Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
File:                     nWuXdMlIdsmDId4yAbEbdaE1jRk.mft (raw, json)
Hash identifier:          WAYOKTSmhkrFIQfD0xy2uN7WA4hPHUvzULGbwq2TlHg=
Subject key identifier:   D2:29:26:0E:E2:6F:14:2C:94:D7:F2:94:69:D1:73:3C:E5:53:6C:D2
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Certificate issuer:       /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial:       0197B9D8759692A39B613758EF7E61A82412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
Manifest number:          10E6
Signing time:             Sun 29 Jun 2025 04:01:00 +0000
Manifest this update:     Sun 29 Jun 2025 04:01:00 +0000
Manifest next update:     Mon 30 Jun 2025 04:01:00 +0000
Files and hashes:         1: 5yK2af_g5CTlXz9q-R5Ey4S2raY.roa (hash: LxU9aJpGxPnyOcQ82YucJ2+C9wvejuknSWDM/RouRtA=)
                          2: HXLS-XKu3_p7nhpZ2K8scEyS_rc.roa (hash: 8XJ8ceqUC/FtGHEdtNIo+tnT3APlE19braxx2C56keI=)
                          3: NQOelXfnh9zNy4F5hN9_tYjE3Bs.roa (hash: qXIyT3lUz5bJt0IF4d25cysT8WLakbijoLlu5EAXUys=)
                          4: _fuT4R68BHlPpUP6HiVZDSmxINI.roa (hash: bvu+tWo4UXme3jTLsLEJ6SMX9XI3uAoVhAKkTxW9r90=)
                          5: boOUh_OegScUQI0rJ0GXkth8K70.roa (hash: h8bMxthrp6BSgypE0yBkUmIOsuBuRoBa/El8mfbO7Rs=)
                          6: dencvyi0TxmMkZDQCX9rZJN2RzU.roa (hash: B52p98p3HEzzhef7/oXAaRqNFYHk2h3tC+DtHUn18nc=)
                          7: nWuXdMlIdsmDId4yAbEbdaE1jRk.crl (hash: FLC+VeUR+5SsF7I+8qjuHs6X/FblMvGrH2eo8mwCwrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:d8:75:96:92:a3:9b:61:37:58:ef:7e:61:a8:24:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
        Validity
            Not Before: Jun 29 04:01:00 2025 GMT
            Not After : Jun 30 04:01:00 2025 GMT
        Subject: CN=d229260ee26f142c94d7f29469d1733ce5536cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d7:9d:53:53:b8:1d:f2:7f:4e:c1:82:ed:5c:
                    0d:84:b1:df:a9:53:8f:99:5f:b6:70:0b:70:f5:23:
                    95:34:0e:61:31:5e:5e:14:45:21:bf:7b:a4:09:eb:
                    ab:f1:9e:fe:d1:f9:3b:38:16:cf:8a:91:b4:7c:2c:
                    10:35:fa:e1:3c:44:29:bb:fb:b2:f8:4f:f0:09:e5:
                    8b:fc:f8:c9:37:cf:ae:63:4e:c0:68:0b:4f:ba:39:
                    d8:bb:e0:56:c8:03:16:93:10:8f:8e:3d:4e:be:9a:
                    54:91:c9:65:56:db:2a:b1:5f:f8:4e:e6:0f:e6:67:
                    53:ad:32:10:00:b5:51:20:3a:b8:49:8e:6c:0d:c0:
                    d4:65:be:62:a2:d9:a0:f3:5c:0c:48:0d:89:9a:6f:
                    a2:74:60:bc:63:57:fd:49:ff:b3:95:56:bc:f3:f3:
                    63:9b:9e:c5:32:a2:99:ce:99:ba:ac:eb:a9:b0:b5:
                    fb:9f:c5:35:b0:e1:c4:14:27:04:0d:0e:8f:a6:3c:
                    f5:92:b1:b1:50:38:4b:48:8b:60:33:c1:99:6f:8f:
                    79:08:6c:cc:52:0a:df:bd:05:67:20:bb:f8:50:b7:
                    a2:9a:7b:b8:c2:3c:bf:84:8e:48:39:d6:9b:43:39:
                    52:90:df:75:66:8c:a6:a1:c2:09:ad:93:11:e4:df:
                    98:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:29:26:0E:E2:6F:14:2C:94:D7:F2:94:69:D1:73:3C:E5:53:6C:D2
            X509v3 Authority Key Identifier:
                keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:3a:8a:37:77:9d:b4:df:c7:3b:31:34:d2:7a:4a:b6:64:b7:
         c8:67:4a:bd:9a:73:27:61:fc:f1:ab:a7:48:59:8b:4b:33:00:
         e4:39:26:b7:e9:9f:dd:bc:82:59:58:a6:1a:0c:d3:e0:28:74:
         34:70:ad:94:dc:2a:ff:39:4e:d3:21:5c:e0:3c:53:2a:ff:d1:
         56:6c:82:b7:13:a2:4e:94:81:8a:5e:5f:b0:8a:0e:44:5b:5f:
         f5:ee:ab:3b:7a:ef:8d:ef:61:da:a3:36:0d:52:76:b7:c3:96:
         0d:83:48:99:59:44:c3:78:f4:87:a7:d4:3f:19:46:00:7e:8b:
         56:19:84:c7:5f:6c:21:8c:a1:f8:7a:4a:87:88:c9:52:08:30:
         78:22:f2:ee:f2:8b:a0:37:81:30:f0:66:5a:f8:96:2c:12:79:
         85:a1:dc:ee:0a:33:22:52:04:f9:2c:e4:9b:44:69:71:b3:a8:
         79:ba:59:12:a4:43:4c:ac:98:01:a9:ae:c9:ea:11:31:43:7e:
         c7:d2:fa:b5:10:13:fb:66:71:c8:68:4f:02:0e:6c:68:9b:aa:
         d8:6a:9c:6b:8f:cf:3e:d8:e8:40:5c:0a:4b:96:1e:60:e6:6e:
         a0:70:a0:4d:63:ff:61:63:a6:59:09:05:12:c8:8e:3f:a6:de:
         9e:d1:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:14:34 2025 by rpki-client