Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
File:                     sVXa3bhxudalPNa0f3diUIN_d3Q.mft (raw, json)
Hash identifier:          Uik5WMeVvIbHgfU00tu/a9x2G2yhH1ujAG4xj1laVIQ=
Subject key identifier:   81:A6:B5:24:F4:FE:64:C3:5E:F2:CA:F7:6E:79:67:64:24:DA:84:8E
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Certificate issuer:       /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial:       0197B96AB339E390727544CD372931A143CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
Manifest number:          1043
Signing time:             Sun 29 Jun 2025 02:01:07 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:07 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:07 +0000
Files and hashes:         1: SEy_q8yasarL4vhAyv6DcTF7WB8.roa (hash: B1SRh1WwCZtBHMAKkgvifQJ/iJUggGCgGgLLkNss5Nw=)
                          2: ahvH7VwsREz5RE_ZFd3kIxelgEQ.roa (hash: udwWfKom+EbN8jk91UYE1hrtLtfJILvdv1JBZTIFT0w=)
                          3: qFzA_pZ_xGWwQzfJMInzfWDKkuQ.roa (hash: 9OvJ6Tjvc0ybgSO+B/2T4VgdwfSjKx3tRoZuZYIdcTc=)
                          4: sVXa3bhxudalPNa0f3diUIN_d3Q.crl (hash: ngoIbiAX3rdpN2zErXmpF4+DssXz03hoOESW2o3h/Bo=)
                          5: wZzuntLr1Qz8EEQrI8gaxN9PJzk.roa (hash: /amIoY3uoWrTi9ErwL/m7gwpV0plV6uE2N5Muk44yLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:b3:39:e3:90:72:75:44:cd:37:29:31:a1:43:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
        Validity
            Not Before: Jun 29 02:01:07 2025 GMT
            Not After : Jun 30 02:01:07 2025 GMT
        Subject: CN=81a6b524f4fe64c35ef2caf76e79676424da848e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:88:6c:6e:19:64:47:3a:0c:cb:ce:7f:f3:
                    7b:59:f2:a6:84:29:02:74:97:6d:9c:a1:a2:41:bb:
                    fc:40:ec:28:82:df:4c:c0:a9:8d:0d:c5:26:c9:db:
                    07:ed:1a:15:4e:f0:f2:8c:fc:fc:99:cc:48:96:f0:
                    28:41:64:92:18:0a:b6:66:6c:22:96:d6:59:96:68:
                    bb:5f:d8:4b:06:a8:f7:30:fc:1d:20:34:c6:3c:bb:
                    27:9a:8e:61:34:02:95:b2:f9:41:3a:33:d4:28:45:
                    14:56:3c:36:38:05:25:f1:33:0e:52:ba:74:3f:22:
                    fa:f4:0f:fc:cd:31:0b:bc:ae:bd:d9:c0:ef:86:63:
                    dd:54:0d:9f:1d:0a:7b:89:33:0e:b5:51:f8:99:6a:
                    9c:1d:63:47:fd:46:91:be:c6:8c:66:04:eb:14:a7:
                    1b:68:f0:a9:37:04:cf:97:55:fa:df:8c:a3:87:f3:
                    3d:cd:01:d0:43:ff:44:b1:a6:a4:5f:56:d9:5c:e8:
                    1c:06:2b:46:af:65:5b:2a:3d:c2:cd:6c:f6:cd:1e:
                    a7:e1:cb:50:d4:fe:99:91:f8:3e:71:5f:3c:0a:67:
                    7f:24:18:81:53:a7:06:be:18:f3:08:2b:88:66:35:
                    14:8b:44:5b:d4:ec:bc:d2:90:3a:2f:4d:d4:09:03:
                    8f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A6:B5:24:F4:FE:64:C3:5E:F2:CA:F7:6E:79:67:64:24:DA:84:8E
            X509v3 Authority Key Identifier:
                keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:96:3a:0a:4e:3e:49:22:4e:70:89:b3:8c:86:13:ae:58:e6:
         f6:66:d7:80:ad:12:eb:d1:73:58:70:e8:01:d4:ae:13:35:9f:
         e4:50:6d:9f:e0:b8:b0:2c:04:8d:a7:05:13:b9:b7:da:e9:a5:
         b4:1e:0b:3f:87:ea:ad:80:0f:1f:68:50:f8:8e:cb:ee:2d:b6:
         22:6f:c1:12:41:dd:b6:10:26:cc:c1:d5:a8:97:d1:94:14:46:
         48:b1:87:5e:67:dc:af:9f:3d:cc:18:5a:13:f3:4b:f5:69:43:
         43:ba:1c:ef:3d:ab:d4:45:ef:b6:51:de:fb:b5:97:1e:5a:d5:
         05:ca:c4:b7:1c:1c:04:fa:a0:04:7f:a6:92:9f:64:39:1f:a7:
         44:2d:38:c5:04:d1:1a:ee:1c:79:51:03:ee:a1:e9:b4:66:ab:
         87:d6:a7:e0:31:35:de:c6:47:93:4d:3a:6d:1e:00:dc:62:64:
         73:22:0b:3e:b6:33:72:18:8c:08:a1:74:93:26:46:d2:4f:1f:
         11:58:d1:51:55:51:c0:0f:92:28:4a:23:03:3e:bc:58:f2:d7:
         24:e3:6d:f3:18:74:a6:50:e0:6f:ba:34:35:7f:28:81:e1:58:
         b1:46:df:44:fe:ba:8d:7c:e1:c9:89:87:1b:c8:9d:d4:fa:c8:
         92:8f:8e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:42:37 2025 by rpki-client