Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
File:                     A-pQioW8c6mqogOop7r5wWLm82w.mft (raw, json)
Hash identifier:          CZVv9psl5FlfT26pLmwk3q6j4kJjdhcKoWZlNrpMsyw=
Subject key identifier:   1C:16:2F:6A:E2:8E:13:B8:E2:CE:35:A8:BF:27:99:3E:0E:0D:74:87
Authority key identifier: 03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C
Certificate issuer:       /CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c
Certificate serial:       0197CEDFFD8A848FE5FB2F943863F430A761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
Manifest number:          0733
Signing time:             Thu 03 Jul 2025 06:01:15 +0000
Manifest this update:     Thu 03 Jul 2025 06:01:15 +0000
Manifest next update:     Fri 04 Jul 2025 06:01:15 +0000
Files and hashes:         1: 2j9Y51xwRYelF6JrKcKDFxJ1u_0.roa (hash: 0/wxjfgZFvKq0jXNMFirhtTQajhUkEHAhxXEqfHBgNk=)
                          2: A-pQioW8c6mqogOop7r5wWLm82w.crl (hash: +1mknUR1XGK+c2houWh5c+9qL7sghI51aoDG9SRokFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ce:df:fd:8a:84:8f:e5:fb:2f:94:38:63:f4:30:a7:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c
        Validity
            Not Before: Jul  3 06:01:15 2025 GMT
            Not After : Jul  4 06:01:15 2025 GMT
        Subject: CN=1c162f6ae28e13b8e2ce35a8bf27993e0e0d7487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0b:43:a8:38:c6:d0:bf:44:76:d9:25:bc:97:
                    67:cd:c3:d8:ea:d6:96:70:52:ea:e2:d3:7e:a0:a1:
                    d8:3d:6c:94:bc:4a:d0:ef:42:b6:e1:50:34:46:c6:
                    40:09:2a:c6:ef:1c:eb:c2:35:15:92:1b:3d:40:b9:
                    ef:2d:4d:70:aa:cf:a8:51:ce:95:f4:a4:5e:d7:00:
                    d8:4e:c9:73:fe:36:83:c8:56:a0:c7:2c:47:46:36:
                    2e:16:b1:85:eb:65:09:db:8d:d6:83:66:28:88:89:
                    39:da:6a:07:20:8a:f2:44:47:4b:45:e6:d3:a4:0c:
                    a8:0b:a4:98:14:61:01:a2:1c:9b:cd:5c:b9:9c:1e:
                    ae:f4:d7:18:a2:73:7b:e3:38:37:b5:ef:69:9b:0d:
                    39:17:56:03:7e:18:38:b1:f4:98:bb:ce:a9:a6:13:
                    0a:00:c3:91:75:c7:e7:ab:b7:61:90:49:be:a3:2b:
                    5f:74:81:22:4d:f0:f3:1c:f8:62:58:76:10:b4:f2:
                    dc:a8:7b:6c:81:59:1b:63:64:b4:e4:9d:83:12:41:
                    97:bb:db:e7:02:41:9f:37:32:8b:90:dd:df:64:e8:
                    1e:24:e9:d6:18:38:12:ef:79:e1:5b:fd:e3:ad:63:
                    2a:8c:40:38:da:d1:5f:40:ee:55:2a:bd:34:46:55:
                    88:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:16:2F:6A:E2:8E:13:B8:E2:CE:35:A8:BF:27:99:3E:0E:0D:74:87
            X509v3 Authority Key Identifier:
                keyid:03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:3d:d6:15:c3:e9:0b:2d:f8:e9:39:87:61:0f:5a:a5:b1:4b:
         62:27:fe:67:83:5c:e3:25:41:5a:49:57:42:c0:0a:1f:9d:46:
         9c:4f:d7:64:ce:d5:2e:80:ba:d2:b2:cc:32:88:24:ef:f2:09:
         73:f5:a9:7d:ab:68:e1:0f:39:f6:90:60:1d:fd:92:b5:2e:9b:
         e5:03:0e:b8:f1:dd:92:30:5c:ff:8e:94:97:25:87:01:c3:e3:
         2e:e2:45:ee:c0:22:bd:f8:7f:8c:10:29:04:17:50:af:eb:5e:
         92:18:0f:52:bb:d8:0f:b2:9b:a2:5b:13:32:c7:b3:a3:bf:f8:
         15:cf:28:67:57:fd:3a:e1:8d:bc:52:39:3a:f0:cb:37:29:8a:
         62:42:b3:dd:9f:1f:8f:b0:fa:9c:f1:48:91:1a:7a:32:7e:af:
         47:c8:2a:ec:67:f8:31:88:80:02:b9:71:5b:2c:b1:3f:54:d6:
         e1:77:0e:8c:74:86:78:4a:39:07:b7:17:69:88:8e:01:dc:62:
         b3:46:ad:f4:44:0f:25:ad:b6:3d:9c:2a:e2:3e:24:34:bb:99:
         c4:63:f6:be:74:a1:21:6e:71:99:a0:d2:d9:10:95:e1:bd:0b:
         97:01:ec:bc:c0:39:3e:da:73:cf:a7:59:40:ab:9e:c5:c6:eb:
         32:4a:9e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:31:27 2025 by rpki-client