Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
File:                     d8LYpgGX_HveZPw_rRDrLaT-h3k.mft (raw, json)
Hash identifier:          aaOyLfu/Y19OuO7R1B01Bpy4U72jnZLrhRE8WNXBXg4=
Subject key identifier:   13:41:F6:19:28:3A:4B:77:A9:B1:30:EE:83:2D:2F:E6:A7:BF:5E:A1
Authority key identifier: 77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
Certificate issuer:       /CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Certificate serial:       0197B9A1D148F4918E21CB012F07C11F762F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
Manifest number:          060C
Signing time:             Sun 29 Jun 2025 03:01:19 +0000
Manifest this update:     Sun 29 Jun 2025 03:01:19 +0000
Manifest next update:     Mon 30 Jun 2025 03:01:19 +0000
Files and hashes:         1: Fio9S4kkM_6MY_PyvY4nnlbZSX0.roa (hash: MLkm/zb7dfsD7k0W1D+pAVDUongRrbvCkAFDtBq/FSI=)
                          2: d8LYpgGX_HveZPw_rRDrLaT-h3k.crl (hash: kK3LcvHeHStSUp4O11WfpcSgclbIkDg4x45b1D5zskQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:a1:d1:48:f4:91:8e:21:cb:01:2f:07:c1:1f:76:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
        Validity
            Not Before: Jun 29 03:01:19 2025 GMT
            Not After : Jun 30 03:01:19 2025 GMT
        Subject: CN=1341f619283a4b77a9b130ee832d2fe6a7bf5ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:db:5f:47:24:34:85:1b:04:00:63:e2:97:3b:
                    d4:68:b2:90:a3:13:49:14:5e:95:aa:f5:ef:e2:56:
                    6c:26:5c:79:d3:af:1a:f2:3d:4d:09:ed:e0:d0:50:
                    15:e9:1d:82:53:18:9c:42:e8:98:f1:d3:86:67:83:
                    19:b3:18:93:73:67:c3:0b:b6:1c:b0:b3:33:bb:5a:
                    4d:b5:20:6b:b7:17:7c:20:56:bd:c2:69:29:dd:b1:
                    69:6c:d4:a6:3f:f3:d7:12:f2:dd:63:03:53:bb:b7:
                    56:a7:43:75:70:6c:57:34:d7:dd:ad:bd:39:0e:75:
                    67:ca:d5:d2:62:53:2e:c3:6f:c4:68:ae:2b:68:1a:
                    ba:7a:38:12:f4:10:6f:64:50:92:11:ef:3b:2e:c3:
                    ee:7a:b7:f0:6b:32:b1:5f:3d:d2:05:7b:e0:16:66:
                    05:f4:5d:1f:81:3e:11:3e:96:6f:04:fe:6c:67:c6:
                    92:ad:7d:ac:77:b1:b8:89:18:bc:bf:86:4f:3a:88:
                    48:34:03:5c:96:69:49:b2:e6:89:de:b5:5d:63:b5:
                    65:cf:44:95:ce:6c:5b:e1:db:49:0f:c7:40:9f:f8:
                    17:2f:c8:90:b5:a4:ca:68:29:6d:4c:36:c2:5c:62:
                    21:f8:c0:1a:b3:25:83:0b:fc:d4:07:ef:13:b9:55:
                    8f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:41:F6:19:28:3A:4B:77:A9:B1:30:EE:83:2D:2F:E6:A7:BF:5E:A1
            X509v3 Authority Key Identifier:
                keyid:77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:01:4d:10:d8:80:86:d9:a2:dd:ae:56:3a:6f:e3:05:1a:b8:
         75:12:cb:5f:90:07:07:18:9f:2f:47:37:f3:8b:31:6b:c6:6a:
         99:26:74:01:7c:38:de:13:05:90:d0:60:de:fa:db:37:38:1e:
         c3:f6:95:9f:f5:c1:f8:49:b2:ba:3c:46:c2:b5:9b:1c:79:53:
         29:8c:ea:b1:ef:7b:32:35:c5:72:fe:72:d4:0c:eb:c8:bf:08:
         a4:02:3c:eb:5d:1d:36:16:b6:65:9a:69:77:1e:8d:95:7d:82:
         fa:7c:67:30:b4:b0:62:4f:53:3c:d4:0c:41:cf:cb:95:c2:f7:
         74:a7:76:3d:55:37:8d:db:36:b2:dd:c5:fc:d1:5c:b2:68:55:
         51:b0:b9:50:21:c6:b6:88:09:6a:5b:bd:da:23:b0:4f:8e:76:
         c7:99:9a:4f:ef:6e:3e:0a:9c:66:0a:c3:a4:a5:95:58:f4:41:
         7e:f5:b0:c4:71:fd:67:b9:34:cf:8b:f6:24:54:ef:94:97:b9:
         d3:4c:68:3b:78:17:74:2d:fc:a9:96:3d:2a:03:0e:3a:6a:2b:
         77:00:09:05:52:38:d6:31:1b:f9:4e:da:db:30:92:c0:44:14:
         54:b8:4e:6e:1c:80:13:86:6b:a8:3a:61:8b:86:60:ca:21:ea:
         a1:69:0e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:00:45 2025 by rpki-client