Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
File:                     i992xUueaTXDCptMm6kwmsRw7AI.mft (raw, json)
Hash identifier:          okcorjxIivNPC4h3oYVfeSGTedd4nNDZQgQ9oMyaaZI=
Subject key identifier:   52:9E:A9:A0:A7:4B:E4:8E:5D:8D:9F:4A:81:31:BA:91:EA:42:B6:F4
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Certificate issuer:       /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial:       0197B8C5C5D501AE3BA862D96F63B37D3622
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
Manifest number:          12DC
Signing time:             Sat 28 Jun 2025 23:00:58 +0000
Manifest this update:     Sat 28 Jun 2025 23:00:58 +0000
Manifest next update:     Sun 29 Jun 2025 23:00:58 +0000
Files and hashes:         1: LJ7hoCqQnwfHChqeU9U8SkKdeqI.roa (hash: 8CqH09siYzyZJ5O1vmsPNnnOW14dzrYfcCdsDYcxu10=)
                          2: VmLWF2kLf7eTv8bwMXbk9b_Me2E.roa (hash: 1ItZnIffXoYbRBfY7mSWO6cvW2p6OOPwlCKSIhvogDA=)
                          3: Zrtik5m7bnw4gbxdEJLGgHXAz9o.roa (hash: ztZ7RR7wyKUwf1RAErkEUuWfC4cJblHm2hjCh/OBgRU=)
                          4: hWi--eNkI9TK8tV0GdIuvuJQyDc.roa (hash: h6dcszo7jHVlG8sKlZpn1qh++xSjCv//ZGRVVxrrlrM=)
                          5: i992xUueaTXDCptMm6kwmsRw7AI.crl (hash: wGC5SyE3G1YGRWwMAX2PEejQZdUiewvPIa744/5uDvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:c5:c5:d5:01:ae:3b:a8:62:d9:6f:63:b3:7d:36:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
        Validity
            Not Before: Jun 28 23:00:58 2025 GMT
            Not After : Jun 29 23:00:58 2025 GMT
        Subject: CN=529ea9a0a74be48e5d8d9f4a8131ba91ea42b6f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f0:c1:61:35:32:42:08:1f:b5:92:60:ea:10:
                    c9:73:77:de:5c:96:8c:27:c1:a3:e0:70:cc:6f:14:
                    86:dc:64:f2:ad:5c:33:5e:34:8e:5b:29:cb:68:16:
                    d5:74:fa:14:37:2e:4f:e6:95:32:13:6b:cb:98:9f:
                    0c:26:8e:ec:a9:f3:16:4b:16:64:67:04:2a:0e:02:
                    cd:1d:e5:21:a4:0e:8d:89:2c:0e:bc:77:62:fb:b9:
                    c1:66:60:e1:38:15:fb:27:85:8c:76:5e:dd:23:f4:
                    55:7a:4a:21:05:c5:5c:8e:5e:6a:07:dc:14:79:75:
                    c0:9e:ea:eb:19:85:e7:9d:fe:73:1e:74:f1:d3:a5:
                    08:2a:8e:33:e2:e5:26:52:7e:49:6d:96:82:66:8b:
                    f3:61:84:0a:a2:93:df:df:1a:0f:fe:23:e0:ab:98:
                    e9:14:32:08:18:7f:8f:cb:bd:69:78:76:05:46:90:
                    e4:0c:5a:7f:f3:1d:ed:96:07:65:83:48:7e:75:00:
                    e4:93:49:ca:b5:4c:c2:80:e0:ed:c9:7b:85:15:a3:
                    e9:0b:b2:e5:35:3f:aa:0f:b6:8a:7f:03:7b:13:5d:
                    b5:e4:48:85:8b:2f:0e:a8:86:df:77:4f:b8:e8:b0:
                    ef:13:66:4f:23:b4:e9:33:24:9f:8c:94:79:dd:00:
                    4f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9E:A9:A0:A7:4B:E4:8E:5D:8D:9F:4A:81:31:BA:91:EA:42:B6:F4
            X509v3 Authority Key Identifier:
                keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:eb:55:60:21:f8:9a:d7:51:f5:58:72:eb:32:d9:4e:db:d7:
         27:f4:ab:74:45:53:c6:60:bc:b5:b4:37:9b:b1:67:ee:24:a8:
         b5:fa:e4:6e:f9:fe:f8:03:cb:43:90:2c:8a:9a:5e:93:47:cd:
         35:ad:19:96:43:50:65:34:1b:db:b4:9d:f7:a9:33:d5:70:88:
         bb:9e:dc:3f:d2:5a:3c:db:7d:a1:38:08:07:72:04:7d:a8:d3:
         b3:32:44:db:45:c7:e5:3d:35:38:42:52:7a:08:fd:77:0f:d5:
         47:0a:57:4b:c2:e8:a8:fe:bb:9a:b6:4a:17:7c:17:d1:55:64:
         97:96:cd:6f:a6:a1:5a:45:26:0f:c5:eb:8c:0c:c8:9f:b9:c4:
         b0:cb:14:1c:60:a4:56:fe:ff:dc:61:4a:89:0f:13:1e:13:e9:
         b1:17:c1:47:ae:c4:ea:87:2b:01:4c:4b:2d:07:7e:2f:4b:ca:
         17:16:57:b4:60:88:9d:3e:d5:d5:46:5b:ba:0a:dd:32:d5:86:
         dd:6c:83:29:8f:de:62:9e:7f:d5:6a:8b:a8:c2:7f:4c:1e:ab:
         c6:20:b7:36:0b:76:86:a7:34:f1:91:25:81:75:1c:83:b8:a7:
         05:78:13:0b:ef:8e:39:ab:b8:45:10:7b:cf:a5:5b:45:2e:83:
         e5:11:91:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:40:33 2025 by rpki-client