Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
File:                     b_xyU8DaFbVuAJVzGhDCu61sEX4.mft (raw, json)
Hash identifier:          0l89Lr9f7SfnJ8wGWQQfA2mJK66JE6rrzcevhac4AMk=
Subject key identifier:   EE:47:54:94:2B:50:B9:1E:8B:40:FE:06:6C:19:38:13:2B:34:41:CE
Authority key identifier: 6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
Certificate issuer:       /CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Certificate serial:       0197B7B30D4A0CEAD097374C9E3BE5EBF31E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
Manifest number:          040C
Signing time:             Sat 28 Jun 2025 18:00:54 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:54 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:54 +0000
Files and hashes:         1: ViU3nx0KMvyzkw-cFoaI3YiJf24.roa (hash: 2MVqhG3jfXK0CnKSuEcQLvgpRXs6MX1MKLdphJMDw6E=)
                          2: b_xyU8DaFbVuAJVzGhDCu61sEX4.crl (hash: tGArNxkpHsofQxTYiVZALKJoAY/5V6v1tn+Sjm2HftM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:0d:4a:0c:ea:d0:97:37:4c:9e:3b:e5:eb:f3:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
        Validity
            Not Before: Jun 28 18:00:54 2025 GMT
            Not After : Jun 29 18:00:54 2025 GMT
        Subject: CN=ee4754942b50b91e8b40fe066c1938132b3441ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dd:ea:61:38:2b:7d:b2:90:09:50:2c:7f:03:
                    ee:65:a5:f4:90:21:8f:64:a4:f1:87:50:46:3e:a8:
                    a4:8a:b8:70:c8:bf:26:a4:af:a7:1c:47:85:2e:78:
                    58:9d:54:f9:39:59:2d:12:0a:1f:cf:e8:54:2b:7e:
                    3a:79:d0:89:04:46:70:28:38:43:3e:13:69:b6:bf:
                    85:f5:23:e3:d1:8a:ce:89:60:9e:d8:df:71:6a:fa:
                    37:42:39:1f:c9:69:08:13:11:bb:61:55:a8:1d:c7:
                    68:b6:be:4c:f8:76:bb:7d:d7:8a:03:d3:a4:a6:7a:
                    b7:88:b9:f5:61:46:91:89:b8:8d:83:a7:4a:1f:4c:
                    7a:61:55:45:a6:23:ed:f5:f3:fe:f5:b1:14:84:52:
                    c7:55:b0:90:d7:6d:7f:1e:40:f9:5a:3f:78:b2:21:
                    22:cf:6e:6c:5e:f8:87:9b:22:e5:a1:dc:11:9c:b4:
                    ec:76:7a:2e:11:85:57:a2:7b:2c:3e:68:3b:36:ed:
                    a0:51:11:fa:67:3a:a4:b4:6c:36:6c:0a:35:48:13:
                    93:b7:d1:9c:ed:7e:bc:5e:11:7c:61:8c:be:92:f8:
                    60:46:53:23:c7:9e:f8:19:1d:d8:8a:28:e9:44:ed:
                    15:47:d8:76:70:40:d8:27:ae:4f:54:fa:fb:c6:90:
                    e8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:47:54:94:2B:50:B9:1E:8B:40:FE:06:6C:19:38:13:2B:34:41:CE
            X509v3 Authority Key Identifier:
                keyid:6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:09:e9:43:63:a5:4a:74:d2:0e:07:6f:50:0c:5e:65:7b:ce:
         ce:b2:2c:23:91:78:bf:ef:7d:6c:2e:fc:c9:e4:f1:b8:f0:8e:
         3a:be:a0:f6:17:86:cc:4c:5a:58:0e:75:78:7e:95:8b:02:53:
         59:5e:64:2f:f5:e8:ae:fd:d4:6c:26:04:40:31:92:09:49:fe:
         97:bc:dd:8d:3a:2f:58:5a:f5:b7:41:6a:82:cc:d0:f1:bb:10:
         b8:22:00:62:23:6b:ca:c6:3f:93:38:63:09:4b:03:a5:d2:21:
         1c:9d:73:4b:bd:a5:85:37:09:ae:b5:f4:4a:4d:fd:b9:ff:48:
         59:a6:cd:d0:1d:2c:f9:90:2d:d8:aa:cc:7c:f6:3d:c4:d1:58:
         f6:64:be:62:44:03:7f:46:24:ff:d5:de:d8:85:b3:bf:d7:27:
         73:9b:24:89:bc:fc:d3:8f:08:3f:8c:61:85:a1:1f:e2:bd:c5:
         ce:62:bc:5c:3f:d6:11:f8:3e:44:80:0c:11:9d:90:d9:9b:01:
         4a:96:ff:eb:cb:50:4c:18:0c:53:c9:c0:d8:81:68:1b:69:44:
         c3:32:2a:34:f7:93:82:85:23:cd:c8:c0:b7:ef:5a:d7:dd:fd:
         43:f0:ed:b4:cd:50:70:fb:97:0d:c1:60:46:b7:17:a6:aa:b5:
         b3:18:e5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:05 2025 by rpki-client