Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
File:                     aDei-kt4dzpmIA_qTFhQepLzEgM.mft (raw, json)
Hash identifier:          9xr8o3e2Oqjienc6MbYAGJFU3Ms2RW1Trjmd6U4Smc4=
Subject key identifier:   CE:37:25:0B:29:4E:3E:AB:2B:17:60:2B:0A:5A:FE:A0:B6:23:61:E2
Authority key identifier: 68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
Certificate issuer:       /CN=6837a2fa4b78773a66200fea4c58507a92f31203
Certificate serial:       0197B7EA1DD96C1AC7E8D45D717F1318C65D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
Manifest number:          0307
Signing time:             Sat 28 Jun 2025 19:01:02 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:02 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:02 +0000
Files and hashes:         1: TeI7S8OZx8mbZ1CT76zicAPWzfI.roa (hash: i/HXyRHpcSf9pln1mzWKzux0Q76zSD8sVny0yg1+Z14=)
                          2: aDei-kt4dzpmIA_qTFhQepLzEgM.crl (hash: YrI4SXjbmtEJpz/lf7QSqfCgKSzEYEI02h9yAurWFEc=)
                          3: lTJh8IlgtKxtTsHbl0PqQi9XedY.roa (hash: WDZ9b3f2N4SwaPm559/K0k771yOilnYto8OW0s+oHSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:1d:d9:6c:1a:c7:e8:d4:5d:71:7f:13:18:c6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6837a2fa4b78773a66200fea4c58507a92f31203
        Validity
            Not Before: Jun 28 19:01:02 2025 GMT
            Not After : Jun 29 19:01:02 2025 GMT
        Subject: CN=ce37250b294e3eab2b17602b0a5afea0b62361e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:63:e8:4e:cf:21:dd:41:33:9f:50:8a:9c:b1:
                    f7:39:0d:d3:7e:6c:d0:5a:70:a3:ed:71:22:0c:f0:
                    7a:d9:59:d8:4f:0d:5f:c8:19:0c:0c:05:e4:99:e4:
                    ec:4b:8c:35:16:30:ea:5c:c3:c7:d5:67:5d:3d:09:
                    3d:2b:a6:e3:1a:42:4b:6e:d3:ff:2f:37:f5:81:ed:
                    60:13:50:0d:2b:3f:23:0c:ac:84:bc:31:4c:81:84:
                    e5:0d:75:fb:a7:c1:73:32:21:5a:23:20:14:92:9a:
                    7a:d4:40:da:0f:02:76:34:5c:00:e0:9a:72:a7:b5:
                    c0:c9:1b:f2:ad:48:40:ef:ca:bd:af:ee:6a:53:00:
                    24:21:35:9b:6a:a3:b0:ff:7e:20:c9:c1:93:0a:c1:
                    9d:e6:1c:c9:fd:8e:ba:aa:3d:ed:87:71:a1:18:2b:
                    bd:9f:e3:f3:36:29:d8:24:e0:64:47:62:79:33:bf:
                    a0:90:16:c2:2a:89:e1:34:26:8a:cc:3e:d5:a1:2c:
                    92:a9:52:67:b3:69:0b:e5:f8:48:44:0d:e1:2e:dd:
                    e4:72:f6:0e:8d:c6:a7:35:f1:d2:e6:33:e1:4b:27:
                    c5:63:4b:d8:8e:b6:d5:26:c8:a6:a1:26:6e:6e:ea:
                    fe:95:f3:0b:cc:ea:05:33:2b:69:77:89:c7:a0:be:
                    ae:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:37:25:0B:29:4E:3E:AB:2B:17:60:2B:0A:5A:FE:A0:B6:23:61:E2
            X509v3 Authority Key Identifier:
                keyid:68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:75:7f:6b:e3:4a:88:19:4e:4b:cb:c1:83:f6:90:2a:47:fa:
         d6:8d:6e:32:62:4a:9a:b0:be:6f:d9:7c:4c:2e:84:60:0a:93:
         af:31:3a:c7:f8:19:2a:b8:09:0c:2e:2f:a3:da:bc:8e:d9:66:
         08:e0:54:b2:67:3a:79:4d:df:15:87:d8:58:1c:db:2d:93:ca:
         3f:6d:e5:f0:59:5e:16:b5:88:d1:20:e1:8d:b3:0d:31:8d:df:
         ce:a5:5a:96:2a:87:7c:c9:09:d8:3b:0b:b5:0b:db:90:ba:ec:
         e9:f5:35:24:b3:46:72:94:cc:84:fc:b2:50:6b:e3:44:e3:1f:
         56:aa:cd:e0:2c:46:9d:c9:42:85:ac:f4:8c:9a:88:3a:6b:7b:
         38:d1:87:51:e7:ec:c1:32:af:eb:f9:94:cb:86:c2:f0:58:6d:
         37:79:6b:97:dc:0a:25:af:f3:8f:16:06:9e:d2:5b:dd:52:93:
         54:fc:05:2f:e9:c2:0c:0f:ab:bb:79:b0:a9:e6:fc:8c:9b:22:
         ef:b1:da:7c:5e:20:95:86:ac:db:8c:f1:bd:e4:85:e7:b4:06:
         27:62:41:0a:a4:8d:b8:a5:7c:fd:02:f4:66:a0:f0:80:03:71:
         b0:db:4c:59:2e:dd:ed:bb:ef:75:a5:68:00:f9:32:4c:d3:72:
         2c:d7:e4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:53 2025 by rpki-client