Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft
File:                     MeZZHRoE1q_h7V9O0B05SuUUhYk.mft (raw, json)
Hash identifier:          /OaLSB9y9ldVPt1UH1eU/7xkrbfmRAU9pBnHujg0GeM=
Subject key identifier:   AE:05:5C:E7:56:DD:E2:33:20:A0:AF:83:39:AE:E8:95:18:94:F2:C0
Authority key identifier: 31:E6:59:1D:1A:04:D6:AF:E1:ED:5F:4E:D0:1D:39:4A:E5:14:85:89
Certificate issuer:       /CN=31e6591d1a04d6afe1ed5f4ed01d394ae5148589
Certificate serial:       0197B6D7269773E5EB9AFD579647E3F57A13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft
Manifest number:          05B0
Signing time:             Sat 28 Jun 2025 14:00:42 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:42 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:42 +0000
Files and hashes:         1: JhwNwII4YOfneNhA5yI11PtA4Rk.roa (hash: xDvSQcwSJJU3/GnqEWqCRE4KK2ZXksvwiDHhnfKzQ7A=)
                          2: MeZZHRoE1q_h7V9O0B05SuUUhYk.crl (hash: PH1Yd3A7NFwBOTesg2rtjaOseHhD+uguq1Aeb/B0Dd4=)
                          3: NJKcRgijhXh37gGjWUXBc4kdFrM.roa (hash: VgH49H33jw2zh7xceu9DxV5517h/9Lf09S+uqXMzIIo=)
                          4: fhtC19QCvGdf0Oc_EeWcXSC0cgs.roa (hash: W3l2bfxo/nDFx3boBX/Qrxp8uh2idkRpvnrRaDUWAME=)
                          5: l-1-sJYhOvDnP0vt97ZEE8EG64Y.roa (hash: a9IJZav4U9lQV/r8RFyllgV9eyE4dU00VcjenG9YGbw=)
                          6: yL32EH6JFTrCOhK8RiGGmgov4oE.roa (hash: cEac+CHXj7CTP1r+Y4KLas1tMJqLekECb13nf0gmkms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:26:97:73:e5:eb:9a:fd:57:96:47:e3:f5:7a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31e6591d1a04d6afe1ed5f4ed01d394ae5148589
        Validity
            Not Before: Jun 28 14:00:42 2025 GMT
            Not After : Jun 29 14:00:42 2025 GMT
        Subject: CN=ae055ce756dde23320a0af8339aee8951894f2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2a:1b:a8:dc:03:0a:24:7a:4f:1d:45:67:60:
                    9b:a6:e5:b0:ef:2d:9b:fe:e3:0b:09:c7:f5:f0:33:
                    10:89:f4:a5:a6:28:45:0e:2a:5f:5b:d7:f8:6a:4a:
                    78:b0:96:a3:60:7a:ad:44:0a:66:ca:4e:27:bc:43:
                    cc:5c:ed:9e:94:e1:de:74:d9:68:f6:66:75:2b:d0:
                    25:58:9e:e2:bd:2a:b4:ce:65:d8:4f:7a:ce:17:ba:
                    f6:08:3f:3f:fd:b3:e8:36:4d:be:92:60:04:9c:18:
                    cf:5c:b8:55:4c:8a:3b:48:20:eb:d4:1a:82:36:8c:
                    ac:e2:f1:df:9d:a7:6b:15:19:09:41:e7:0a:2b:7f:
                    78:e4:5f:fa:9e:6d:c9:12:8c:be:36:e7:c9:97:cd:
                    ed:c4:a4:8e:de:8d:f8:2e:b7:38:c4:04:20:ca:3e:
                    02:b5:34:57:5b:23:31:e1:66:dc:e6:03:5d:1c:dc:
                    3f:29:12:9b:bc:bb:fe:1e:5c:ad:bc:fe:4c:86:4c:
                    3f:b7:04:cb:52:12:b7:25:26:4a:aa:9c:ed:be:ac:
                    7e:0c:55:54:9e:9a:0e:15:1b:d3:8f:a7:fa:d8:38:
                    5f:67:a1:40:12:50:70:2f:97:26:9a:54:63:8a:58:
                    fe:ca:68:cd:a9:57:59:e0:01:ee:e7:16:36:6d:88:
                    fd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:05:5C:E7:56:DD:E2:33:20:A0:AF:83:39:AE:E8:95:18:94:F2:C0
            X509v3 Authority Key Identifier:
                keyid:31:E6:59:1D:1A:04:D6:AF:E1:ED:5F:4E:D0:1D:39:4A:E5:14:85:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:4b:ad:fc:25:b7:a6:36:14:da:96:e4:69:41:fb:30:ad:d3:
         f7:34:5f:e5:91:0b:31:3c:02:e9:67:aa:dc:61:d7:19:c0:ae:
         ae:40:f0:41:b5:db:bb:c7:23:96:4c:d3:9b:61:5a:28:c6:2c:
         db:14:c5:a6:fe:ff:1f:2b:1b:e9:c0:6e:2b:e4:e8:67:99:7d:
         f9:72:7d:04:8b:6b:aa:db:9d:29:dc:21:9c:1c:33:71:9d:e0:
         7d:85:fd:52:92:46:d4:41:4a:61:63:d5:82:63:ac:cf:e3:9e:
         b3:f0:41:18:2a:40:06:cb:be:0c:e6:55:16:9e:bf:aa:d5:cf:
         75:3f:58:bd:38:d5:cb:41:14:a9:59:65:ef:91:ad:39:a6:14:
         cb:cb:d8:68:ba:74:1a:a3:4e:fa:dc:46:19:49:cb:bc:f4:a9:
         0b:73:1f:57:2e:57:9f:1a:d6:2b:3a:25:bb:90:f3:27:25:ab:
         02:95:a6:d5:4f:7b:86:70:54:5d:09:ba:f9:59:ca:ee:37:9f:
         5d:cc:91:a9:55:40:a4:43:f5:55:37:78:c1:9e:8b:1b:07:20:
         55:f4:a3:6d:e2:4d:82:84:54:2d:df:e8:7e:a0:ea:c1:22:4a:
         c3:9f:bc:b5:24:08:e4:f7:7a:a1:1e:1b:17:06:af:c9:40:63:
         cd:82:30:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:45 2025 by rpki-client