Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File:                     _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier:          yC4CHcjCWrPWJWP9wUJhYxEHbd4r5I+bMvzwllo/jgs=
Subject key identifier:   32:93:94:1C:A7:A0:7B:E3:6D:E1:07:B2:67:F9:8D:03:C5:4C:2A:21
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer:       /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial:       0197B70F16106A72BC31FE149EF0A5823EA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number:          0611
Signing time:             Sat 28 Jun 2025 15:01:48 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:48 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:48 +0000
Files and hashes:         1: 23TVA-2OL8ERCOX_dzgjoyDr7ic.roa (hash: HMZHd+55+IMt+Dclhou8M1RYJTwGL8XVXHQpPA4hFCU=)
                          2: 4-TbcXFa8SESUNpbTLtHqKnqP4k.roa (hash: rfh4ZMQFADgVlOUe/tULyDtfhvBafCEIjiEbbsuqihs=)
                          3: NndyVqvy3vcxCnZsIK2_Uyxv0lk.roa (hash: cAwKtSP7N0kxacGJxtWaLz9RZYIS8hQUwg7TB0bpnnY=)
                          4: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: 8ePdERBE+No7Q2z0gA5V0M1pNFXThk/N4o3IDStJNTI=)
                          5: g79vhXHjpRFh3Y-GxHmCGsiBZGA.roa (hash: RJ1u6MS+HvMdlY5nwrlEy806vD9xNxkwf89ZeEiyu90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:16:10:6a:72:bc:31:fe:14:9e:f0:a5:82:3e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
        Validity
            Not Before: Jun 28 15:01:48 2025 GMT
            Not After : Jun 29 15:01:48 2025 GMT
        Subject: CN=3293941ca7a07be36de107b267f98d03c54c2a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f5:cd:33:e1:be:95:85:b4:17:d0:36:10:2e:
                    3b:ca:5c:2a:39:bd:2c:1b:42:87:f2:3a:4e:ab:ac:
                    fb:79:6a:6a:5d:0f:e8:cf:c2:bb:fb:07:1b:bc:67:
                    ed:45:34:3b:3c:84:ac:ba:55:a6:78:3f:3e:a5:a8:
                    9e:9c:bf:d5:c1:ee:90:1f:b1:95:f6:fe:b5:ef:8e:
                    73:46:cb:f6:ad:6e:3d:79:13:9d:16:e0:47:c6:0f:
                    d4:44:84:17:62:bc:83:8e:7a:01:ef:23:ab:7b:10:
                    3b:22:13:c8:5c:2e:81:b6:a2:80:61:e8:88:1d:85:
                    a7:33:9f:6f:97:2b:b3:ea:40:05:ec:f2:0b:ef:05:
                    d6:b9:66:29:34:29:7d:0a:34:4d:6d:35:81:db:8d:
                    16:63:d5:ee:b3:36:96:0c:6a:68:d2:aa:b7:97:5b:
                    09:ec:7d:fe:86:c3:ed:c1:46:12:fb:a3:40:fa:0d:
                    34:8b:6c:ce:8c:a9:66:64:4b:35:24:67:4f:46:d0:
                    12:44:51:11:d7:6c:f1:b8:be:b2:26:d9:f2:d5:ff:
                    aa:c9:34:4d:e8:2e:42:dd:14:fc:f8:1b:93:2c:90:
                    12:be:9a:6a:15:d9:fc:71:93:55:7a:96:d0:04:ca:
                    fb:a0:ab:2d:d8:12:e5:86:25:10:4e:59:43:76:65:
                    8b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:93:94:1C:A7:A0:7B:E3:6D:E1:07:B2:67:F9:8D:03:C5:4C:2A:21
            X509v3 Authority Key Identifier:
                keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:22:09:75:e6:fd:45:56:fb:ed:50:e7:9f:a5:fb:1f:21:84:
         b1:a1:88:ad:a5:db:e7:8b:d5:c7:c5:d1:bd:19:a6:cb:4b:6d:
         1f:fe:a1:3a:ab:e0:09:82:84:d7:2e:80:6d:d6:1e:14:72:96:
         b8:91:4c:a8:32:5e:45:04:27:b1:06:67:da:0d:6d:35:7f:18:
         85:81:87:ec:12:4b:30:b5:ca:a6:4b:93:c3:37:39:7c:a3:a1:
         25:f2:a4:0c:57:d8:d2:6e:00:95:07:0f:8a:32:59:75:57:24:
         c6:f4:20:74:4e:14:e7:6f:c6:68:bb:44:11:ba:33:03:bf:ec:
         98:48:7b:11:c1:d1:3a:f4:7d:c4:8e:66:70:f6:07:75:6e:31:
         a3:75:4c:39:7b:42:5f:6a:36:7b:1d:e3:66:6c:57:ef:b9:cb:
         59:d0:44:cc:3a:8b:6a:36:f3:51:8d:79:1a:b7:58:6a:54:bb:
         e7:ef:6f:16:f2:a5:b2:e7:e6:20:93:1c:46:4c:07:80:f7:be:
         d2:38:65:31:0e:0e:4f:71:0e:02:24:1f:fe:d7:65:66:7b:e2:
         a3:61:64:26:54:17:d6:f6:1f:2b:51:22:3c:63:44:dc:e5:61:
         68:4d:39:d0:f0:a4:2e:f9:3a:fa:b2:31:2a:d2:ed:b2:6e:ec:
         28:94:3e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:06 2025 by rpki-client