:1f:
                    23:5e:17:7f:2a:af:eb:68:e5:61:f4:d7:7f:a9:02:
                    ac:49:32:96:ae:f8:85:04:d6:5b:ea:02:b5:26:98:
                    65:74:71:8c:57:22:bc:15:7d:63:3d:df:b7:0b:73:
                    50:28:cd:7b:ef:aa:1f:06:88:e9:a5:43:68:9f:d1:
                    39:8d:44:f7:c8:3f:84:7b:98:b0:cb:f6:53:e7:d4:
                    a8:2c:11:1e:61:48:af:d4:b7:4a:cf:51:da:26:e0:
                    d7:e0:d5:fe:37:1e:94:d2:e2:51:ae:c2:f1:59:51:
                    df:b8:62:0b:02:93:bb:e9:ea:a8:3c:be:45:e5:ad:
                    c7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:12:60:9C:15:F7:61:22:35:36:C9:88:69:98:78:77:13:95:CB:8B
            X509v3 Authority Key Identifier:
                keyid:B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:53:df:a6:93:b3:23:05:5d:c4:88:55:b0:7f:b1:9d:d7:1a:
         7d:8c:57:1d:e8:1c:3b:22:0d:4a:c9:28:c4:13:75:21:c2:e5:
         76:65:ee:ff:93:80:a0:62:1e:83:45:7f:49:35:4e:9c:a1:1d:
         c9:8d:4a:38:a9:c8:5b:59:d5:20:3a:8d:75:83:91:e9:ba:5d:
         08:fa:ea:b8:81:7e:8b:dc:a4:23:0e:a7:01:60:d0:ce:e4:ee:
         a9:16:6f:84:3d:1e:1f:a8:9e:64:d0:b8:50:27:8a:16:aa:cc:
         e8:98:25:31:fd:27:c1:8e:37:5e:c3:77:e8:31:2a:46:93:1e:
         3c:e4:2c:66:5e:c2:36:81:d2:7a:41:62:7e:bc:77:c8:57:f4:
         98:6b:dc:f0:7a:a9:e8:04:9a:bb:b8:c3:49:f9:33:e0:75:42:
         22:7f:83:89:f7:c6:f7:57:27:d5:81:8b:83:0f:04:33:c5:67:
         be:e9:db:64:fb:14:cd:1b:cc:9c:d1:86:b0:c0:32:75:08:b0:
         26:b2:21:11:4e:37:a6:d2:91:ae:a6:b8:c0:31:3d:a7:51:5c:
         5a:e4:5a:2f:00:af:be:a3:a5:1b:f5:a1:46:81:b1:8d:36:18:
         34:7d:2d:4e:4b:7e:34:41:f9:1f:0b:7b:5e:11:66:fe:e0:34:
         92:b8:c3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:22:53 2025 by rpki-client