Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File:                     Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier:          Xe7U0uWr0dpqJDSorhPkInKDxpUvQlt1BcfzUy8t3wk=
Subject key identifier:   F6:59:BA:59:3D:FE:A6:B6:11:AD:D4:EE:99:C0:3D:9E:86:00:F4:BC
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer:       /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial:       0197B745397150AF18F3E24EB8E0EB1133D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number:          12E3
Signing time:             Sat 28 Jun 2025 16:00:56 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:56 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:56 +0000
Files and hashes:         1: 6JEp_TS_vsTaIMzeYjxRg8y7_V8.roa (hash: SC/T7Z+hBtwyyJiKTDTnhcNot2zvgILN7qV02Pf6Nbs=)
                          2: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: yrQr+x+eybHVRjG5p8HRVKmXUbIZxe+f2Uehu3Yo+gk=)
                          3: G3mV2aMuM8y2VDbVKoO1CvIX8jE.roa (hash: hw5cMOBfO5nlB/szU8+JwoMA13fSqw9OG26l4otUomg=)
                          4: HkRR9x0kwfCOGLQ5HGNvo9QbY3Y.roa (hash: h65bix0jyABriVc1PTgNi/FxADysyPwwSZa1akkv7og=)
                          5: u5uGdv7ahMN4VTdaMgbbpLRX3gE.roa (hash: rQgLckSzeaLo6eafpSN7kpYx8Hw/jY/LMChw/HsMXX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:39:71:50:af:18:f3:e2:4e:b8:e0:eb:11:33:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
        Validity
            Not Before: Jun 28 16:00:56 2025 GMT
            Not After : Jun 29 16:00:56 2025 GMT
        Subject: CN=f659ba593dfea6b611add4ee99c03d9e8600f4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:84:bb:bd:fe:e4:29:f6:68:df:d7:79:fc:8d:
                    03:81:d9:e0:57:fc:97:d3:20:2a:cd:61:9a:68:47:
                    7b:1c:89:34:98:63:de:54:3d:e0:8f:8e:3e:c5:d1:
                    e6:db:30:90:58:aa:9b:0b:31:44:47:fe:2e:e2:13:
                    41:b6:69:30:90:31:a2:a3:b2:6a:c0:c4:7b:d0:71:
                    bc:43:7b:ac:bc:02:80:59:4e:67:c7:7c:35:6b:ca:
                    84:75:9b:6a:8b:59:b3:b9:4d:c3:84:3d:1c:d1:b4:
                    2f:32:59:34:40:03:c7:34:e4:59:aa:e6:c9:2f:c2:
                    bd:63:c2:f1:43:55:88:11:18:9e:9b:c9:d6:e0:87:
                    18:17:e8:42:0e:c0:11:a1:36:71:55:cc:b4:fa:c3:
                    65:a5:d9:33:ba:59:b5:6b:0b:fc:90:b8:86:e0:f1:
                    e8:73:a1:1b:b6:8f:a4:cc:37:60:d1:f7:ce:ba:87:
                    20:06:e2:7c:35:12:f3:38:53:80:bf:71:1f:ce:9b:
                    7b:52:4e:44:c2:d6:35:ff:5e:e6:2b:92:e9:9b:e4:
                    79:36:ae:1f:f3:01:89:3e:4d:f4:d6:da:88:0d:e3:
                    99:1e:83:da:a4:b4:82:b8:b1:5e:d3:ea:b8:7d:97:
                    2c:9a:66:a5:bf:64:4c:56:04:a1:8c:07:8b:22:54:
                    45:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:59:BA:59:3D:FE:A6:B6:11:AD:D4:EE:99:C0:3D:9E:86:00:F4:BC
            X509v3 Authority Key Identifier:
                keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b0:e7:c0:c0:36:b2:df:ec:72:71:e0:67:6d:ef:00:74:1b:
         6c:e0:f5:3c:5c:f3:bc:d5:7b:b5:21:ea:42:c7:fb:fd:f3:f6:
         be:4a:4e:00:b3:2b:64:21:28:af:a1:0a:5e:26:d8:62:e0:cb:
         41:5e:a8:a0:a3:b8:61:99:d8:4a:14:ba:85:23:cc:5d:8e:b2:
         12:a1:9d:08:40:24:9d:5c:87:fd:c5:11:d5:7a:40:8a:d6:09:
         53:e5:ea:27:26:4a:e8:dd:7b:b3:eb:3c:46:58:7d:ec:4d:81:
         b3:82:9c:31:db:03:ae:39:4c:c5:3e:f2:50:f8:64:90:89:a0:
         d9:cc:1b:98:58:1b:02:48:73:57:02:00:fb:bb:43:c1:5b:e3:
         07:6a:d5:c0:3d:7e:43:4b:e0:85:16:17:ba:ad:9d:15:f8:0d:
         92:77:16:ce:91:ff:00:58:6f:67:b3:f2:6a:c9:b1:eb:03:4d:
         86:0b:99:12:87:d5:ef:44:e6:08:e5:b0:e8:53:d9:7c:79:22:
         0a:08:d1:e2:7f:32:87:ea:a4:08:b3:aa:7b:e9:52:48:5e:74:
         ab:7d:de:a3:6c:2b:69:b7:6d:87:6d:9b:16:5b:8f:ad:7b:19:
         36:45:3b:47:a3:8a:cb:01:3c:65:26:ec:2c:e4:73:c5:8d:c2:
         00:3d:01:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:39 2025 by rpki-client