Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
File:                     aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft (raw, json)
Hash identifier:          Jp3k3tsScHCQE7TLazvz3cgrKmb8zXvJf1I0l9GnmbM=
Subject key identifier:   67:91:25:B0:0C:66:F4:B5:01:A0:1E:50:3C:BF:D6:3B:68:EA:8D:94
Authority key identifier: 6A:AE:E7:BB:A3:2A:8F:93:A4:CC:F5:69:1C:81:D1:6D:04:B8:50:8A
Certificate issuer:       /CN=6aaee7bba32a8f93a4ccf5691c81d16d04b8508a
Certificate serial:       0197B933BE0B260AD32E002D6DA4B45607EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
Manifest number:          01F7
Signing time:             Sun 29 Jun 2025 01:01:05 +0000
Manifest this update:     Sun 29 Jun 2025 01:01:05 +0000
Manifest next update:     Mon 30 Jun 2025 01:01:05 +0000
Files and hashes:         1: Uk__OZgps3cW-lHF28p4Fkxzez8.roa (hash: xpOF8IhBwl9sbc7jkk5/9vqgBdRwATYGkdLVpY/CHdk=)
                          2: aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl (hash: hBPYyYxE+mSGcI87hXq+oxYt9To3tR4hdaIHWryfetQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 01:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:33:be:0b:26:0a:d3:2e:00:2d:6d:a4:b4:56:07:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aaee7bba32a8f93a4ccf5691c81d16d04b8508a
        Validity
            Not Before: Jun 29 01:01:05 2025 GMT
            Not After : Jun 30 01:01:05 2025 GMT
        Subject: CN=679125b00c66f4b501a01e503cbfd63b68ea8d94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:78:c3:2a:60:fe:ed:02:7e:4e:e8:eb:50:8d:
                    20:b3:e6:51:d7:1c:36:54:b2:47:79:d0:34:29:d1:
                    27:84:b6:5a:71:38:21:0b:f7:2b:7f:b4:be:fb:7e:
                    d6:cf:72:23:39:fd:37:3a:0b:4a:5d:e4:ea:ff:b1:
                    80:c3:df:b8:ae:95:8d:36:cd:a9:6a:09:87:1a:e8:
                    df:3b:89:97:2a:97:b4:92:0a:05:33:29:14:96:b9:
                    13:f1:0b:20:20:9f:f2:29:83:7a:79:df:26:ec:f2:
                    48:d1:11:ee:38:c3:27:60:8b:73:89:f8:aa:96:e4:
                    17:34:ca:8d:d4:7d:8e:75:2b:c2:4e:c3:df:fc:e0:
                    04:f7:18:01:81:63:21:59:ff:1b:a6:0e:d0:e9:ac:
                    60:a5:72:33:f3:19:1b:37:0e:07:75:8c:5f:9e:33:
                    99:93:81:a9:9a:e5:f2:0b:02:b7:f6:aa:17:27:82:
                    24:af:76:2b:47:04:58:01:8e:4d:62:d5:c8:0e:7d:
                    97:25:68:f2:c4:48:63:fd:03:06:3f:05:f8:9e:e4:
                    fa:4c:ea:24:43:dd:62:51:90:52:9d:6e:59:e4:eb:
                    13:8f:32:b5:5c:b0:68:99:06:17:21:f4:e6:af:01:
                    de:32:91:91:c1:60:6e:07:3f:f2:43:16:73:49:c1:
                    62:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:91:25:B0:0C:66:F4:B5:01:A0:1E:50:3C:BF:D6:3B:68:EA:8D:94
            X509v3 Authority Key Identifier:
                keyid:6A:AE:E7:BB:A3:2A:8F:93:A4:CC:F5:69:1C:81:D1:6D:04:B8:50:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:75:1e:ad:8e:55:b6:ae:42:ac:c5:04:90:27:5e:b3:f6:8b:
         32:de:0b:20:ad:bb:ca:21:ed:59:2f:78:ab:cb:04:a1:63:c8:
         cb:43:84:e3:f0:1e:2b:79:43:69:a1:96:92:1b:1a:c9:16:ea:
         7a:6a:51:10:d4:82:29:a7:f0:7e:9b:2c:1b:3e:e0:d8:8e:47:
         79:1a:1c:f4:75:1f:01:97:9f:c1:b1:cc:6a:e5:47:fb:44:ca:
         81:67:01:92:44:9f:1c:ef:ff:17:d1:c0:3b:d6:c9:af:f3:a2:
         39:77:8b:4f:97:44:c8:fa:5a:47:aa:7e:e0:f5:ec:40:64:32:
         fd:59:78:ea:d5:e4:a5:50:84:46:b7:62:67:67:47:e8:87:e8:
         31:a4:fb:ae:d9:1d:c2:0e:04:05:36:c7:8e:f8:d5:ce:33:1a:
         81:46:68:71:39:5a:4c:9b:3f:2e:ca:7c:d9:1c:5c:7f:4b:fd:
         90:00:5c:30:96:de:79:01:36:fd:92:8f:41:a3:81:af:97:9f:
         13:23:f0:0e:ab:a5:c6:f4:cc:ef:e9:70:48:75:9d:43:c5:3b:
         cf:d9:51:bf:e6:68:ee:6d:91:c0:37:73:d2:0b:63:fa:99:7a:
         77:85:28:d5:59:a4:e8:98:60:e6:43:c6:ff:c9:2a:c0:41:5e:
         2d:e3:89:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:28:41 2025 by rpki-client