Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
File:                     b2oouFuReYIHK59PQG1-sJmROjE.mft (raw, json)
Hash identifier:          A5HQDk+I4lbBXIfaIcYh6aq2GmqOVzocw6SY9Ozi3F8=
Subject key identifier:   66:4D:80:D6:79:82:A8:48:8E:70:6F:7E:65:63:61:35:E1:FB:53:D6
Authority key identifier: 6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31
Certificate issuer:       /CN=6f6a28b85b917982072b9f4f406d7eb099913a31
Certificate serial:       0197B70EA8F00B7546B4E1990DE062558A22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
Manifest number:          05E6
Signing time:             Sat 28 Jun 2025 15:01:20 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:20 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:20 +0000
Files and hashes:         1: ZwdlOhTaB9mfI0Lixy338yhL9bw.roa (hash: JhlKbHsGhRiWUq0ABUz1j/K5IY2i4ZC4XvyEDFpDUMk=)
                          2: b2oouFuReYIHK59PQG1-sJmROjE.crl (hash: fpoDbQphq6zQnkCwdVOjenfyZy5jP83Ss83u4XkGung=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:a8:f0:0b:75:46:b4:e1:99:0d:e0:62:55:8a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f6a28b85b917982072b9f4f406d7eb099913a31
        Validity
            Not Before: Jun 28 15:01:20 2025 GMT
            Not After : Jun 29 15:01:20 2025 GMT
        Subject: CN=664d80d67982a8488e706f7e65636135e1fb53d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:c2:6d:de:95:5a:9f:9d:06:55:e7:95:82:
                    ff:e9:d1:ae:ae:a0:bc:24:2b:9a:31:bc:82:9a:d6:
                    9f:ae:0c:21:8b:13:8c:9a:b4:a2:45:06:7c:a7:b5:
                    1e:fb:a5:7c:4f:0e:d5:c6:90:df:af:df:e2:84:3d:
                    25:25:87:b5:bb:74:5f:cf:50:c2:09:30:10:ec:5b:
                    fc:c6:ef:a2:b1:f2:3b:c5:28:04:f8:63:68:8b:fe:
                    26:66:6a:85:d7:7d:74:5f:96:e1:18:01:db:47:19:
                    b4:7a:c2:c8:29:02:28:ed:04:e0:72:3a:85:57:ae:
                    9c:a8:1e:9e:ad:3d:d2:f1:eb:cc:e8:0f:c2:88:33:
                    33:74:95:da:7b:75:2d:2b:68:01:dd:d6:6c:d1:50:
                    f6:e2:ce:07:bd:29:73:04:a7:42:df:90:46:d4:74:
                    5c:03:97:24:c4:49:de:06:e3:1e:43:46:75:17:72:
                    71:53:1b:2a:c4:57:18:6c:6e:f8:52:65:0b:26:db:
                    a9:69:59:ae:0a:56:7c:58:57:60:26:c9:e9:ba:86:
                    7f:7e:1c:e4:6c:4e:64:7f:e3:76:7b:98:09:bc:34:
                    0d:31:20:df:9e:ee:d8:c9:b3:61:2c:78:46:6e:2f:
                    f8:86:c0:01:f5:ea:d6:81:8e:b9:fe:cf:62:20:06:
                    c5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4D:80:D6:79:82:A8:48:8E:70:6F:7E:65:63:61:35:E1:FB:53:D6
            X509v3 Authority Key Identifier:
                keyid:6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:4d:a5:fd:57:74:f9:dd:ac:f7:e5:b4:bf:1e:d9:40:50:9a:
         c4:51:37:bf:21:fa:c2:e3:61:3b:a2:f8:a8:2c:60:1f:4e:61:
         cd:25:fc:48:19:22:37:84:43:65:f6:91:dd:13:87:3f:8a:36:
         55:f9:47:19:7c:b4:89:f7:c7:d9:1c:ea:61:9f:8b:34:bf:69:
         c9:b8:05:29:6e:a5:37:14:ee:89:8d:27:d6:46:97:42:aa:4d:
         bd:eb:37:95:90:cf:db:2d:dc:cd:d3:95:d9:a4:3b:a8:20:4e:
         4c:3d:3e:b5:02:71:b6:d6:24:5b:f8:11:0a:6c:51:ec:4d:f1:
         77:a3:25:b0:18:55:d2:a6:36:e0:f5:05:6e:81:e1:66:1a:91:
         bc:86:28:68:24:5b:a6:62:51:8e:4f:08:e3:c8:25:d0:67:35:
         34:ff:d2:9d:6d:40:20:61:92:bf:15:85:04:14:dd:28:0c:bb:
         9c:ba:55:bd:58:af:14:02:14:70:6e:3d:b4:16:5e:ca:50:e2:
         59:0b:5d:5c:e1:a2:bb:52:80:97:7a:ba:63:69:2b:f3:2e:08:
         59:91:9c:8f:51:16:d8:c1:fe:84:cb:61:cc:f7:9b:12:86:d7:
         77:e5:0e:66:e1:92:88:34:65:d6:e3:10:5f:03:68:8c:04:89:
         16:64:77:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:31:44 2025 by rpki-client