Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
File:                     aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft (raw, json)
Hash identifier:          3Zgf0G4kB3qI6nci1kZedgMoK56uKEgr4btYAsPEtMg=
Subject key identifier:   58:CF:A7:4F:B9:20:61:05:95:92:63:CF:5C:2F:53:E4:3C:5D:A9:89
Authority key identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
Certificate issuer:       /CN=69737c6e0602be3804e277580bab7e21e6e33474
Certificate serial:       0197B6A19F3AF7814DBAAAA6D0147EA0DFB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
Manifest number:          0616
Signing time:             Sat 28 Jun 2025 13:02:14 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:14 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:14 +0000
Files and hashes:         1: 86oammqkU0TE8AzqwBVv1FmzBYc.roa (hash: H3QOeQw7Wu4vQlfZwSufbLTx40TDb5RrgWASWL9m9b8=)
                          2: VRgzvsIGyVGSMvCfEEXMwDue8MA.roa (hash: PsTu4TZ4HzWVeuIcWadKHbXlWOA/8zFocM48RCXa9/k=)
                          3: aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl (hash: GPhj1Kqxc1KXozA7d9tzCaqCsFuC4auzIdLAc2UeUfo=)
                          4: jjkZ2yb-jO_dwKLdx8H317IXScQ.roa (hash: HCz04W3HLqaOC0rvZdH98CWQlK6DEnW7DscRc2ODf9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:9f:3a:f7:81:4d:ba:aa:a6:d0:14:7e:a0:df:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69737c6e0602be3804e277580bab7e21e6e33474
        Validity
            Not Before: Jun 28 13:02:14 2025 GMT
            Not After : Jun 29 13:02:14 2025 GMT
        Subject: CN=58cfa74fb9206105959263cf5c2f53e43c5da989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:12:80:95:48:f1:c0:bc:09:b3:d8:6d:3f:
                    ed:10:79:ee:2a:37:1d:cc:90:36:53:ce:c4:f7:60:
                    75:6c:27:4c:35:fc:00:5a:32:e6:89:84:06:b2:dd:
                    ef:f1:b9:af:c7:af:12:66:79:1d:99:e3:41:b9:cd:
                    48:d6:a8:0e:5d:e8:26:19:b7:76:e9:9e:53:8a:23:
                    6e:37:1b:7c:03:c9:59:fe:0a:70:02:0f:ec:c8:23:
                    c1:cc:9e:2b:82:70:06:9e:09:bb:7b:51:81:b8:04:
                    89:e9:f5:64:29:5a:8a:5a:75:d8:17:fc:5f:7c:7e:
                    37:13:48:33:db:95:28:43:61:02:f1:ba:07:8b:ee:
                    c2:8c:c4:45:20:1f:bb:8a:33:82:cd:bf:54:78:bb:
                    f8:e9:7d:cb:5d:73:17:ad:70:f5:5e:3d:66:f4:4d:
                    5d:c4:b2:d4:84:46:9e:1b:ea:a9:ee:73:e4:ad:e5:
                    10:70:e3:f2:e7:a4:5d:c4:44:a0:fc:bf:d2:a2:50:
                    6f:45:0c:44:18:08:c7:00:50:1b:7e:ab:85:45:cf:
                    22:9d:33:52:9c:99:fc:55:15:c6:fb:d0:59:7a:d4:
                    fa:a2:bd:5e:ba:c1:af:f4:b5:82:0c:41:87:f8:b8:
                    e1:32:a1:ff:32:3a:8e:64:75:26:3b:8b:e9:68:9a:
                    45:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CF:A7:4F:B9:20:61:05:95:92:63:CF:5C:2F:53:E4:3C:5D:A9:89
            X509v3 Authority Key Identifier:
                keyid:69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:33:5d:8c:b4:1e:a8:62:f3:ae:0b:d2:b8:1b:9c:21:77:ad:
         ce:2c:2e:28:00:e5:71:91:f0:cd:e8:69:73:68:84:8d:b1:87:
         7f:c5:b5:7b:14:c3:50:c2:f3:35:e5:52:9c:e0:a4:d4:d2:86:
         b8:86:46:90:d1:8f:04:a0:2f:b7:79:60:6c:28:c3:ad:cf:2b:
         d8:0b:6c:b2:1a:14:a0:a4:32:1d:eb:1b:bd:16:d1:a0:8a:1b:
         aa:a2:36:a2:36:ac:8c:3a:6a:4a:2f:be:ec:02:fc:ad:8a:68:
         a3:f0:fb:11:94:7d:bc:eb:e2:c6:75:3d:f9:1d:c0:e6:94:b0:
         b7:d3:51:4f:d6:1b:1b:a9:cb:16:09:76:42:e2:1f:42:8e:7f:
         9b:17:8a:fb:2a:53:3c:05:47:92:4a:be:2a:6c:30:5a:f2:8c:
         a1:b5:e8:4f:bd:fe:bd:bd:fb:76:59:f2:cb:3f:45:a5:55:42:
         be:66:40:06:18:a0:b7:90:a1:1f:f6:95:fd:06:24:72:09:84:
         36:e7:e6:6c:06:2d:43:3e:38:c5:c8:6a:5d:9a:b3:5a:97:25:
         85:1b:58:56:26:76:76:dd:90:2f:3f:c0:83:49:59:5b:ba:d6:
         ea:c1:df:7d:8c:cd:86:47:51:99:a2:93:9f:59:94:60:29:84:
         bb:2e:58:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:07:27 2025 by rpki-client