Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
File:                     34-WHG77t_nOdCF7HV27VOmBxvI.mft (raw, json)
Hash identifier:          7tm/lcmNH4MRyHoGwXg/9cTcVJCd/7tIJvSYiuaxy/g=
Subject key identifier:   00:2B:05:C1:7B:71:8D:C5:7E:58:60:1E:73:E9:BC:32:D6:48:10:D4
Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
Certificate issuer:       /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Certificate serial:       0197B6A2152E98D738B1FCF52FF414EE221B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
Manifest number:          13BE
Signing time:             Sat 28 Jun 2025 13:02:44 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:44 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:44 +0000
Files and hashes:         1: 1-v8iJMG7kLw-Yc0NKyQwCiTKUnA.roa (hash: 48U7KANlM4mdm3YNX/H5iviEyFzNYK943ewQoT71/5Q=)
                          2: 34-WHG77t_nOdCF7HV27VOmBxvI.crl (hash: 99506kIXjakEtxniUlEJ1HPYkrNuUOkZVNt885BGDGQ=)
                          3: GSGxmFMOldMDBn5u7DfvJzXbYCo.roa (hash: un2PEVowSPZIo87TGOOK/KPKdTl+4fijd3wEZf387m4=)
                          4: dbsBfIyjlvnJeHFT9yt_2dWfazQ.roa (hash: bQniy8nZ8a6zJ0Od+7AKUQSXFo7deYGH7yzxQPJEcPg=)
                          5: gMAN3v03uAddPu9H4UyvEE9OaL4.roa (hash: wpVmJrhPOGtID7FbjO+SJT/k3IVxP28J+1YCanP25FQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:15:2e:98:d7:38:b1:fc:f5:2f:f4:14:ee:22:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
        Validity
            Not Before: Jun 28 13:02:44 2025 GMT
            Not After : Jun 29 13:02:44 2025 GMT
        Subject: CN=002b05c17b718dc57e58601e73e9bc32d64810d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dc:93:6b:17:b1:d7:fb:7b:a3:ac:e7:34:a6:
                    c0:d4:49:93:59:ed:85:f7:dc:d5:9f:26:2a:da:f1:
                    d3:32:ed:65:69:1e:54:23:e2:3f:ca:68:11:5a:eb:
                    44:67:e8:50:48:dd:32:f8:9d:7e:5b:25:74:d0:fb:
                    c6:89:20:49:04:b3:b2:9e:f9:fa:0e:33:78:e0:7b:
                    77:23:58:57:ea:3d:b5:fe:60:a6:fb:85:d6:5b:d8:
                    b2:e2:82:51:b7:b4:bd:c6:09:f2:16:41:d5:11:8b:
                    ca:8d:61:20:cd:da:6e:55:ac:2c:ed:d5:e0:5a:c0:
                    d9:c7:43:74:71:1d:18:5a:1c:5f:9a:e3:52:d1:2f:
                    86:56:7b:11:90:b3:e0:b3:76:22:f6:64:65:8e:56:
                    42:ff:4b:c7:47:32:03:2c:58:d1:0d:16:be:41:8f:
                    3f:7c:45:30:55:e3:3d:a0:9c:c0:bf:c5:2c:e7:88:
                    97:0a:42:37:d7:25:53:e7:b7:b9:d4:dd:9a:1e:17:
                    d7:6f:01:0b:e8:06:67:3d:05:bb:80:b1:80:57:0c:
                    44:d0:07:4f:ea:ae:38:fb:ed:e8:92:7e:ad:c2:0a:
                    77:a8:b5:b5:7c:d9:63:2d:a2:88:0c:1b:cb:83:98:
                    04:2e:57:b7:6f:c9:d0:3e:8b:b7:97:90:b2:fb:73:
                    c5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2B:05:C1:7B:71:8D:C5:7E:58:60:1E:73:E9:BC:32:D6:48:10:D4
            X509v3 Authority Key Identifier:
                keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:1c:40:21:c8:0f:73:ec:a5:6f:64:a4:db:eb:6c:ab:7b:24:
         a0:5d:f2:fd:9d:13:6f:e1:35:c3:2b:f6:0e:da:d4:55:12:71:
         03:e0:f5:5b:b1:bc:52:01:1f:bb:15:d5:8c:76:5e:c1:92:65:
         a5:7b:bb:da:55:5a:47:e5:36:6b:7a:0d:07:57:60:4b:8e:1c:
         44:72:75:99:5a:2f:5c:1b:6d:12:0c:aa:14:8f:51:4b:43:37:
         17:c1:94:a8:cc:34:c7:c8:2e:b1:75:85:a6:c3:59:b9:48:67:
         7b:0f:f1:4e:21:8f:f7:60:17:67:4a:ea:a0:a7:87:a5:c7:8f:
         1d:a7:67:5a:fe:e7:bc:a7:d4:b2:b6:bb:34:40:e2:13:2c:c7:
         f1:fb:d2:d1:4f:64:82:13:10:db:dd:6f:33:5f:37:7d:9c:77:
         86:cc:d7:0b:51:6c:13:a9:76:41:74:5e:5d:58:a6:f5:d3:de:
         76:b8:32:3c:52:64:a0:58:c3:65:73:66:02:44:a4:84:29:e7:
         31:f9:5a:3b:46:64:96:cd:52:f7:f5:c0:0c:28:a2:17:05:60:
         e2:6a:b5:ef:ae:bc:fb:99:b4:a4:5c:75:00:e3:ea:f4:72:05:
         c4:33:cd:0f:70:5b:82:a2:1c:af:b3:46:86:15:bc:d4:8d:dc:
         b1:ca:52:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:19 2025 by rpki-client