Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
File:                     mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft (raw, json)
Hash identifier:          eBNZdhMeIGoYVsaxiF9BK/8VAeJJAPOTZkTBWtrI6rk=
Subject key identifier:   42:5B:D1:22:25:4C:AE:1D:1F:75:BB:8D:8B:26:7E:F5:4B:73:22:1B
Authority key identifier: 99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D
Certificate issuer:       /CN=998674263fccd07f684e1e199302eeefe783fb3d
Certificate serial:       0197C492F858258419D98D586B91614C3326
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
Manifest number:          0AED
Signing time:             Tue 01 Jul 2025 06:00:55 +0000
Manifest this update:     Tue 01 Jul 2025 06:00:55 +0000
Manifest next update:     Wed 02 Jul 2025 06:00:55 +0000
Files and hashes:         1: LB9yxSJR9ouxobcPst7y075Gi24.roa (hash: 9cHQrj6vkKZZg+caaJv03RON5UELRQ6rlqWUQeFM15Y=)
                          2: mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl (hash: HPJO94EPkZHtFtzOXL4fV86NedpyVFUv7cMOlIG+ehI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c4:92:f8:58:25:84:19:d9:8d:58:6b:91:61:4c:33:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=998674263fccd07f684e1e199302eeefe783fb3d
        Validity
            Not Before: Jul  1 06:00:55 2025 GMT
            Not After : Jul  2 06:00:55 2025 GMT
        Subject: CN=425bd122254cae1d1f75bb8d8b267ef54b73221b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:de:f9:b9:24:bf:4f:a2:de:f8:70:68:03:88:
                    47:1c:cb:86:fc:93:91:f5:95:ae:45:3a:6d:f9:f6:
                    a8:c1:35:c2:52:10:57:c6:05:11:2c:00:cd:f3:b4:
                    9d:ec:13:ab:15:fb:e6:eb:78:f5:9b:32:7a:89:ec:
                    bc:a1:9d:fe:f2:e8:33:f7:ea:06:6c:6e:f4:0e:e7:
                    08:54:82:07:c4:8d:0d:c1:45:0a:d3:a8:83:23:d2:
                    b4:b7:96:3a:2e:69:b9:fa:05:4b:3b:76:3f:a8:97:
                    87:c1:56:e4:f2:3b:ab:37:fd:6f:68:68:ec:c8:c7:
                    83:a2:0e:0c:1e:6d:1b:ca:fd:7f:93:9f:85:c4:f6:
                    0c:59:c2:ff:5d:74:1c:c0:4c:f4:e9:57:97:15:62:
                    be:a2:a0:74:17:9d:90:d8:aa:d5:59:f2:1d:14:f5:
                    ca:ec:20:d4:87:80:e2:f7:35:5f:7a:c1:2e:62:6d:
                    3b:f3:53:57:37:c4:26:6c:47:f0:52:01:b2:2a:f5:
                    61:c2:68:eb:e0:91:c6:f1:c5:36:f0:aa:42:f2:0f:
                    d2:9c:e1:30:eb:a3:bd:63:e4:17:6e:cd:7d:89:67:
                    ee:65:4d:36:c7:6d:76:a6:d2:25:35:34:bc:cc:d1:
                    49:8a:74:d0:64:78:0f:55:fa:9a:7e:cf:18:97:c4:
                    1d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5B:D1:22:25:4C:AE:1D:1F:75:BB:8D:8B:26:7E:F5:4B:73:22:1B
            X509v3 Authority Key Identifier:
                keyid:99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a5:11:85:62:4d:9f:9f:3c:38:e6:ff:32:8a:3c:d1:33:43:
         6a:ad:b0:59:31:15:23:c9:f8:0a:16:89:28:82:1c:ff:6d:dd:
         15:5b:cb:61:cb:7c:0e:6c:f8:fc:3f:c8:b5:71:35:8f:14:48:
         44:63:e4:8b:a3:c7:68:8d:8a:c9:2f:8a:4b:dc:dd:aa:d8:2a:
         61:19:6f:0a:d3:37:ac:d8:0c:d8:34:63:3b:7a:17:0f:0e:65:
         07:b2:0c:6c:a1:2a:10:54:49:b9:5e:4b:d9:20:af:f2:b8:bd:
         f7:d8:0d:9b:9e:37:5a:2d:52:27:a2:20:28:52:c0:74:2d:65:
         b6:c4:85:06:63:93:23:c0:07:f9:ab:16:b0:7a:dd:e2:02:60:
         0e:f1:f8:5b:e4:96:be:e0:d2:7f:1c:c6:ae:22:52:79:73:32:
         7e:64:32:a4:1d:e0:6e:b6:7c:f0:89:c0:6e:85:01:08:d3:67:
         e7:41:c5:81:7c:56:6a:9d:fc:55:14:0b:b3:f4:74:3d:93:76:
         08:e2:15:f0:93:2a:5d:61:94:d5:8e:b0:5b:f4:2f:97:64:d2:
         29:05:05:22:ff:51:50:d5:fa:7a:e4:ed:b7:cb:69:0b:d1:65:
         9f:55:28:82:c1:f0:f2:40:ff:6a:03:41:f6:21:7b:b7:c0:af:
         c7:99:13:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:49:07 2025 by rpki-client