Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
File:                     pi8tPCadk1InaQsot_vdlT4entw.mft (raw, json)
Hash identifier:          rgmcic8mf7Hmu10vaRJYBrZHdf3bqujbn/ZmGF36+Yo=
Subject key identifier:   B7:EC:E2:2C:AC:C7:F7:B5:13:CC:B2:FF:9B:3E:69:BA:47:36:CB:7D
Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
Certificate issuer:       /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Certificate serial:       0197C6B81EB874831768B56498EBD47B8D45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
Manifest number:          0A7A
Signing time:             Tue 01 Jul 2025 16:00:44 +0000
Manifest this update:     Tue 01 Jul 2025 16:00:44 +0000
Manifest next update:     Wed 02 Jul 2025 16:00:44 +0000
Files and hashes:         1: 2bwoacVhn9Ey8-WA6HPqgOWaS3w.roa (hash: +4RKvBlDgq1ptS9Kf/qX9i6nHjxZCbfdf3DtkVyJdE4=)
                          2: OFc0yBZFy4Wa20RcLrHQGW0n8Z0.roa (hash: TB30ZCImx4FabUXsP6FrJ/8xR1ebGEeWXJhQyL3afw0=)
                          3: gBycawi1ika7Vj_3TGa6n8ZyOcc.roa (hash: eGdxhHwT3weYIz4n0K5fQnn/ZNevVWIphIjoit3SpJE=)
                          4: pi8tPCadk1InaQsot_vdlT4entw.crl (hash: ATeVivbQYHKdZsRTxS6LeENEvZGuqQjgzLqbEp31ncU=)
                          5: thsewX5m5QEbqC1hk05OepLePSE.roa (hash: Qec8TVM/3O2FwTtHE6+SXRB/S0VWZFEK7seQA4WOq3A=)
                          6: uZ5GJPrp9SFd4Iq3FGcL7RdiaHc.roa (hash: qgD6SLmZc9P0p+V20mf5ZvuX3cLkvcDCzUTLrsNawj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:b8:1e:b8:74:83:17:68:b5:64:98:eb:d4:7b:8d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
        Validity
            Not Before: Jul  1 16:00:44 2025 GMT
            Not After : Jul  2 16:00:44 2025 GMT
        Subject: CN=b7ece22cacc7f7b513ccb2ff9b3e69ba4736cb7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:17:3e:15:f3:98:09:cb:94:78:a4:f8:de:0c:
                    db:28:cf:47:5e:83:28:c7:42:4c:ac:f7:6a:82:3f:
                    47:f0:30:cb:69:ae:29:a5:81:3f:2d:ca:f8:bf:a7:
                    4a:da:6e:d0:6e:fc:9e:02:69:24:6d:3b:06:ca:29:
                    6f:5f:c7:fa:7f:22:bb:f2:a6:2f:11:5d:9f:8a:a7:
                    97:9e:74:04:51:13:76:80:20:b7:97:29:57:6e:41:
                    de:41:70:aa:87:45:af:2b:68:62:3a:47:46:b8:0a:
                    2e:da:0c:ce:6b:40:88:64:16:62:71:a2:ca:ae:96:
                    19:fa:fe:0b:2a:6e:1b:c2:04:7f:a9:9d:06:f5:9c:
                    76:35:d3:8d:33:a0:ef:2f:d2:ca:3f:af:28:b2:27:
                    b1:00:a9:16:78:ab:e0:d9:18:29:69:59:ba:90:ac:
                    53:59:48:36:1f:8e:02:8e:8a:d4:ff:5a:ad:c6:9c:
                    87:aa:83:1e:c8:6a:31:8d:6a:e2:b7:be:bd:0d:48:
                    24:df:5e:72:7f:73:eb:67:8f:be:02:dc:07:17:b0:
                    75:60:83:00:e9:2c:69:91:fd:d7:62:a3:4f:a8:86:
                    72:63:00:b7:fa:7f:8d:ef:be:ba:70:a8:cf:35:65:
                    ba:f1:6f:e9:23:eb:4a:36:a4:1e:c4:61:e8:57:05:
                    05:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EC:E2:2C:AC:C7:F7:B5:13:CC:B2:FF:9B:3E:69:BA:47:36:CB:7D
            X509v3 Authority Key Identifier:
                keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d1:a0:4c:9e:7a:45:81:54:e0:30:41:fe:16:14:eb:f7:cc:
         79:a2:c8:43:3d:3c:e1:19:ab:8f:ee:ba:3c:e0:78:f4:cc:e5:
         44:2c:94:26:ed:2e:10:cd:49:32:5c:16:86:92:2d:94:d0:62:
         f1:af:a6:61:e9:9f:82:07:61:a6:d7:cc:61:e9:49:4c:09:08:
         ab:bd:f5:cb:ed:68:b8:a0:79:ea:97:0b:07:61:3d:14:9c:bf:
         66:ed:16:63:be:76:41:91:79:a5:4b:51:f0:f1:7c:d0:02:ed:
         ed:aa:63:4a:08:f9:ba:73:2f:43:4a:21:d6:f8:b4:bf:04:1f:
         06:e3:42:76:6f:d6:3f:cc:c8:0d:22:88:09:5e:01:ff:ff:0b:
         80:d6:cd:cf:00:0e:30:3d:b5:0e:a7:e4:51:3a:e9:03:36:f5:
         b3:af:57:90:85:c9:0c:33:5b:25:75:25:4a:2c:b4:21:c5:0d:
         cb:d6:c6:99:6d:d0:21:6a:d1:c4:e5:ae:e0:cc:01:2c:6a:f3:
         8c:79:80:7d:35:1d:c5:2c:98:10:d5:e0:16:2b:0e:8e:ec:bd:
         60:1d:db:48:03:bf:d1:93:dd:98:45:4d:31:ea:70:53:ec:a9:
         d3:56:bb:5c:c5:1d:d5:8c:ca:22:ad:b2:2e:4a:b1:18:fc:ff:
         11:e0:70:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:48:02 2025 by rpki-client