Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
File:                     j-YTvuu37zaZLASRrROyZwcFcmA.mft (raw, json)
Hash identifier:          oEst/JLPbMbbS3zOpjxLJAU94DRXKsGG5k1pvA/mbA8=
Subject key identifier:   EA:7D:96:5D:C6:B2:93:B6:DF:CE:5C:A5:C7:14:E7:31:04:97:4F:41
Authority key identifier: 8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
Certificate issuer:       /CN=8fe613beebb7ef36992c0491ad13b26707057260
Certificate serial:       0197B820ED0303AC8608A270C7A9125B477C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
Manifest number:          0B46
Signing time:             Sat 28 Jun 2025 20:00:54 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:54 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:54 +0000
Files and hashes:         1: M8YwlBl4UsZFSGK22ajYHB1I9kk.roa (hash: NMhetTmMl7auiquiJXvinAOe9UpVWlWTrYgSxnLH8n8=)
                          2: j-YTvuu37zaZLASRrROyZwcFcmA.crl (hash: kwWvT9mgbwWqG3wbusmZNEW/l0DAJL9eynWzVwqJHFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:ed:03:03:ac:86:08:a2:70:c7:a9:12:5b:47:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fe613beebb7ef36992c0491ad13b26707057260
        Validity
            Not Before: Jun 28 20:00:54 2025 GMT
            Not After : Jun 29 20:00:54 2025 GMT
        Subject: CN=ea7d965dc6b293b6dfce5ca5c714e73104974f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ba:72:c0:33:89:d3:09:a3:0a:69:fa:07:d4:
                    eb:b6:6c:35:75:0a:84:3a:2b:c1:6a:03:c1:fd:cf:
                    78:f0:3d:d6:0b:ea:fd:fc:ab:60:3b:3f:d7:83:c3:
                    cf:c7:5b:1f:4a:2e:0d:e1:c5:9b:35:f9:e8:b9:ea:
                    5d:84:d6:b2:4c:99:43:81:4a:3d:a5:1c:22:e5:fc:
                    d5:e7:fc:fb:3d:4c:8b:21:fd:e3:81:9c:86:c6:db:
                    34:31:bf:0a:f0:d3:19:bf:cd:12:fd:09:9c:90:4a:
                    31:74:b8:58:21:ad:ff:25:69:c6:ad:bb:4f:49:16:
                    71:b7:14:cb:fa:25:f6:2b:46:10:7a:89:d0:63:eb:
                    fc:a2:50:6d:94:80:29:a5:81:08:45:d2:4e:0e:a0:
                    26:66:fc:f8:bd:ff:af:7a:1a:cb:25:74:98:c5:03:
                    c0:b4:db:c7:18:3b:ef:55:df:49:12:a2:16:d0:a4:
                    1b:90:ea:a2:a4:86:a8:db:31:b5:7d:b3:6f:fc:47:
                    3b:c7:82:09:f4:97:3a:5a:47:02:4d:b1:b4:90:1c:
                    e4:5a:4d:07:c4:73:ea:08:84:09:58:4c:2a:05:6c:
                    e6:b0:2e:17:1b:9c:10:11:1f:95:0d:25:d0:f7:6d:
                    74:36:80:1b:39:ce:ab:54:ea:a6:c8:2c:51:02:6b:
                    77:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7D:96:5D:C6:B2:93:B6:DF:CE:5C:A5:C7:14:E7:31:04:97:4F:41
            X509v3 Authority Key Identifier:
                keyid:8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:42:03:0f:ca:26:8c:bd:64:56:d0:3c:b5:e2:fe:e7:14:87:
         da:2a:16:a3:5b:ba:84:14:3d:af:b8:0f:15:8c:57:e8:53:09:
         a0:69:c9:f7:fa:f6:92:f8:3a:b5:0f:30:f7:0e:54:91:45:fb:
         af:91:6f:19:8c:d3:a0:4a:f3:3e:13:f0:8c:90:69:d7:26:9e:
         cb:5d:09:2a:40:9c:52:0f:c2:f8:30:f7:e6:39:8f:fa:e9:4b:
         23:a2:33:74:54:4a:3b:31:24:0d:5e:98:8a:59:59:9a:23:0e:
         51:d3:c6:cd:44:64:d2:5e:ca:e7:d3:9d:aa:71:be:0f:a8:66:
         a6:a0:ce:1e:7a:0e:d2:7a:53:2e:e2:55:1f:17:82:e5:35:a9:
         5d:7f:b1:93:75:6d:ea:7c:eb:76:f6:12:48:9e:9b:f7:bd:9c:
         8e:5a:a8:77:05:8d:0a:a7:80:43:ba:0d:1b:62:43:3c:4b:65:
         0b:ae:00:d3:5c:78:43:9c:82:13:c2:d9:9b:f7:08:a8:4f:65:
         3a:ae:01:37:d9:41:98:4f:02:85:79:dd:ce:11:b9:cd:3f:20:
         87:3f:7e:b2:4b:ca:97:34:f7:14:8e:3b:4b:89:11:8f:f4:e2:
         3b:69:88:a1:8a:43:91:1b:7a:32:44:80:0e:e0:f6:93:29:10:
         0b:8d:de:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:42:59 2025 by rpki-client