Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
File:                     A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft (raw, json)
Hash identifier:          PGu1ZJvjjoTVZuNMOK37iVnaRXhmrPUQJ+99axo0YDU=
Subject key identifier:   A9:15:6C:39:53:18:0B:86:51:5B:42:BF:7C:B5:FA:CF:7E:9D:CC:C0
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Certificate issuer:       /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial:       0197CA955D90C107BB3012563809083AC3D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
Manifest number:          1008
Signing time:             Wed 02 Jul 2025 10:01:15 +0000
Manifest this update:     Wed 02 Jul 2025 10:01:15 +0000
Manifest next update:     Thu 03 Jul 2025 10:01:15 +0000
Files and hashes:         1: 8ea9JzqwyGDT2dMFgAmUz7EOwao.roa (hash: VSNDXOm1+cAC798c36135Xw4x7+9RwirArr3iwfbiGQ=)
                          2: A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl (hash: FJb2HB4k+FOvqbZNitaDZVTP+/0xqfzAqXJQysx9Ep4=)
                          3: CGoYKUbztdIKKtCC46FwnLxxAJQ.roa (hash: x68KjIodNUgVtCpjw6Q/mHOmDSpKRwUfcYK1IisVAiw=)
                          4: TtMpw78SmRxgZIGYNEHEXtMRk7M.roa (hash: A34HD6vBs6SuS2D6qkJmN0sK8pKEio3YxA+zTTW9xgA=)
                          5: lIr5yIALJv3-BOg4uAYoEY_kNlo.roa (hash: f+GijD6e1+UQuvYwAF3v/POqX5KPaUvIB4vfF6bFgTQ=)
                          6: wp6rgT_ySJ7oIdAAI_SCvm21yFU.roa (hash: z87ZPo/PyE4etTlqKK3OFQbBD0NBmeieu4d4u91gewk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 10:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ca:95:5d:90:c1:07:bb:30:12:56:38:09:08:3a:c3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
        Validity
            Not Before: Jul  2 10:01:15 2025 GMT
            Not After : Jul  3 10:01:15 2025 GMT
        Subject: CN=a9156c3953180b86515b42bf7cb5facf7e9dccc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c1:68:87:d0:06:b2:df:c9:98:d5:c3:f6:9d:
                    a0:84:4b:8b:93:f0:1a:38:8c:e3:43:97:c1:7d:36:
                    d6:d9:dd:8d:20:3f:2f:e0:6b:85:2e:c3:a9:9e:62:
                    f0:95:50:bb:cf:1a:be:70:8e:04:8d:51:15:f2:2c:
                    01:75:f6:5f:f9:6e:45:a8:5f:fe:01:a3:bc:3a:92:
                    cc:4a:03:4c:f1:60:27:70:e8:ee:dc:c9:17:57:cf:
                    1c:11:c0:fe:9b:cc:4d:03:04:58:13:f7:ce:73:6b:
                    16:c6:4b:8a:fb:df:34:89:5e:b2:fd:04:db:7d:22:
                    b0:0a:8c:d3:7d:0b:71:30:cf:b5:9e:95:71:af:6b:
                    be:c1:70:0f:54:ab:34:d7:1f:46:3f:d2:c3:c8:71:
                    2b:f8:8f:9c:96:7c:6d:1f:e5:81:f5:94:45:32:71:
                    87:f1:d1:24:af:5a:b9:a8:e3:54:f0:65:cb:d9:ad:
                    71:62:59:ac:67:02:ca:4e:c5:17:5e:65:8b:15:c5:
                    04:67:e8:75:c0:80:aa:36:25:b5:60:5d:47:c3:29:
                    cf:e3:a2:6e:24:c7:7a:60:3b:8d:65:c8:99:9d:be:
                    34:18:9b:cf:15:bb:0f:0b:2e:f9:ea:4d:da:3f:55:
                    b5:43:f2:54:9d:f5:ea:b7:c6:81:e3:c8:79:ed:09:
                    c8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:15:6C:39:53:18:0B:86:51:5B:42:BF:7C:B5:FA:CF:7E:9D:CC:C0
            X509v3 Authority Key Identifier:
                keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:40:65:d0:8a:61:1b:b5:19:82:4a:27:0b:1f:25:b8:3e:e2:
         61:eb:93:ad:ce:52:42:8f:02:81:42:6b:92:50:a9:db:96:63:
         1a:e5:f7:1b:6d:d2:dc:a9:d5:a2:c2:78:ed:6c:b5:17:5d:c1:
         d2:bf:9d:bb:4a:c5:4a:dc:37:bb:d2:33:75:ea:75:03:ec:df:
         c5:eb:29:65:f6:b4:20:c6:98:bc:07:91:88:0e:f5:c9:a5:4d:
         f9:9a:e2:d1:52:58:b5:6f:2c:4b:fd:15:6e:41:2f:92:77:5a:
         16:c9:66:a6:28:04:99:1d:17:e5:a5:a1:67:1a:75:8d:5c:39:
         3e:b3:a4:92:34:c1:15:c9:3a:5d:b0:57:b6:5e:b1:6f:ca:e3:
         62:38:38:cd:ea:c3:55:85:9e:70:a1:c2:8f:bf:f1:12:96:db:
         e3:cf:0b:cd:7d:7d:b9:86:12:cd:40:f9:3a:d1:90:35:d2:c9:
         49:47:f1:74:6d:09:52:c1:60:1b:06:91:b9:65:d5:2e:85:60:
         4d:8a:09:a5:21:4d:bb:77:ff:6a:fc:d0:a0:76:7f:e8:19:ab:
         b7:9a:35:52:d7:8f:ca:a5:b1:1f:88:c1:8f:c7:e0:17:72:fd:
         69:cd:3c:af:9d:9f:cf:b8:55:93:8e:4e:f2:51:d4:4c:c8:56:
         56:c5:7d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:05:17 2025 by rpki-client