Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft
File:                     aMwyXIrZdpobVNopYwX-DDZXN3U.mft (raw, json)
Hash identifier:          wLQ1dxSjL3gWhXhAUFn02yGS9W+eQc60Tmo1/knwjh0=
Subject key identifier:   BD:AE:98:80:8C:A6:36:95:56:F5:84:9C:A3:E2:79:43:C4:92:C9:67
Authority key identifier: 68:CC:32:5C:8A:D9:76:9A:1B:54:DA:29:63:05:FE:0C:36:57:37:75
Certificate issuer:       /CN=68cc325c8ad9769a1b54da296305fe0c36573775
Certificate serial:       0197B6A1BE3886267348A2B45BE1CD8A1037
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMwyXIrZdpobVNopYwX-DDZXN3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft
Manifest number:          08F5
Signing time:             Sat 28 Jun 2025 13:02:22 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:22 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:22 +0000
Files and hashes:         1: 8SXa1LGEgRchazaJtCn45wimFzI.roa (hash: aarcdMLMUD+vhP2Nt/G/Xfb4TI1KlOo20WqPIWfHmGk=)
                          2: 9h0zhhREd-POjncfc-zEp4ug01M.roa (hash: JFrWYEIaG5U63hgpJ7xXhrCvo1w1GUW7UsCloYFy5DI=)
                          3: aMwyXIrZdpobVNopYwX-DDZXN3U.crl (hash: Vvewm+lIlSW0OkxqFCarWDyW03yiK1o3rZvRhDofYGg=)
                          4: hOg_cmo_1iPWo-TSIDavHMMiNf0.roa (hash: x2NoBu31Yw8pVlDgk5TVKt6dy/zU3kvxFv7RpieFwqA=)
                          5: mrLaA1eR5ZA6ZP7iWY4b8XRMWTY.roa (hash: jJecCTBKKFO9xnb082mcb8oh5M5FNk8lCFd2JS7Xlls=)
                          6: zZ03RoGozbT1HFe4mhpawTrExsc.roa (hash: lLn9Wn1De0ejD1AHiJO5yX30r5UE6GRrj/0NmZ5bxR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aMwyXIrZdpobVNopYwX-DDZXN3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:be:38:86:26:73:48:a2:b4:5b:e1:cd:8a:10:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68cc325c8ad9769a1b54da296305fe0c36573775
        Validity
            Not Before: Jun 28 13:02:22 2025 GMT
            Not After : Jun 29 13:02:22 2025 GMT
        Subject: CN=bdae98808ca6369556f5849ca3e27943c492c967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ee:ac:48:57:19:44:2c:6c:c6:8a:17:d2:29:
                    11:90:83:d8:9d:60:6e:d8:7c:51:10:ef:44:1b:72:
                    0f:3b:e3:84:0c:bc:a8:55:c6:10:94:1a:50:36:57:
                    98:09:69:7c:c5:95:18:34:8e:5b:68:43:28:b7:eb:
                    b2:4f:c7:bf:b2:f4:b5:ea:67:c5:61:59:a6:27:8a:
                    f8:da:83:9e:20:d6:56:04:f9:2f:e3:a5:63:3c:9e:
                    fe:a1:d2:94:08:e1:12:6e:1b:45:ee:12:bf:48:23:
                    b8:f3:65:6f:d7:27:53:9c:1c:34:59:68:28:10:9a:
                    4b:ae:ad:e7:31:83:bb:94:78:68:cf:4e:a0:84:73:
                    13:9f:c7:35:aa:72:4d:1c:8d:e9:ef:52:fa:0e:27:
                    2e:9c:92:8b:22:42:f1:33:b0:b6:f2:fd:a2:47:75:
                    79:de:5c:17:34:c4:8a:09:df:91:08:fd:a1:0e:43:
                    c3:b6:66:b0:03:a1:5e:e1:3d:ae:e8:3a:15:b4:4d:
                    6f:d5:b1:f4:f3:ec:ef:7f:2c:86:08:30:3e:4a:93:
                    25:c1:8d:6c:45:69:ea:96:2c:c3:a4:9a:ae:d7:60:
                    1d:d4:6e:4b:42:8f:ca:cf:b5:4f:08:a6:b7:a3:40:
                    fe:f9:9e:2b:31:99:f1:07:55:d6:8b:47:bd:d2:05:
                    4e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AE:98:80:8C:A6:36:95:56:F5:84:9C:A3:E2:79:43:C4:92:C9:67
            X509v3 Authority Key Identifier:
                keyid:68:CC:32:5C:8A:D9:76:9A:1B:54:DA:29:63:05:FE:0C:36:57:37:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMwyXIrZdpobVNopYwX-DDZXN3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f4:d7:7d:e4:3a:8e:4b:ea:30:63:13:6d:57:c4:25:08:33:
         e1:b2:06:fb:f4:48:a8:c5:e4:ed:bb:4a:2b:b7:89:30:1b:39:
         fc:ae:50:80:8f:7e:f2:ec:6c:2f:f4:b8:8d:24:f9:fc:00:a1:
         86:a7:8b:ee:1e:7c:2d:9d:10:03:66:fd:69:2b:0c:94:a4:ed:
         93:9a:a7:dc:7a:5c:90:7c:30:0c:90:73:ee:d6:ce:6c:70:d2:
         59:ec:c2:0a:02:c4:6a:00:9b:b1:35:09:4a:ed:42:68:80:5f:
         a6:a2:be:32:64:17:4d:c2:c9:81:6d:e9:21:0f:9b:14:95:3a:
         14:f7:41:79:a1:f1:c3:ea:94:72:a9:a3:b9:4b:34:e4:b2:c3:
         60:17:ab:1d:5e:e3:ad:ff:30:d8:c8:49:64:b5:c2:26:50:a7:
         bc:0e:30:27:c4:f1:ed:84:e8:af:ee:a8:47:fe:8e:f9:af:fe:
         1e:bf:ec:a0:e0:78:5a:9d:a2:87:ba:0d:5b:64:b0:f7:7e:07:
         4a:77:27:56:95:bf:58:90:e6:1c:71:7a:f5:b6:e7:43:89:08:
         43:ad:4a:73:f1:fe:22:cf:56:f0:a6:dc:1e:55:21:a3:c9:65:
         c4:81:37:b4:e3:29:11:6a:2d:73:56:06:93:02:22:4f:b5:f2:
         f4:be:cc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:56 2025 by rpki-client