Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
File:                     pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json)
Hash identifier:          go5+UhGfn770sN7faz6R8cR9TwcTviji/SKnG1gO2Es=
Subject key identifier:   57:32:D5:11:FC:C1:D4:2C:25:10:8F:29:13:C9:1D:FA:28:B0:7A:31
Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
Certificate issuer:       /CN=a67f1cf27426070aeda7b26053453c283fdf7537
Certificate serial:       0197B77C945D68A9208113EE697E120F1F03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
Manifest number:          0842
Signing time:             Sat 28 Jun 2025 17:01:24 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:24 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:24 +0000
Files and hashes:         1: pGhFSYKZpUat85kiXiiCd2_IqX0.roa (hash: rRFD7qwRqqnJAuhQ1luySoQoJ9GoQlnTCcam7ZPbXJk=)
                          2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: 7ARWFCYEu3HWkexgfj2woiq6mGeq+oPDx8WGzGlnHDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 17:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:94:5d:68:a9:20:81:13:ee:69:7e:12:0f:1f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537
        Validity
            Not Before: Jun 28 17:01:24 2025 GMT
            Not After : Jun 29 17:01:24 2025 GMT
        Subject: CN=5732d511fcc1d42c25108f2913c91dfa28b07a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4e:eb:f6:e5:3e:68:f1:03:6e:74:d1:29:e1:
                    c9:4e:c7:fa:6e:1b:ea:b8:72:ca:de:07:49:ed:65:
                    fb:f8:a4:c8:fb:e1:2b:05:99:03:99:49:84:5d:e5:
                    66:ce:5b:2e:17:01:48:7f:84:5e:b9:e7:b9:21:5a:
                    1c:f3:d1:13:e9:89:0c:8b:86:6a:ae:83:ef:48:fb:
                    61:d3:b2:b3:b3:82:b9:a1:10:df:18:5d:85:b3:e2:
                    dc:15:52:b9:81:65:40:79:dc:f6:6f:41:8e:c4:60:
                    7c:eb:a7:1a:72:13:00:54:52:be:ab:48:5b:84:61:
                    90:40:38:ad:94:e5:69:48:71:94:f3:1f:63:dd:9b:
                    56:ac:22:a5:a3:e7:6b:5b:c5:a4:ee:0f:60:ef:11:
                    2f:93:1e:33:53:1f:a2:3a:19:f5:15:d7:2f:fa:ea:
                    9b:74:cb:7e:13:4e:e0:0b:2c:28:39:f6:e1:f9:a2:
                    6a:a0:e4:89:1d:b6:2d:d9:a5:77:47:2c:35:4b:b9:
                    63:7b:11:63:31:3d:c1:70:39:cf:5e:ba:9e:99:83:
                    b7:66:a9:f0:cb:3b:49:91:40:43:c1:78:5b:8f:c7:
                    37:c7:d7:f8:f6:77:99:4e:91:e3:91:65:ce:19:48:
                    c1:04:74:20:f3:51:68:d9:07:11:5c:db:62:81:93:
                    76:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:32:D5:11:FC:C1:D4:2C:25:10:8F:29:13:C9:1D:FA:28:B0:7A:31
            X509v3 Authority Key Identifier:
                keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ee:a6:fd:89:b7:69:15:8c:0f:04:96:2c:07:66:9e:1a:4a:
         6a:b7:cf:a6:2f:19:ba:59:03:2e:75:06:fc:a2:98:cb:9c:50:
         c0:e6:08:fc:a5:6e:67:2a:d1:85:14:4a:f7:a9:26:50:11:41:
         20:23:90:44:03:5f:80:5a:4f:f6:09:b8:71:f6:bc:60:39:66:
         8c:d4:5e:9a:aa:9b:99:b7:bd:3d:05:60:9a:8e:41:a3:73:16:
         4b:a0:9e:9b:e8:d7:8b:ae:97:39:8e:78:07:27:5c:8a:31:6e:
         07:70:67:d6:e4:f8:00:7c:dd:47:b8:a3:ca:82:d2:b1:a4:20:
         d0:7e:48:a4:51:f0:16:fa:52:41:d7:4b:9a:a1:39:e0:49:37:
         2d:42:44:79:b8:92:98:02:71:82:12:0a:45:e2:29:03:58:46:
         a7:05:b0:2e:be:33:df:5c:27:56:ec:04:4e:49:9e:0e:dd:9f:
         98:e4:c1:3d:69:56:2e:1a:a2:b1:2f:8c:4d:54:a1:74:a9:d3:
         0e:fe:57:fa:ae:52:f1:7e:61:80:d9:5c:b7:6f:0c:04:b3:fa:
         3c:82:16:b6:d6:5e:67:83:fb:d2:81:e0:e2:50:fa:5b:32:32:
         58:bb:63:bc:ca:e4:67:c4:ba:44:bf:97:8f:11:13:bb:24:3d:
         36:cd:58:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:25:38 2025 by rpki-client