Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
File:                     AvViYsnox9E0TfKw-MJdoTq9YiI.mft (raw, json)
Hash identifier:          d73/9hINfIiiMfCiLJfW5oRtFi1Kr4r29mtOiALHscE=
Subject key identifier:   58:41:81:7B:D5:1D:64:41:A7:AC:AA:74:A6:58:68:16:A8:D1:47:EF
Authority key identifier: 02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22
Certificate issuer:       /CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
Certificate serial:       0197B8903CFB1764ED8F0B0F3D4B8F10F6E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
Manifest number:          0805
Signing time:             Sat 28 Jun 2025 22:02:29 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:29 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:29 +0000
Files and hashes:         1: 1--_Zcgs6dmSejokLiM_ybNoSeYY.roa (hash: WtkOeqxSouyMu3WCH8w+fCLALFhCyGea7LlfmEYOb0U=)
                          2: AvViYsnox9E0TfKw-MJdoTq9YiI.crl (hash: iHdRkgodmVNiNjvdulmxH4DkbUetgWKl3u4WERT4qdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:90:3c:fb:17:64:ed:8f:0b:0f:3d:4b:8f:10:f6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
        Validity
            Not Before: Jun 28 22:02:29 2025 GMT
            Not After : Jun 29 22:02:29 2025 GMT
        Subject: CN=5841817bd51d6441a7acaa74a6586816a8d147ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:53:01:c6:1b:39:2f:a5:40:b4:dc:33:c6:e8:
                    2c:73:80:de:18:b5:9d:61:c4:95:6d:19:53:6a:98:
                    c0:a6:7f:a3:59:7e:81:2f:b0:d3:e5:ea:d2:84:74:
                    b9:23:f7:2a:bf:00:74:9c:20:16:8a:26:05:60:b5:
                    2d:fb:12:11:66:4e:94:b2:8c:e5:58:37:21:9b:7f:
                    2a:0e:c4:b7:0d:4a:3f:02:f1:64:79:31:2c:64:4f:
                    4a:af:be:63:bd:17:c2:c8:f4:f9:99:34:53:ea:b2:
                    28:30:62:4c:c2:4c:d2:10:ae:c0:05:d5:19:f7:8f:
                    65:63:a1:65:bc:88:25:80:e3:69:bb:63:91:5c:dc:
                    1e:66:c9:bc:f6:2b:d8:a6:f9:21:f8:2a:20:88:bc:
                    10:d5:ee:1e:e3:15:35:93:4b:7a:de:44:f1:80:a9:
                    d3:da:54:c3:3f:9e:20:3f:6b:8a:5e:43:45:75:d4:
                    c0:fe:e4:75:f7:3a:bb:06:09:5f:6f:06:49:a2:90:
                    09:aa:a6:ec:97:84:21:59:2b:fe:17:a8:f4:88:18:
                    4f:ce:77:8d:0c:1b:ac:e1:3c:01:0a:f9:fa:93:78:
                    d1:64:5f:65:3c:31:57:6a:ea:10:e4:fe:e7:8e:2b:
                    ee:21:ea:dc:b5:9d:a8:88:d2:c8:6e:bc:7d:27:c3:
                    d2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:41:81:7B:D5:1D:64:41:A7:AC:AA:74:A6:58:68:16:A8:D1:47:EF
            X509v3 Authority Key Identifier:
                keyid:02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:f2:fb:60:14:20:4f:bd:52:1b:1e:8a:3a:62:9a:d6:79:9f:
         4c:db:81:3f:f5:4f:b9:73:1a:50:aa:c1:7f:f4:68:47:09:23:
         b8:4a:97:c5:cb:63:60:9c:ce:23:ee:f2:59:1a:18:a6:68:93:
         13:6f:f4:3a:03:eb:ef:4a:4b:fd:08:57:fd:23:53:11:20:6d:
         38:27:b2:9d:d2:a3:4c:01:fb:43:60:3b:2b:9c:b5:dc:64:49:
         dc:65:f8:e2:ec:2c:3f:4a:5c:1e:ce:44:8a:0b:c9:ee:83:8f:
         ff:03:39:8a:4f:e8:cd:c8:92:b8:97:10:0b:cb:89:60:84:2e:
         1c:e1:29:c1:9a:6a:4e:9c:48:af:e9:dc:fc:cd:16:07:61:4a:
         ef:bb:99:8b:64:8a:f7:d4:9a:3e:a5:16:1c:52:50:4a:5b:d8:
         aa:c4:b2:30:41:68:db:66:d1:cd:8d:91:3c:75:17:16:03:ce:
         be:f6:e1:fd:0e:cd:9f:63:27:82:c0:2b:5d:d0:c1:31:9b:cb:
         d1:95:84:ff:f1:8f:60:74:13:b0:68:df:de:df:93:6a:cb:b8:
         80:5d:2c:7d:59:b7:db:0c:49:0e:02:ed:d6:c3:8c:94:b3:78:
         07:3a:a0:2d:02:cd:c7:a3:de:28:51:50:a2:53:00:9d:c2:41:
         c7:89:ee:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:36 2025 by rpki-client