Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
File:                     Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft (raw, json)
Hash identifier:          m5HyrdSUEqOQG13WvWpXeLS9e3V0gthkl/J8CcUL0iY=
Subject key identifier:   13:25:9E:34:B3:F7:92:B8:AC:24:E1:1D:C9:DA:B6:AC:79:F1:80:DB
Authority key identifier: 45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84
Certificate issuer:       /CN=45aed3d1a1a1e2830d416afa047b95220e814084
Certificate serial:       0197B6D778A5D2B86D74202F4714FF9A5F17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
Manifest number:          081F
Signing time:             Sat 28 Jun 2025 14:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:03 +0000
Files and hashes:         1: 5yM7l9glO5Y_kZZbeV1PY4oF4AI.roa (hash: Zrq7WRCOd9AEwWRm5k4u/56c3wqE+RlRfF9EKNORqJM=)
                          2: Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl (hash: nTziagSHQYoZM2ncX4WhyxQwTTtFigmvGJikpPXC2Gk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:78:a5:d2:b8:6d:74:20:2f:47:14:ff:9a:5f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45aed3d1a1a1e2830d416afa047b95220e814084
        Validity
            Not Before: Jun 28 14:01:03 2025 GMT
            Not After : Jun 29 14:01:03 2025 GMT
        Subject: CN=13259e34b3f792b8ac24e11dc9dab6ac79f180db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bc:f7:78:b6:3a:0c:c1:71:d1:43:ca:74:78:
                    43:72:7d:3f:1e:fc:82:f2:f4:ed:e3:a9:df:0a:ee:
                    21:5b:16:75:e8:db:23:5b:96:5b:65:d4:4b:96:c1:
                    87:05:2a:9e:10:86:93:a4:cc:04:6b:e2:56:a4:7e:
                    9e:82:fa:35:51:16:8f:61:34:7c:7d:e8:62:fe:44:
                    64:45:98:c2:18:ce:78:5d:f1:e9:2a:d1:ad:00:95:
                    7d:0f:0c:17:19:71:7b:35:e3:17:f8:19:b5:c2:2c:
                    fc:df:c8:d5:2d:bf:39:9c:1b:1c:c6:a9:3e:1e:d1:
                    44:a5:ca:43:60:2e:e9:63:07:06:a1:e1:cb:23:cc:
                    1a:eb:b6:3b:a1:98:7d:92:1f:d1:45:b2:27:c6:b0:
                    0a:2d:02:88:8d:67:3f:4c:0a:85:8c:07:c2:40:9e:
                    f8:2a:86:8e:98:4a:bc:67:ae:4a:a3:53:ac:3c:b1:
                    3c:09:b4:ca:98:60:f4:d3:05:99:e8:94:3c:e0:c8:
                    8b:53:62:a4:5e:13:20:ff:57:f8:ff:a2:f3:26:33:
                    a4:c5:65:7b:9d:22:63:3f:ee:80:0b:2f:71:00:16:
                    5e:58:1b:83:e6:8c:8e:a8:2a:e6:25:ba:18:6d:85:
                    52:00:e6:63:cb:f6:b4:7b:9f:3c:16:86:59:64:47:
                    ed:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:25:9E:34:B3:F7:92:B8:AC:24:E1:1D:C9:DA:B6:AC:79:F1:80:DB
            X509v3 Authority Key Identifier:
                keyid:45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:bc:98:4b:64:ed:89:56:ab:87:26:f0:7a:8e:13:d5:8d:cf:
         74:4e:10:72:67:2f:cf:ff:66:30:c0:80:0d:a3:f2:d8:d1:93:
         b2:1c:54:aa:5a:ed:88:75:25:37:48:9b:53:c0:83:cb:7a:b3:
         27:5f:e0:2d:80:89:c3:07:18:b0:fb:71:16:b5:66:4d:7a:14:
         58:0f:34:93:5e:8e:60:d2:e0:00:78:9c:86:1e:83:1e:44:c9:
         a5:d5:54:0e:e5:f8:19:46:fd:0b:3e:8c:83:b2:be:fa:b6:18:
         5f:4c:15:0e:7d:9d:e8:8f:96:c8:b9:f1:3f:a4:48:9e:d8:36:
         e5:01:c6:d8:18:2f:84:8d:f1:10:67:25:3f:92:5f:2f:db:c5:
         62:17:43:b2:6d:41:e4:40:3d:ad:51:b2:43:df:46:5b:2b:39:
         42:30:1b:73:67:a3:0e:8e:75:6c:57:78:fe:30:5f:e2:06:73:
         10:d1:f6:25:f1:3b:bf:e6:a1:44:66:5c:08:8a:6b:e0:fe:1a:
         88:0b:e7:f8:d0:91:4f:ea:82:96:77:7a:ef:25:82:fe:1e:ae:
         26:f0:ee:4d:11:06:83:de:72:96:38:bd:4f:a8:31:09:a8:7b:
         03:7d:19:90:74:d0:23:14:89:9c:e3:90:74:8a:a9:61:c6:db:
         f3:25:17:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:22:04 2025 by rpki-client