Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
File:                     uMaM2mX2aWLMuWg_FVDRTlYQego.mft (raw, json)
Hash identifier:          nzisrdGxzNJHXe2OJGjoBn7J+EyAFPcQzr+l+d+O9A8=
Subject key identifier:   0F:9E:74:15:03:94:A2:4A:81:11:AD:3D:40:43:59:2E:46:9A:D5:DA
Authority key identifier: B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A
Certificate issuer:       /CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
Certificate serial:       0197B9A1B848327214E396E9B4BC7FAEB695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
Manifest number:          06C5
Signing time:             Sun 29 Jun 2025 03:01:12 +0000
Manifest this update:     Sun 29 Jun 2025 03:01:12 +0000
Manifest next update:     Mon 30 Jun 2025 03:01:12 +0000
Files and hashes:         1: sIDOXg67yEuo_7naS_BfCVLmcEk.roa (hash: d8agrpVd7dmHrJl/IhvjPgn5Td9Dpm4TU3p5w1Cxjt0=)
                          2: uMaM2mX2aWLMuWg_FVDRTlYQego.crl (hash: fsjDEgqSCnANH/F4zO+9vGgYMMgpTwhsJdJYXR0ADdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:a1:b8:48:32:72:14:e3:96:e9:b4:bc:7f:ae:b6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
        Validity
            Not Before: Jun 29 03:01:12 2025 GMT
            Not After : Jun 30 03:01:12 2025 GMT
        Subject: CN=0f9e74150394a24a8111ad3d4043592e469ad5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ce:7e:90:5e:b6:84:c1:56:47:ae:0f:84:d2:
                    85:f5:af:b4:66:60:8f:7b:2a:9e:43:5e:6b:67:1d:
                    55:9f:f2:96:e5:48:f5:20:b5:17:e6:fa:07:8f:bb:
                    e8:72:13:cb:58:95:14:bc:6c:88:64:a3:ae:a8:55:
                    d2:71:69:c6:59:f1:da:70:58:94:46:8e:7a:57:22:
                    aa:5e:20:4d:5a:1d:aa:52:2a:1e:ac:fc:69:0b:79:
                    a7:c9:03:a9:b0:dd:82:2a:55:9b:c4:2e:dc:c1:a4:
                    05:f9:7b:ac:ef:82:17:1e:2e:b8:63:ab:1f:a0:bf:
                    e5:d2:de:25:bd:b5:76:02:7a:b8:98:41:b1:d3:b5:
                    e7:66:dc:66:44:26:92:ef:7a:d3:70:ab:1e:09:29:
                    bb:93:13:b9:2c:1a:98:2b:31:c1:4f:77:d9:1b:8c:
                    ce:0a:b0:35:2d:2b:43:78:f2:83:b3:30:15:26:36:
                    be:1d:f1:b1:a1:a4:ba:33:54:18:5f:50:43:89:84:
                    7c:cf:58:59:9c:ff:83:c3:74:95:ae:ea:b7:36:83:
                    20:3f:21:f2:31:da:f7:4d:de:4a:16:09:33:cb:47:
                    d5:17:db:cb:f0:86:11:1b:e4:9f:e7:08:b9:b5:60:
                    ae:9c:e8:43:6a:2c:af:74:47:21:3d:78:f0:7d:f6:
                    e9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9E:74:15:03:94:A2:4A:81:11:AD:3D:40:43:59:2E:46:9A:D5:DA
            X509v3 Authority Key Identifier:
                keyid:B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f0:e9:3e:7c:db:3e:fd:7d:6a:73:69:21:00:0e:c1:79:41:
         c1:4a:e9:85:8f:17:ee:95:67:92:86:95:8c:ac:d1:8a:52:72:
         f5:25:0d:71:ab:bb:09:46:8c:10:36:dd:e6:91:2e:64:6f:ea:
         19:9a:47:ab:41:44:61:da:70:4b:07:9f:48:c8:06:e8:d8:cf:
         22:8b:f5:b1:87:29:4b:50:40:83:c5:17:60:88:65:8d:23:d8:
         aa:62:33:15:9b:50:06:f8:c1:22:90:13:f4:bf:07:18:2c:ed:
         78:50:4b:6b:28:4e:1c:bc:20:eb:d0:20:47:7c:1e:33:d3:6b:
         0d:53:82:1b:9a:47:d6:dd:3e:85:fd:63:81:98:69:09:70:31:
         56:91:95:55:39:0c:e4:ec:08:45:5a:82:7c:bf:87:51:85:8e:
         3c:a2:96:c5:7a:92:7e:b3:e1:9a:e9:00:3b:bc:cf:8f:45:37:
         be:47:99:60:37:b1:17:80:7f:fe:e8:c0:35:b6:15:6e:ef:9f:
         6d:20:56:9d:8b:c5:cb:b0:ed:f8:5c:1d:39:46:90:bb:6f:87:
         7f:69:57:8e:29:d7:17:c4:83:7a:0f:66:63:c6:fd:68:b1:5e:
         33:0e:26:cd:99:90:ad:2c:ab:35:19:57:d5:a7:f6:d1:39:b6:
         b9:c8:a4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:44:38 2025 by rpki-client