Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
File:                     aia56N9dpWmFTGGvcU2zA0krYvE.mft (raw, json)
Hash identifier:          0dzHMm0EvKcNNZR1JOVKcdhPB6RQoj5fMQX1o3hwa7s=
Subject key identifier:   02:26:D1:3D:82:C1:EA:EB:48:25:B8:11:8C:61:64:06:C7:66:E5:74
Authority key identifier: 6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
Certificate issuer:       /CN=6a26b9e8df5da569854c61af714db303492b62f1
Certificate serial:       0197B70EC4C200DEF057C0D67FAB089932C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
Manifest number:          0148
Signing time:             Sat 28 Jun 2025 15:01:27 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:27 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:27 +0000
Files and hashes:         1: OXOnare6dVM-zLYHWOSVEGQTw18.roa (hash: dcwy2HRQRShbBLQYZ7Zn1DYc8vKW+hy7H3ObhuzMkSQ=)
                          2: aia56N9dpWmFTGGvcU2zA0krYvE.crl (hash: Jz7aJ9/ld1CqodfPDuEjQcPqdYkHwwht/56z0IkbPSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:c4:c2:00:de:f0:57:c0:d6:7f:ab:08:99:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a26b9e8df5da569854c61af714db303492b62f1
        Validity
            Not Before: Jun 28 15:01:27 2025 GMT
            Not After : Jun 29 15:01:27 2025 GMT
        Subject: CN=0226d13d82c1eaeb4825b8118c616406c766e574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f4:36:c3:e2:a8:5a:9a:9c:bf:6f:be:95:eb:
                    33:92:92:a8:70:c8:fd:18:98:65:e0:9f:c8:b1:fb:
                    b2:4f:c9:cd:6b:a7:f4:8e:f1:ec:71:23:1f:ba:10:
                    61:fc:67:03:57:89:99:7c:d4:cf:60:0e:95:17:63:
                    11:56:bc:da:e6:33:bd:32:5f:01:39:8a:21:fe:00:
                    da:1a:33:e9:f6:b0:c1:9e:72:1e:2d:fb:89:62:92:
                    a1:74:7b:5c:ad:02:ae:60:f1:77:4d:77:28:90:f3:
                    6d:37:f0:51:77:bf:14:47:f6:f4:52:e2:37:46:0c:
                    e1:35:7b:34:01:57:71:42:59:d0:85:07:cd:39:59:
                    ef:d6:76:92:9d:68:59:08:f0:5c:6b:d8:a3:ca:8d:
                    9d:b3:ec:e7:0b:cf:3a:34:5e:38:37:a6:78:40:fd:
                    d7:90:d8:ad:61:9c:e7:7f:8c:f6:1e:13:88:06:13:
                    bf:6f:a5:8a:eb:95:1a:b2:63:52:2b:80:8b:dd:f7:
                    cc:40:c6:79:36:b8:ef:c5:66:3e:02:b2:1b:5c:c4:
                    29:3a:82:bb:26:96:1e:73:44:a8:0a:7a:a9:7f:3a:
                    c9:26:02:81:3f:e4:f7:5b:bf:8c:b0:59:fa:fa:53:
                    b7:17:eb:a6:2f:6b:1d:b1:fa:16:87:a9:bf:ab:dc:
                    d5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:26:D1:3D:82:C1:EA:EB:48:25:B8:11:8C:61:64:06:C7:66:E5:74
            X509v3 Authority Key Identifier:
                keyid:6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:09:78:7c:3a:b1:08:7c:70:d4:0c:39:e4:96:3c:1a:4a:da:
         35:d0:05:f4:41:b5:9a:16:c2:e5:e7:ea:1e:1d:2b:68:5e:e0:
         cb:7b:1d:41:de:80:a5:c4:47:23:d8:d6:e9:14:2c:67:50:e3:
         a6:06:ef:4d:01:5c:70:40:3a:d6:25:48:d9:82:f7:6e:65:5a:
         28:9a:56:e9:d7:68:ad:95:20:ec:27:b8:49:87:6b:e3:1b:d7:
         cd:f9:4b:07:9b:53:f8:30:81:6b:81:73:c1:66:d2:ee:63:85:
         54:3f:5c:c0:92:62:25:b7:9b:66:b2:8c:50:03:8e:a7:07:83:
         6b:3c:89:ed:0b:29:b1:4c:6a:3a:ea:a2:30:14:c4:c3:08:e0:
         ca:33:7d:e8:ee:18:14:56:d3:ac:46:16:93:40:de:12:0a:02:
         b8:be:97:2c:18:0a:d0:b8:5d:9a:b7:be:51:fb:6c:af:52:58:
         2a:34:95:25:df:36:3f:8e:fe:7b:2a:a1:66:04:b2:cc:d7:5a:
         41:fc:55:71:a8:a2:75:88:7b:54:a9:08:12:bd:d4:8c:6c:14:
         fa:3f:ce:96:a5:49:fd:e7:ff:40:7d:be:06:23:cf:8a:b8:1b:
         23:a0:f9:b5:5a:d9:76:b4:ab:13:49:e1:6f:09:52:3d:3e:2a:
         1b:45:00:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:37:51 2025 by rpki-client