Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
File:                     brk9vAG87DpLmI6PjVMwpaL8Smg.mft (raw, json)
Hash identifier:          ydwLNt/gg6mhQ6La77r6BK8dnxlsJ+F3FCM1/yTwFa8=
Subject key identifier:   8D:6C:9C:A9:64:37:E3:15:BF:EB:96:4F:01:F3:20:60:F3:30:37:1D
Authority key identifier: 6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
Certificate issuer:       /CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Certificate serial:       0197BB901233A105BC146F90078978D4A49E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
Manifest number:          0EEB
Signing time:             Sun 29 Jun 2025 12:01:10 +0000
Manifest this update:     Sun 29 Jun 2025 12:01:10 +0000
Manifest next update:     Mon 30 Jun 2025 12:01:10 +0000
Files and hashes:         1: 5DPWCgybWZa7aXBOD7aRwRIeIns.roa (hash: EY7kLGn+91zHAkvdNmxs56BoLlsYshC66U8Z0FxR410=)
                          2: brk9vAG87DpLmI6PjVMwpaL8Smg.crl (hash: J5j4QQoasmsyop9uCY8OeUZmL+AuPdXLqR89GnwBUug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:bb:90:12:33:a1:05:bc:14:6f:90:07:89:78:d4:a4:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
        Validity
            Not Before: Jun 29 12:01:10 2025 GMT
            Not After : Jun 30 12:01:10 2025 GMT
        Subject: CN=8d6c9ca96437e315bfeb964f01f32060f330371d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:42:53:0f:80:2c:18:c7:59:2e:b5:b1:98:5e:
                    f7:bc:df:03:d3:fd:38:1c:2d:39:c3:71:d1:5f:95:
                    7d:a7:58:c0:3c:25:75:7d:27:ff:a4:54:0a:88:d7:
                    ba:2e:13:48:ad:ad:35:ca:64:40:10:6a:7a:31:4d:
                    55:80:f5:52:e9:e5:8b:5a:99:f4:f7:ab:6f:3c:6a:
                    9c:6b:b7:10:46:40:50:ec:5e:0b:55:94:65:ae:12:
                    be:84:bd:2e:2a:f4:a5:92:de:40:05:1b:6a:3b:53:
                    65:06:4e:50:d6:92:d8:2a:e8:8b:ae:b9:f7:4c:9a:
                    a3:c1:df:58:6f:07:c7:78:59:eb:6b:d3:a6:ed:fb:
                    65:b7:08:4e:68:b0:0d:03:ec:dc:6f:97:44:2c:07:
                    54:e6:4b:6a:32:95:c5:97:93:6f:a5:92:1f:71:21:
                    f7:e1:5c:ad:7b:97:e7:40:78:68:c6:c4:54:9b:0e:
                    1c:4e:3e:f2:96:01:9d:a2:f2:82:57:e1:91:0b:fb:
                    e6:8b:88:9d:d6:3c:13:58:0a:5e:92:14:5f:3e:fc:
                    3b:70:dc:96:a3:6b:5a:53:e6:f1:cd:aa:06:eb:4d:
                    30:3a:bd:7f:7b:8a:c1:40:1b:82:b9:6b:be:b5:49:
                    2a:43:25:7d:6e:6a:86:ed:e6:1f:41:7f:5e:fe:36:
                    c3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6C:9C:A9:64:37:E3:15:BF:EB:96:4F:01:F3:20:60:F3:30:37:1D
            X509v3 Authority Key Identifier:
                keyid:6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:16:af:e7:62:bb:33:88:be:ae:a7:c9:a6:53:7e:2b:0b:2b:
         fa:43:96:ce:0d:51:92:a0:23:84:78:bb:6a:14:c6:08:bd:c5:
         c1:4a:ba:70:90:3d:35:db:38:e4:e6:cb:ab:0d:20:4c:d4:85:
         e4:be:c3:02:32:d2:67:6f:ad:61:e7:7c:cf:92:b0:93:0d:3c:
         b2:bd:4c:3e:f7:b1:28:9d:7b:83:ba:f0:e7:e0:20:59:0d:a9:
         05:90:79:78:4b:ba:c1:29:48:f8:9e:b4:1e:73:de:a6:27:0a:
         24:2e:52:d3:54:44:51:dc:eb:03:b0:9e:93:16:e0:2b:3d:2e:
         0c:a2:18:9f:f7:44:55:72:59:04:08:c1:1c:9f:7d:5d:41:43:
         d5:ec:4c:34:81:32:c2:60:0f:c8:4b:70:a7:b7:a7:2a:47:f2:
         20:9e:2a:e2:b9:49:94:03:fd:45:24:bd:b2:54:52:7f:12:a4:
         54:fc:80:11:83:05:84:8f:c0:66:7e:11:ad:d9:dc:cf:4e:7e:
         66:7a:30:82:37:2a:98:cf:18:d2:a3:aa:12:86:c2:80:bc:92:
         e0:01:bb:6a:dd:b0:4f:17:b9:25:9f:85:1a:f0:39:d0:20:56:
         11:0e:e7:0b:e4:bb:b5:56:1d:a4:92:b5:f1:19:e9:ec:c4:79:
         f9:9e:00:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:16:36 2025 by rpki-client