Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
File:                     d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json)
Hash identifier:          9hAgZwl/sh3CC7OL5iCEICZMr18LQJ8JTX7tgbckbno=
Subject key identifier:   BA:41:DE:44:62:76:B5:81:7B:6E:1A:D9:C5:19:C3:54:0C:CC:72:75
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Certificate issuer:       /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial:       0197C9F1FAB6EA175A1A840F67D8C641F78F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
Manifest number:          0471
Signing time:             Wed 02 Jul 2025 07:02:48 +0000
Manifest this update:     Wed 02 Jul 2025 07:02:48 +0000
Manifest next update:     Thu 03 Jul 2025 07:02:48 +0000
Files and hashes:         1: bKhEoTi8VyX_Q5KODWRSQwgQwKY.roa (hash: xvVp0HHxMjOmKvNmsan4is7a0Z8jz8EK1PXrOk2MzSo=)
                          2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: HozAkjmrKqCKgvKgke6qfYt+StPUMby8CxthWEpse5w=)
                          3: k3MkBKIkrmXV8hBuw2gGPp_sASw.roa (hash: kkGwe02sJUGG5OVjC1fC3C/lnFwMVxsODhInEGGgNMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c9:f1:fa:b6:ea:17:5a:1a:84:0f:67:d8:c6:41:f7:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
        Validity
            Not Before: Jul  2 07:02:48 2025 GMT
            Not After : Jul  3 07:02:48 2025 GMT
        Subject: CN=ba41de446276b5817b6e1ad9c519c3540ccc7275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b8:55:7d:0a:a3:8d:e1:c6:c3:be:7b:eb:ea:
                    a5:e9:4a:0a:1e:d5:b9:62:47:6d:7b:a8:f7:70:78:
                    70:d3:93:52:a2:37:ae:73:33:3c:01:03:e2:98:7b:
                    c7:7f:00:b9:25:f6:cf:03:fd:63:7b:8c:4e:8e:2c:
                    90:ea:f0:97:e8:18:f1:af:82:b8:f3:d0:2b:28:20:
                    26:b2:35:4a:88:20:9f:8a:d9:bb:06:71:9a:01:d3:
                    e9:c5:81:0b:6d:42:3d:63:0e:07:39:8d:ec:e1:df:
                    60:eb:d7:96:f1:0b:64:4c:89:c1:f2:60:42:e8:af:
                    8a:01:03:3b:0c:b9:37:e7:ba:d7:c5:65:93:73:de:
                    5e:00:8b:f6:d7:ac:5c:05:24:c9:f4:1a:93:5e:8a:
                    bc:07:b4:1f:32:94:22:3c:42:aa:97:00:7f:9b:87:
                    e2:70:51:88:1a:bb:b5:31:4a:ab:a5:71:87:82:36:
                    e0:29:bd:c6:34:fc:85:ca:27:24:c4:76:16:17:e9:
                    71:1a:51:80:dd:fb:4d:c5:6e:ff:bf:64:e2:33:42:
                    88:81:3e:c2:7f:20:a3:45:b3:56:33:28:db:68:96:
                    6a:3b:b2:89:66:50:89:a8:18:38:88:4f:e9:f7:50:
                    7d:4d:f7:12:03:82:1e:c1:93:bf:a5:83:13:e1:a2:
                    19:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:41:DE:44:62:76:B5:81:7B:6E:1A:D9:C5:19:C3:54:0C:CC:72:75
            X509v3 Authority Key Identifier:
                keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:44:2c:b0:ea:4c:75:bb:4d:bb:ed:cb:f8:7b:4f:be:1c:43:
         cb:2c:1a:cd:7b:36:7c:06:51:89:7f:a7:24:ed:62:de:02:b4:
         b9:02:17:80:4b:0a:72:f8:69:a3:5b:95:20:32:e9:81:b5:4d:
         4c:21:10:0a:fd:49:90:8d:19:1e:04:e6:b0:c1:b1:c2:8e:89:
         13:63:a0:70:f4:63:cf:3f:ec:21:d9:ed:76:47:70:ff:d6:21:
         ce:2c:e4:da:0c:e8:3e:18:0d:a4:67:63:6b:0b:b2:c7:ee:d8:
         81:f7:3a:b0:5b:0b:15:cd:87:8f:34:21:88:9f:ef:65:1a:3d:
         b3:03:48:1d:f2:43:9f:38:22:cf:bd:cf:42:f1:3a:c1:cb:2c:
         4d:e7:52:08:9a:89:80:28:c7:f5:74:b2:73:92:28:b7:9e:4c:
         9c:21:e6:5c:fc:54:3b:62:60:ad:78:50:86:7d:c0:d9:ae:ab:
         42:e6:7e:ee:7c:f6:49:b6:b4:4f:e4:80:f8:c4:ed:c8:46:80:
         2c:f8:7c:55:d8:db:49:92:74:75:2d:42:36:a5:a5:b1:b5:cc:
         e0:db:16:d9:54:30:65:e6:39:44:4a:19:46:e1:c9:18:04:d3:
         6c:94:9c:ab:68:85:34:c1:d9:88:2f:27:fb:24:aa:db:d1:2b:
         1f:1b:88:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:01:15 2025 by rpki-client