Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
File:                     tWGrEAAXphJTFvzGEzhKr73mAYk.mft (raw, json)
Hash identifier:          V/SFDxGJmrR1PZ/ZtvnNcEM9e4PSSsjbUlEcZSJsPWE=
Subject key identifier:   35:CE:D1:22:68:C0:95:B2:58:E1:11:42:1C:F6:56:5C:22:3D:9D:34
Authority key identifier: B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
Certificate issuer:       /CN=b561ab100017a6125316fcc613384aafbde60189
Certificate serial:       0197C380B160ED362280A7680EE046080BC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
Manifest number:          0637
Signing time:             Tue 01 Jul 2025 01:01:20 +0000
Manifest this update:     Tue 01 Jul 2025 01:01:20 +0000
Manifest next update:     Wed 02 Jul 2025 01:01:20 +0000
Files and hashes:         1: 54hiEVCu42nmTIhQ3bS5shMqgPg.roa (hash: Rk0IIWWSef2+X2JeCku/njRK3YOnsndfGq7YFCHBZaw=)
                          2: tWGrEAAXphJTFvzGEzhKr73mAYk.crl (hash: Vi/xIqYJcpR1IZfqG79coq1dg1E1Ln+he5v95Thzmkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c3:80:b1:60:ed:36:22:80:a7:68:0e:e0:46:08:0b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b561ab100017a6125316fcc613384aafbde60189
        Validity
            Not Before: Jul  1 01:01:20 2025 GMT
            Not After : Jul  2 01:01:20 2025 GMT
        Subject: CN=35ced12268c095b258e111421cf6565c223d9d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:14:2a:7d:ea:2e:c1:e0:ca:1b:bd:13:59:00:
                    05:7f:c8:7d:29:6d:2e:ee:41:e0:35:42:cf:5f:28:
                    19:3e:10:97:cc:fa:1d:ee:2d:14:64:c3:34:47:35:
                    dd:fb:dc:bf:1d:71:61:23:73:66:f6:12:5d:d9:ec:
                    24:9c:85:97:38:d9:61:e4:35:8f:36:53:04:75:25:
                    f7:d8:e3:aa:e8:d2:4e:8d:7d:85:31:2e:be:2d:91:
                    18:5a:b5:e9:76:c3:94:14:ec:5c:53:1c:a1:9b:ab:
                    19:21:87:d2:13:fd:69:92:e1:8a:eb:96:ed:8f:e0:
                    c6:ed:b2:59:f0:c0:90:c2:a5:61:88:64:59:de:41:
                    a4:c1:3b:4a:b9:d0:8a:89:75:8c:27:9e:73:2d:a9:
                    45:a0:b2:e4:83:7e:11:38:f3:d0:62:f3:ba:b7:d0:
                    a6:20:83:26:e7:34:e3:ac:cc:ff:5c:94:d1:db:2e:
                    2f:5a:a3:8a:a3:23:c4:6c:85:82:dd:e7:3f:7e:50:
                    5a:68:d3:66:bc:36:f1:9e:b0:28:53:90:7c:02:11:
                    fb:b6:dd:d6:03:80:82:c4:43:90:3b:0b:39:0a:9a:
                    0b:e4:90:13:a5:88:03:f5:b9:ae:54:21:d6:77:01:
                    7e:af:b5:64:67:c0:c6:db:76:54:82:7a:5b:a6:a4:
                    2e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CE:D1:22:68:C0:95:B2:58:E1:11:42:1C:F6:56:5C:22:3D:9D:34
            X509v3 Authority Key Identifier:
                keyid:B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:17:77:90:17:43:f3:6a:44:b1:d9:ef:aa:89:60:29:90:9f:
         d9:9a:11:85:d1:41:90:bd:63:2c:c3:2b:b4:f8:88:62:d2:ed:
         c3:30:f4:98:f1:1c:5e:8b:c0:9d:7e:b6:b1:41:4b:d4:52:68:
         cb:8e:12:84:3e:9c:6d:d7:e6:e7:fe:30:1b:23:66:23:20:ff:
         88:27:32:85:6a:df:64:aa:7c:d2:09:7b:c6:76:a2:4d:12:2c:
         0e:ae:3d:0f:26:d1:f8:0b:54:21:0d:2a:28:28:1a:22:54:a3:
         6d:04:e0:dc:40:88:2b:7a:ab:ce:6e:8b:ee:4b:d5:65:f5:22:
         07:80:94:2f:13:4a:ce:50:3b:88:be:d9:be:29:81:f9:9d:63:
         7e:24:72:4e:08:e5:f6:36:fe:a4:7c:04:f6:50:a7:4e:d9:01:
         cd:a0:4f:ad:5e:bb:cb:61:35:3c:ca:fd:fd:6d:ec:27:39:4c:
         cf:17:ff:e5:bd:d3:5a:42:a3:f0:b1:e4:89:74:e3:f5:87:41:
         62:d0:88:35:56:af:cd:28:79:bd:bf:81:8a:73:06:4d:84:60:
         cd:d4:ce:90:e9:be:d0:a9:e9:e7:b9:bb:07:05:64:74:af:ad:
         9f:3d:b9:94:6a:02:7f:71:e1:62:c9:96:80:e5:80:5f:09:18:
         be:eb:8c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:09:52 2025 by rpki-client