Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
File:                     siZANRqyGg3HqqFfq1sRCXdxSjw.mft (raw, json)
Hash identifier:          HWl57q5UXmDYHsxuw/wZJzmcz46LmsnqTnr6OJ+MwJE=
Subject key identifier:   67:D2:EC:91:FB:A8:16:4F:74:97:9B:2E:CB:85:D8:9F:C2:4F:47:4A
Authority key identifier: B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
Certificate issuer:       /CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Certificate serial:       0197BA7D0A74A837E9D6C29ADF85E5C0579A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
Manifest number:          04CF
Signing time:             Sun 29 Jun 2025 07:00:46 +0000
Manifest this update:     Sun 29 Jun 2025 07:00:46 +0000
Manifest next update:     Mon 30 Jun 2025 07:00:46 +0000
Files and hashes:         1: 1-j6fBxJdZjlJHBF2ibCNebRhqEM.roa (hash: uIMEk9ImImh0LKeroj/KniV/ALKfCS7zdFrx5Ghb2Ho=)
                          2: 4fc8oS9l6XipIztCEOKX5rStKEs.roa (hash: QJlqsQqRFXjTlCtGRezlM1Uj5b/+zIGZvP1ClcUSG6U=)
                          3: iC_8dMVxXZ00UyStzCwzLDNTo54.roa (hash: XW49T+GyZoj1zoB/seC/GjDOMUSaP8XJ+XDar1fKOFQ=)
                          4: siZANRqyGg3HqqFfq1sRCXdxSjw.crl (hash: AV5BY7iN4zC0PPC/b1M7AhYWegvcd8WDAmYHd4+YzI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:7d:0a:74:a8:37:e9:d6:c2:9a:df:85:e5:c0:57:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
        Validity
            Not Before: Jun 29 07:00:46 2025 GMT
            Not After : Jun 30 07:00:46 2025 GMT
        Subject: CN=67d2ec91fba8164f74979b2ecb85d89fc24f474a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b1:53:f2:96:b8:15:89:15:44:3c:94:ac:4b:
                    d0:0d:3d:c8:03:6e:39:5f:9e:7b:3b:d1:1e:cb:d9:
                    0b:7b:3c:79:97:a6:01:27:e4:91:fd:b3:bc:5b:c8:
                    69:3c:55:47:7a:ee:e9:22:10:62:31:4c:40:67:a3:
                    41:63:a7:17:b2:5c:7c:af:39:28:62:92:cc:3c:22:
                    e5:4b:65:7a:9e:18:cc:43:96:f9:d2:af:30:53:63:
                    0f:93:a2:e2:a5:83:6e:b5:48:ac:db:64:60:a2:ef:
                    3f:f0:08:cf:84:09:cf:70:4f:3e:82:8e:94:00:c0:
                    2c:20:22:73:cd:43:f7:76:ba:58:46:99:23:33:1b:
                    4e:b8:2e:44:0e:b6:c2:e6:f9:55:1f:81:b0:df:36:
                    db:9a:e7:9c:55:49:17:12:8d:6f:3b:3b:61:2e:67:
                    72:17:32:ed:98:09:dc:ff:0d:09:89:99:2b:ae:58:
                    b9:d9:0b:10:86:d7:47:0d:ca:20:d2:fe:32:91:39:
                    88:f4:81:53:f3:0b:0d:fa:38:8a:c0:d9:29:47:a2:
                    c8:7f:72:e0:4b:0c:8f:ae:0c:ff:56:77:d3:93:83:
                    08:3f:7c:6c:e1:bb:25:0f:b7:a8:18:90:d2:d6:b6:
                    60:bf:6b:5f:a0:52:fd:04:ac:b5:a6:1d:d4:c7:c3:
                    e5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D2:EC:91:FB:A8:16:4F:74:97:9B:2E:CB:85:D8:9F:C2:4F:47:4A
            X509v3 Authority Key Identifier:
                keyid:B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:62:62:1e:73:1a:31:59:15:7c:ff:d5:54:b8:cf:c8:17:b0:
         3f:fa:01:76:b9:3f:2e:55:f5:92:9a:03:0d:ba:06:99:3a:a1:
         fe:82:f1:f0:b5:c7:bb:be:ab:09:fa:05:7b:33:ea:1e:64:32:
         ac:c6:e3:57:40:bc:ec:73:97:ed:73:88:4e:3c:02:cb:4d:90:
         7b:07:13:ad:d6:47:27:56:ca:12:02:df:4d:47:a0:fc:1e:bb:
         6f:05:8f:c6:d6:c4:56:dd:fe:c9:b0:c9:db:16:26:d5:d2:80:
         77:32:42:b5:70:a7:f3:ba:72:ea:d0:e6:fb:ae:2a:43:f7:20:
         ab:85:66:2f:ec:e7:95:d2:5b:c0:75:ec:42:e3:16:1f:8b:cc:
         6e:00:c5:d7:e7:e9:5b:dd:cf:b1:20:8e:93:be:83:a5:08:aa:
         0e:d5:95:c4:31:30:bc:5e:55:23:94:a0:73:a8:5a:ba:49:29:
         67:3d:c5:e5:91:3a:d2:b4:6a:e6:3b:70:3b:81:94:84:4d:fc:
         8c:d5:07:44:ec:a3:a9:a5:3a:77:72:b0:58:15:12:71:ff:7c:
         fb:d9:86:19:12:68:16:c2:95:b6:59:bc:fe:3f:e0:d0:63:42:
         91:71:19:20:bf:79:4a:2a:53:65:98:90:e0:4b:f0:b6:bc:dc:
         ba:31:87:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:28:27 2025 by rpki-client