Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
File:                     hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft (raw, json)
Hash identifier:          6y04iLh9VfchX9HY9EinuUv67IISM+c6hgH/dMcEeiw=
Subject key identifier:   45:81:81:51:D7:43:66:01:7D:51:AB:FD:91:A7:13:57:3D:6A:A2:D0
Authority key identifier: 85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB
Certificate issuer:       /CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb
Certificate serial:       0197B745551F00A774265CA22D9C4F728532
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
Manifest number:          061C
Signing time:             Sat 28 Jun 2025 16:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:03 +0000
Files and hashes:         1: gBy9cD3j_tP--kqjiHxj-BEz2w8.roa (hash: GWls9v+X93Qb6tijazZ0OBt3/3oq/+caZQ2/zTy7cZA=)
                          2: hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl (hash: f7lgwNP9ci/kYj7d+PerZ74HxwAvysJEx9koX8ia7lI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:55:1f:00:a7:74:26:5c:a2:2d:9c:4f:72:85:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb
        Validity
            Not Before: Jun 28 16:01:03 2025 GMT
            Not After : Jun 29 16:01:03 2025 GMT
        Subject: CN=45818151d74366017d51abfd91a713573d6aa2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7c:e0:e4:42:66:bc:6e:37:62:15:c0:44:c4:
                    6c:a7:4c:ae:c6:d5:30:c4:89:c1:2f:97:2f:fe:be:
                    e2:1c:3b:c1:5b:6d:28:eb:d1:f0:ca:6c:c5:d0:65:
                    a2:7f:bf:e7:ba:89:ae:89:b0:24:8b:96:73:fb:fb:
                    fa:ad:e2:2d:29:69:9f:1e:68:22:30:69:04:08:99:
                    5f:c0:28:c9:72:34:bc:f1:a8:81:3b:b6:77:2d:c4:
                    ce:f8:ce:4d:c1:fa:7f:ef:71:61:4a:f3:d8:96:8f:
                    87:99:2e:ab:34:d2:7a:75:70:48:08:3d:31:93:bf:
                    49:fe:1d:d5:2f:2b:4b:36:21:49:c2:38:bd:fb:9d:
                    be:e8:76:25:1e:4f:d1:33:a1:4f:ed:21:79:67:7f:
                    5e:85:32:c6:68:7f:75:70:88:59:8f:a7:7a:ed:e4:
                    09:d2:94:b9:d7:26:3c:16:ad:2c:9e:3b:2f:c1:d5:
                    99:74:ed:cd:85:a6:e5:ab:1a:b7:9d:f1:6a:c4:c9:
                    e3:4d:79:de:59:e6:e2:4b:e0:a2:1f:4d:c8:08:82:
                    e1:44:58:e0:cf:58:45:c3:ac:33:ed:93:87:be:ac:
                    b0:32:23:b4:37:cb:6b:fc:cb:df:68:47:9d:2e:ca:
                    59:3e:cd:f0:e1:81:ac:ee:5c:1d:f3:de:bc:e7:d1:
                    43:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:81:81:51:D7:43:66:01:7D:51:AB:FD:91:A7:13:57:3D:6A:A2:D0
            X509v3 Authority Key Identifier:
                keyid:85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d1:e1:6a:1a:99:de:c4:5e:84:03:3d:59:15:ee:12:a8:56:
         5d:5c:99:3b:44:e8:4c:c1:ca:42:85:7a:0d:a8:44:e4:9f:81:
         7b:a7:41:ad:22:db:98:73:49:88:4a:05:f3:f1:40:a0:2b:af:
         6f:48:37:8d:4b:f9:5c:12:2d:e2:ed:49:fd:80:25:b6:d5:a5:
         75:89:b5:91:ba:33:f4:a4:14:e2:68:5f:d9:e3:e6:a0:27:4b:
         89:80:81:30:9e:e9:06:95:20:20:4b:6c:a4:76:9d:ac:e2:37:
         d3:fa:1d:9e:e3:c8:d0:cd:4b:22:9c:96:a5:e4:72:5b:4e:13:
         30:7e:13:2c:27:40:f5:e3:29:7b:da:a9:c9:64:2f:fa:d2:b2:
         17:12:a4:1f:47:29:4b:dc:8a:04:80:8b:ff:db:ef:b9:54:30:
         23:55:0e:19:68:a9:e9:ab:c9:ad:f6:a5:ba:50:a8:c9:40:43:
         62:02:28:ee:40:f7:f3:d1:04:ff:bb:5d:79:7c:40:91:0b:53:
         52:52:d9:07:87:fc:dd:4d:5c:bb:93:ae:ec:a2:c2:6c:d7:7a:
         78:5b:cd:61:08:73:4a:0d:52:69:e0:78:08:2f:19:6a:10:6c:
         62:2d:02:f8:5b:75:da:fd:94:c0:9d:18:12:fa:a7:f5:a1:56:
         4f:25:3a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:47 2025 by rpki-client