Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
File:                     V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft (raw, json)
Hash identifier:          gHEHuTvrdLShW+Y5KAqYTr8HEoJnWvbDY2ltf5SzTsk=
Subject key identifier:   44:00:63:0F:45:EB:26:74:B4:23:BB:4F:BF:27:60:73:70:4D:08:15
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Certificate issuer:       /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial:       0197B77BFC8BD7F0198287BB592FAF393CB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
Manifest number:          0EDF
Signing time:             Sat 28 Jun 2025 17:00:45 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:45 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:45 +0000
Files and hashes:         1: GyhAtf15yZqMprvOSAG-mSzNZTU.roa (hash: jfVjDUAXNOWRUx2duW7NqVNPhOHvwJFkEOJDlRjLf1c=)
                          2: Jn9LNrC4wIy3yIlbSkthFN9Albs.roa (hash: 6lIOMorBJKMVKOZBPqKcGfElc6xi+Wc/c9B3Sn6wFrA=)
                          3: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl (hash: ijk45+sSI3rYcAQyEVkuS4zgs05OvtxwQC0jpY9HG/U=)
                          4: Y2_bnui3NBLO8jQirmiUuAzGyRw.roa (hash: Sj4Gp5iophRPrZcWhz+iS2BZX0tuH2ZNqq3e2/zFjig=)
                          5: ntrt1qLEp7JFw_l17Dbev4liPcY.roa (hash: 5lVCUBQu1df/S1FQOKl/MyF/XxoO3ZxscsaY8Q1dPLk=)
                          6: vfMCWDXHqUhfE9pCWjy3UIK3sYE.roa (hash: cZ4cjZLkxHd/pGP9SjokJ4j+E/I+MNHdDpithj4CeCo=)
                          7: zaxDDa76odJm9ePdrwAGeOqRpTk.roa (hash: LPUFtmetdpPIYathbUV2AsqucuRhOg7pKFky/Ou4leU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7b:fc:8b:d7:f0:19:82:87:bb:59:2f:af:39:3c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
        Validity
            Not Before: Jun 28 17:00:45 2025 GMT
            Not After : Jun 29 17:00:45 2025 GMT
        Subject: CN=4400630f45eb2674b423bb4fbf276073704d0815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7d:15:2c:93:d3:78:83:17:3a:f8:1c:51:ae:
                    4a:f3:02:d6:6d:65:4d:c6:66:ec:26:a8:60:e1:5b:
                    a1:66:fd:18:fe:8f:56:3b:17:c9:11:3d:cc:b7:ff:
                    4e:ae:2f:f7:79:f4:76:27:4d:1a:46:71:39:55:e5:
                    4e:8f:16:e0:d5:42:45:90:35:7c:dc:8e:6e:9d:9d:
                    81:25:56:0f:d1:05:9e:57:73:6d:3c:ca:62:0c:ba:
                    39:ca:b8:6b:c9:0d:24:14:ac:2d:4c:0a:d8:41:50:
                    79:d8:22:a6:cc:d4:8f:dc:56:34:f4:bb:5d:96:73:
                    dc:a9:a8:e4:11:03:89:af:87:20:c4:84:72:2e:4c:
                    a3:7f:20:15:5a:f1:d6:f7:ca:ae:13:f7:4d:2a:a6:
                    b2:72:54:45:cb:9b:8b:05:92:39:fc:74:41:39:ed:
                    5c:7a:df:96:0f:6d:1c:73:a1:21:68:60:a0:db:ab:
                    e3:a4:00:b1:79:a9:0a:ff:48:9b:2f:a1:e9:3e:85:
                    99:fe:63:d5:05:b1:2d:db:d9:b9:7c:ba:03:db:6e:
                    dc:a0:ed:50:68:cb:70:56:30:81:99:e5:10:fa:62:
                    82:fa:84:57:53:f4:47:61:76:54:54:da:9b:35:20:
                    44:df:d9:a0:b8:da:d2:ef:1e:04:ae:9d:b2:9d:7a:
                    bf:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:00:63:0F:45:EB:26:74:B4:23:BB:4F:BF:27:60:73:70:4D:08:15
            X509v3 Authority Key Identifier:
                keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:75:44:df:34:1e:15:b2:ea:72:2b:b9:bb:2c:69:f4:a5:41:
         0b:5f:ed:bd:93:94:09:b1:9d:db:16:52:26:9f:2b:23:48:b0:
         f0:05:cd:07:7c:d5:31:b9:12:5d:b5:39:c2:5d:59:f0:f0:c8:
         4f:9f:97:9c:b1:a1:1a:d0:83:c6:ae:bc:3b:f8:7f:25:57:15:
         cf:ce:3f:51:47:f3:18:7a:77:e8:1e:6d:e0:4f:1e:cc:2d:c0:
         c7:75:1e:08:d9:4e:91:93:df:d3:27:90:56:6e:73:a8:81:41:
         f0:84:36:6a:a9:9c:aa:f3:ba:94:98:0c:06:92:69:0c:b1:5d:
         9f:a3:e7:8c:06:16:e5:05:d3:8c:86:d3:00:e3:d4:0d:c7:0a:
         17:f2:c2:98:dc:94:90:20:dd:cb:64:58:6d:fa:83:c2:57:c8:
         ed:8a:70:d4:4f:12:87:8c:07:4d:54:b9:a8:23:fe:f6:e6:86:
         07:47:77:d3:72:2d:a7:40:f3:b7:f4:e3:f8:52:49:6b:3b:15:
         78:d6:2e:d0:69:45:c9:ef:83:2b:c8:fe:d4:1c:03:ba:4a:19:
         38:1a:10:45:45:2f:cc:58:d2:52:78:4c:e5:e1:bd:8c:af:11:
         47:fc:40:34:45:05:d2:2d:85:32:46:64:91:1f:48:30:bc:52:
         b5:e1:9e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:33 2025 by rpki-client