Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
File:                     CeKvCM9uEuIwT7O97GTPvO2qhSI.mft (raw, json)
Hash identifier:          1iUDOPTD/w5XaZV+22GxV5+KSmp1dGzHTyFaHYWQ1q4=
Subject key identifier:   D3:22:B6:3C:9A:67:19:47:8A:75:7B:17:DA:EC:E1:BF:C9:56:65:41
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Certificate issuer:       /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial:       0197B96A8F70F686D442BDFF9CC342A7F55C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
Manifest number:          102C
Signing time:             Sun 29 Jun 2025 02:00:57 +0000
Manifest this update:     Sun 29 Jun 2025 02:00:57 +0000
Manifest next update:     Mon 30 Jun 2025 02:00:57 +0000
Files and hashes:         1: 9BZlV5u49Gak3QK5oEuLPOBSnn0.roa (hash: FmzCgS4aXNRr8JerLZUsfQlHdIEA6EKm/rMgvtNymy8=)
                          2: B6wSZJvSGeybR7CPqtyVhXyylu0.roa (hash: JHvST/m8T4zGrW1YqRbxakpRITmsR241Cez8p9x2uaE=)
                          3: CeKvCM9uEuIwT7O97GTPvO2qhSI.crl (hash: 5cOWosykJnhjl5DXh4rFh6rxHyw+00LWT5/nU6vRhLM=)
                          4: HoNzXhT8lx7vw7JlMXDLD2qJC4o.roa (hash: cNxTbsYhGJbBaA5KX6zTYu/tMB/8NFnmb2pRJ5AhFSg=)
                          5: ao-pH_2txkXRm36Fqqb0zfVnxeQ.roa (hash: PbN0VPyFR+E4wVcHf4vZ5OY6UiGEFVo+Jh+vf+hGjQM=)
                          6: mEa7ci9GxscmRsk-oNcnX_tH1Ws.roa (hash: ooLE+dfj0M2cSMZSDMJWC5DsnnWyEmz/3Hgg0yiBDWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 02:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:8f:70:f6:86:d4:42:bd:ff:9c:c3:42:a7:f5:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
        Validity
            Not Before: Jun 29 02:00:57 2025 GMT
            Not After : Jun 30 02:00:57 2025 GMT
        Subject: CN=d322b63c9a6719478a757b17daece1bfc9566541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8d:43:5a:11:75:24:b7:29:cf:68:73:9b:75:
                    28:e6:8d:a7:22:fb:23:63:2d:69:85:30:14:ad:97:
                    8d:ed:cf:0b:f0:79:98:85:2a:b3:6c:ed:61:15:f7:
                    f2:8b:48:dc:97:72:91:cc:3b:c5:cc:87:ff:cf:59:
                    22:de:db:48:c6:32:d9:dc:3d:89:33:be:84:8f:9b:
                    a9:19:b7:6f:2a:a5:46:8a:44:0c:05:8e:86:68:cd:
                    bb:39:8b:e3:54:8a:37:0f:83:35:8d:69:a0:27:1c:
                    52:f1:24:89:3d:59:bd:ce:1a:a5:03:d1:87:f0:e1:
                    48:77:1f:ca:75:bc:31:12:2e:be:d3:0b:d0:06:da:
                    9d:c2:55:71:f6:a8:8f:76:44:26:72:a7:26:7d:d3:
                    ae:64:94:20:9b:ec:63:d9:b4:fd:8a:fe:e1:6c:de:
                    b0:36:67:9c:0a:d5:b4:db:83:31:69:cf:cf:6c:80:
                    e3:68:5e:8f:d3:7a:ac:5f:e4:37:f1:ab:54:e6:41:
                    45:e6:4b:86:2e:07:84:ee:1b:63:3c:da:58:e8:1f:
                    11:95:05:e9:7e:30:4e:3a:ee:6c:cb:76:48:72:1a:
                    41:df:fc:1b:04:e1:b0:de:ff:21:08:40:05:6e:4b:
                    0a:a4:f2:f9:3a:a7:04:de:47:d3:dd:ce:79:68:36:
                    cc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:22:B6:3C:9A:67:19:47:8A:75:7B:17:DA:EC:E1:BF:C9:56:65:41
            X509v3 Authority Key Identifier:
                keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:fe:61:16:a1:b4:51:95:0e:de:74:be:e6:ee:79:4f:f2:94:
         ab:47:64:7e:69:c2:5c:3d:0a:58:c9:12:73:4b:10:3c:21:29:
         13:84:9f:81:16:b1:9e:e2:ea:76:a3:bb:d8:1e:b3:48:2d:f2:
         52:ec:51:78:3f:57:c4:b9:18:8f:c0:3f:be:dc:6d:aa:7c:df:
         dc:af:bf:86:fb:71:c9:3e:fc:f3:82:b4:77:5e:e4:ec:44:97:
         5b:97:ad:6d:46:dd:8e:89:0e:1e:26:01:6f:28:e8:b0:c3:8e:
         71:33:ff:c4:f3:16:16:ca:e4:c2:be:78:5e:97:df:53:bf:bf:
         1c:5f:6a:4c:78:d7:89:30:3b:2f:ad:aa:25:15:f1:38:85:fa:
         8f:30:1b:c2:75:5f:dd:49:0f:9d:4a:9c:dd:58:18:e9:b5:93:
         93:39:da:cc:c1:d1:f1:9e:40:ba:19:1c:0a:7c:65:4e:d4:1a:
         0a:66:f1:f9:53:82:26:1b:b1:ac:a2:10:3c:10:47:ee:49:ad:
         ea:56:31:a9:04:8b:18:22:df:70:79:b5:6e:c8:4d:8d:f6:08:
         bc:6f:53:31:e8:fd:e5:4b:7a:c8:ef:97:9e:5e:64:4a:60:3c:
         4e:70:ca:76:1a:51:91:f5:ca:c0:fd:62:41:84:19:a2:d7:82:
         5d:c9:24:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:29:56 2025 by rpki-client