Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/MlWeB9Y4jdKvdTVl6SU9aC-T694.mft
File:                     MlWeB9Y4jdKvdTVl6SU9aC-T694.mft (raw, json)
Hash identifier:          NBkY9quc4hiG+LpzV5DHIAXacqXuFANznNQadQoQkj4=
Subject key identifier:   D7:27:7A:A1:F5:3B:C0:B2:81:C0:41:61:4B:D7:A0:3A:1F:EC:BB:16
Authority key identifier: 32:55:9E:07:D6:38:8D:D2:AF:75:35:65:E9:25:3D:68:2F:93:EB:DE
Certificate issuer:       /CN=32559e07d6388dd2af753565e9253d682f93ebde
Certificate serial:       0197BA7E3EC26F6B62A3054DEC693A14A580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlWeB9Y4jdKvdTVl6SU9aC-T694.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/MlWeB9Y4jdKvdTVl6SU9aC-T694.mft
Manifest number:          0B0F
Signing time:             Sun 29 Jun 2025 07:02:05 +0000
Manifest this update:     Sun 29 Jun 2025 07:02:05 +0000
Manifest next update:     Mon 30 Jun 2025 07:02:05 +0000
Files and hashes:         1: MlWeB9Y4jdKvdTVl6SU9aC-T694.crl (hash: A83ZX32qD9VFnbafA33/1oVnPemE6BH1aTSiUiWPCq8=)
                          2: T69lzJMivaoqkIjYcLrgOdTOnrA.roa (hash: 0Ssr+TPBD7HcausVt5jkHNvBIqeqcRP2h1WDFhHFN7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/MlWeB9Y4jdKvdTVl6SU9aC-T694.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/MlWeB9Y4jdKvdTVl6SU9aC-T694.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MlWeB9Y4jdKvdTVl6SU9aC-T694.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:7e:3e:c2:6f:6b:62:a3:05:4d:ec:69:3a:14:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32559e07d6388dd2af753565e9253d682f93ebde
        Validity
            Not Before: Jun 29 07:02:05 2025 GMT
            Not After : Jun 30 07:02:05 2025 GMT
        Subject: CN=d7277aa1f53bc0b281c041614bd7a03a1fecbb16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:56:7e:c1:48:32:a4:2d:33:b6:9a:42:b2:69:
                    f7:a5:01:f9:44:6d:66:b8:a3:fb:c7:c3:b9:c2:6d:
                    9f:66:42:07:55:f4:a4:2c:38:a8:97:d8:3b:fd:4c:
                    91:bf:97:89:a8:61:f7:51:b5:b1:b6:39:f9:db:e3:
                    34:54:9d:f0:91:9a:e4:92:a7:7d:12:8a:d3:46:ba:
                    e7:4d:40:67:70:89:af:fd:1d:d3:26:74:7f:6b:ac:
                    eb:2e:a8:de:82:82:6d:c2:fe:ac:9c:9c:2e:59:85:
                    1a:81:58:bd:6d:f2:06:2b:8c:cf:1a:ad:46:0c:26:
                    e4:5d:32:a0:7c:9d:22:4f:90:cf:7f:03:45:dc:21:
                    7a:4e:6c:91:bf:13:f6:13:a5:ec:53:92:cc:60:b9:
                    14:4e:00:92:34:46:4f:14:fa:63:52:56:64:c5:b7:
                    27:87:bf:d1:83:9b:49:54:d3:de:46:58:37:7d:e9:
                    e3:05:f9:80:00:15:68:b8:ff:75:7d:38:af:9b:a8:
                    34:a0:73:46:d1:14:32:84:a5:0b:b9:45:d1:f3:25:
                    4b:1d:fd:21:db:4a:56:b7:3f:01:38:84:d3:91:79:
                    4c:33:42:3a:39:53:dd:42:e2:fa:e1:8c:56:25:1a:
                    7e:a1:4a:f1:f3:36:54:86:15:7c:15:29:7a:2a:53:
                    db:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:27:7A:A1:F5:3B:C0:B2:81:C0:41:61:4B:D7:A0:3A:1F:EC:BB:16
            X509v3 Authority Key Identifier:
                keyid:32:55:9E:07:D6:38:8D:D2:AF:75:35:65:E9:25:3D:68:2F:93:EB:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlWeB9Y4jdKvdTVl6SU9aC-T694.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/MlWeB9Y4jdKvdTVl6SU9aC-T694.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/MlWeB9Y4jdKvdTVl6SU9aC-T694.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:09:b4:77:6a:05:18:e5:82:ca:bf:c0:f3:f6:c7:40:c6:ea:
         03:7f:8d:a7:4c:9a:a7:56:20:47:f3:1a:ae:de:f1:4c:fc:f9:
         5c:c8:a4:d6:d3:68:86:b3:63:03:bf:0a:47:70:cb:7d:dc:fa:
         55:f8:b0:96:27:0f:28:85:64:33:78:bc:75:70:db:bc:32:d4:
         dc:df:ba:d3:57:8a:6b:ad:4b:8b:40:f4:a4:04:bb:c9:85:3c:
         b0:79:91:b7:45:43:92:67:53:6d:6c:60:04:f3:c3:f1:8a:d6:
         06:1a:7a:0a:ef:56:01:da:55:e3:35:7e:b4:e5:af:de:bd:d8:
         00:b0:a9:20:7b:29:f2:51:f6:55:bb:66:92:7f:99:b9:77:9f:
         11:a0:10:e5:07:92:72:40:49:d3:12:c5:33:b6:2a:43:9b:de:
         b7:ac:2a:11:d0:a2:53:0d:dc:0b:df:71:48:74:05:59:05:78:
         48:c6:88:e1:c9:3f:ba:28:20:83:62:e1:01:6e:0c:7d:11:7d:
         5e:cb:d5:eb:b4:ef:78:59:23:d7:db:07:02:5d:35:b9:59:26:
         b4:ea:dc:e9:aa:61:01:b4:36:88:1a:1a:00:e0:76:c4:55:4f:
         20:f8:04:fe:81:17:ab:94:2b:21:15:8e:f8:bb:23:e5:8a:73:
         4f:4a:de:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:29:40 2025 by rpki-client