Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
File:                     sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft (raw, json)
Hash identifier:          bO057mT3gT4OoyjGCNSEUGclDyxzHuycvv7+P9wULW8=
Subject key identifier:   AD:73:58:5C:E0:10:3A:80:DB:EB:F4:34:FE:93:5F:93:20:BA:AA:70
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Certificate issuer:       /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial:       0197B820F7C37FA8AD27DB632DD617440140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
Manifest number:          110F
Signing time:             Sat 28 Jun 2025 20:00:57 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:57 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:57 +0000
Files and hashes:         1: G1Dy1jIdJhnPg1RR07SyKW4TRdA.roa (hash: DeuawucuklWfQxVupMFlWsFVrFr6ThqGmaVCsW6hwCg=)
                          2: nzP88bjh-XEZ2kCW3oiiu2uSEHc.roa (hash: Kf5r0P3IvTLCYpsr+vk6c4IGLFB/DHZsFGgImWavBWE=)
                          3: sPOrY5QZw05wtZqjOmcPJxxNH1M.roa (hash: mEv22PsIL+19AjiIf+57cbc9L5IztRFvvnP5Tk0/Ms8=)
                          4: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl (hash: 8/KdjAhAJH62WmX3i7jmYpCvt+tlTpB3neW8UmZxJtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:f7:c3:7f:a8:ad:27:db:63:2d:d6:17:44:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
        Validity
            Not Before: Jun 28 20:00:57 2025 GMT
            Not After : Jun 29 20:00:57 2025 GMT
        Subject: CN=ad73585ce0103a80dbebf434fe935f9320baaa70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9c:4c:7e:02:51:2e:8b:56:32:ce:c3:b4:b4:
                    06:e7:81:54:02:6e:81:0f:30:6c:c7:ec:32:05:02:
                    ab:8b:6e:44:e6:0d:20:21:8e:5c:4a:18:2c:b5:67:
                    27:49:90:8c:d5:56:c4:19:df:32:25:a5:d9:02:83:
                    99:9a:e8:87:d0:c2:c1:f9:de:a0:de:c1:65:34:45:
                    b6:fb:bf:32:35:20:79:14:fe:6f:e8:62:15:29:db:
                    be:30:4c:ec:88:fe:4f:ef:88:65:66:e1:52:56:ba:
                    0f:1d:93:d9:25:45:fd:6f:10:d8:a4:7b:9b:6d:ed:
                    d6:09:f5:3b:5b:3c:3b:d3:dd:e1:d4:16:80:18:5e:
                    e4:99:76:d1:6f:67:94:77:a7:55:5b:77:03:cd:66:
                    e4:49:cf:24:8d:f9:3f:1b:a0:eb:94:be:a6:e3:65:
                    44:88:5d:9e:be:bd:49:ea:12:2b:40:c8:92:e1:52:
                    4c:7b:e3:04:90:d5:e5:a3:c4:60:26:3e:73:7f:fe:
                    b6:5d:4c:85:e5:2d:b3:46:02:a4:d9:e1:08:0c:cc:
                    7d:c5:58:e4:28:69:3d:7b:58:98:9c:b5:8c:13:5e:
                    28:ef:b0:c7:89:60:a7:0e:0a:51:5b:c0:88:5c:09:
                    e6:e1:31:4e:19:c0:4a:a0:fc:dd:77:0e:6b:67:0e:
                    77:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:73:58:5C:E0:10:3A:80:DB:EB:F4:34:FE:93:5F:93:20:BA:AA:70
            X509v3 Authority Key Identifier:
                keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:9e:40:2b:9a:52:61:50:7d:ae:68:93:45:63:25:54:60:9e:
         a7:ef:a5:de:50:ad:30:ef:7c:62:27:a3:55:36:d0:67:6b:e2:
         f5:6e:7e:4f:28:c2:07:57:a7:f5:2e:0d:d3:8f:90:5e:a1:25:
         07:13:74:5c:38:90:6a:52:7f:37:e4:cd:c8:0b:4d:71:e7:07:
         d8:16:8f:9f:60:ec:ec:ad:5a:07:0d:33:32:78:14:f2:34:87:
         ea:31:0b:fd:4b:09:94:f1:bc:97:6f:75:ef:d6:8f:2e:74:b2:
         88:5b:59:12:af:c2:70:c2:b0:43:ee:8c:7c:1c:44:6b:da:37:
         03:2e:81:6b:8f:ba:cc:a7:c8:dc:b1:5e:3b:86:6d:f0:ae:62:
         0a:eb:6e:0a:c0:c0:60:f8:bd:1d:fe:6f:7f:11:2a:95:6a:a1:
         71:3c:cc:55:9e:61:c4:21:0f:c5:70:2f:60:d7:b4:33:7f:d6:
         01:c5:4b:22:54:86:f3:54:8d:f8:01:0c:82:3f:e6:92:65:2b:
         db:3d:6d:60:11:15:1c:f0:2c:b6:95:0c:f9:70:94:b0:8d:2d:
         50:43:d0:80:4f:2d:da:e6:0b:26:4a:f1:89:7e:48:34:04:73:
         a5:02:50:b7:c7:d9:1e:bd:a6:7f:4d:a5:ec:9c:ac:7c:4d:0f:
         ad:10:36:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:25:31 2025 by rpki-client