Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File:                     m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier:          CIgwum5w8Ti0SpaomUD7UEHqqgSGJwEhuVX5o3I0Aso=
Subject key identifier:   1C:FA:17:F7:3C:83:FA:BC:99:65:E1:A6:FB:00:C2:42:AF:28:5C:3C
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer:       /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial:       0197B9A1B0B2D2BED4F70F07F83EA4233D2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number:          0E06
Signing time:             Sun 29 Jun 2025 03:01:10 +0000
Manifest this update:     Sun 29 Jun 2025 03:01:10 +0000
Manifest next update:     Mon 30 Jun 2025 03:01:10 +0000
Files and hashes:         1: 5GniNEhMinY30K7EXaIu9sAOhOQ.roa (hash: QfzSo55A79YZ0l6NKBygH+Tw/Dr7wh1jiZA/eg3De/Y=)
                          2: XQF1gy_GwOpRDFXNG6GoJ-bdHmU.roa (hash: 2eDBAsY9Cf7EZVCxOyjj6e6wsGijuJlQgQ3d0xmYCt4=)
                          3: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: Grakk0N6oJjbYueQTjT6rqp8FbIFYpC0sTteRigQ7dc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 03:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:a1:b0:b2:d2:be:d4:f7:0f:07:f8:3e:a4:23:3d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
        Validity
            Not Before: Jun 29 03:01:10 2025 GMT
            Not After : Jun 30 03:01:10 2025 GMT
        Subject: CN=1cfa17f73c83fabc9965e1a6fb00c242af285c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:37:d4:9e:ce:4f:1e:3b:e0:da:bf:b6:74:50:
                    15:a2:15:0e:f9:c1:27:e3:6c:26:b5:03:77:c8:9c:
                    4f:bd:61:aa:c1:c2:a7:f4:3c:f1:c9:78:81:8e:eb:
                    e1:d2:13:d7:6a:7f:5d:f8:d0:f7:54:52:e9:5c:5e:
                    e4:ce:68:45:6a:55:ed:84:50:89:b4:b5:9a:36:d4:
                    90:90:b2:c3:68:04:07:46:7b:ca:bc:07:35:6b:c9:
                    c8:ef:5c:8a:3b:4d:5f:79:f6:8f:ca:c4:08:a0:81:
                    12:b6:89:ae:6f:5d:3f:a3:3b:fa:62:c6:f2:c6:fb:
                    46:11:8a:f4:27:92:bf:56:e4:db:4a:df:37:5b:c4:
                    12:02:38:d6:99:88:a6:76:a1:11:92:68:3e:20:5b:
                    04:54:6e:b2:07:93:43:d3:53:60:f4:4e:0d:e2:3f:
                    ed:c5:47:9a:55:07:5f:cf:ac:cc:c1:32:a3:7b:ff:
                    56:b4:d3:9b:13:c6:81:1d:97:06:f1:33:c2:62:2f:
                    48:b1:78:39:99:da:e6:7e:9d:99:54:2f:82:b1:a4:
                    0d:2c:37:72:96:b7:66:94:8f:09:8a:84:d7:d6:22:
                    b6:1d:53:f7:d7:75:b8:8a:ce:10:b7:79:80:59:9d:
                    7e:28:89:e7:1b:ed:f5:04:a1:c2:1a:8d:c4:66:e9:
                    8c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FA:17:F7:3C:83:FA:BC:99:65:E1:A6:FB:00:C2:42:AF:28:5C:3C
            X509v3 Authority Key Identifier:
                keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:94:00:20:f9:ad:e7:f0:a4:21:80:c5:78:3f:13:0b:db:94:
         82:89:f1:3f:68:30:af:1f:ef:8d:5e:07:33:aa:30:9b:1c:65:
         66:5f:9b:45:40:c1:ea:9d:19:a8:76:94:11:f1:dc:e5:06:6b:
         59:09:9e:95:37:59:c9:8c:e6:41:19:18:08:ad:bc:e6:fc:f4:
         d2:6a:5d:fa:86:ec:85:0b:48:8c:7e:c4:a8:e1:ee:5a:61:6c:
         e1:06:61:5a:e0:f6:51:d1:1b:d6:2c:38:73:c8:52:8e:4f:37:
         32:2f:36:0a:42:28:e2:ef:bf:3c:c5:9f:4a:70:52:5a:cc:bd:
         fa:98:9a:db:56:5f:d2:ea:8f:03:73:19:48:ad:85:09:31:95:
         be:5f:52:7c:b1:54:96:c1:80:f3:b3:8a:c6:f5:a2:6f:93:40:
         48:e4:d5:21:d0:77:c8:e2:79:2f:fc:68:81:8c:09:17:8d:83:
         56:23:6d:7b:d4:27:e3:c5:b8:00:25:60:4c:5e:68:89:6c:b3:
         49:8c:37:a2:98:27:de:2b:8b:1a:e6:c6:b6:4e:7a:41:57:e2:
         63:c3:de:4f:97:70:cc:1b:43:28:1a:76:4a:23:21:d4:49:14:
         01:de:00:2c:ed:09:35:a1:fd:54:4c:a2:01:a0:7d:bc:9e:7f:
         a9:ce:5e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:56:12 2025 by rpki-client