Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
File:                     cMuWVD9-GVcj5tEiwpR4v92gPsw.mft (raw, json)
Hash identifier:          Eq8wYhjWH21tpB2s5r0wHiYEudVrLsMD8ks7kGofJ8c=
Subject key identifier:   E0:8E:AD:02:2F:3C:11:7D:11:4A:3E:13:D5:B0:CB:D1:9F:F8:62:CE
Authority key identifier: 70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC
Certificate issuer:       /CN=70cb96543f7e195723e6d122c29478bfdda03ecc
Certificate serial:       0197B96AF135DA7004671F0924DCED97E1CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
Manifest number:          0A4B
Signing time:             Sun 29 Jun 2025 02:01:22 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:22 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:22 +0000
Files and hashes:         1: 8anvDKitwmoS5b1R9CoiYAIvV4s.roa (hash: sK8EhnVxeI2sQ1OgOLzF1LkVF8lOtqG5DcBtonQ6uEM=)
                          2: cMuWVD9-GVcj5tEiwpR4v92gPsw.crl (hash: bUWGEXvupR5Vo6K5dyDBYMzrRKP7qskiOFPVLKna+H4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:f1:35:da:70:04:67:1f:09:24:dc:ed:97:e1:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70cb96543f7e195723e6d122c29478bfdda03ecc
        Validity
            Not Before: Jun 29 02:01:22 2025 GMT
            Not After : Jun 30 02:01:22 2025 GMT
        Subject: CN=e08ead022f3c117d114a3e13d5b0cbd19ff862ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:07:63:d0:34:0b:20:6d:07:6d:83:e9:f4:
                    99:4a:6c:6e:6d:70:87:19:6f:a5:b7:cb:e7:ff:09:
                    d4:33:24:4b:37:83:2e:e0:32:bf:10:97:58:24:18:
                    20:8b:b7:33:4c:66:e1:32:74:32:97:a0:1e:5b:9f:
                    17:c6:a2:27:8a:3c:12:81:fb:63:8c:57:2a:76:be:
                    0c:31:55:57:f3:bf:20:52:e6:3f:46:3e:17:05:f7:
                    78:ed:0f:de:e5:fa:c0:17:db:ff:d5:2a:2a:60:eb:
                    f2:39:dc:a0:b3:d1:f4:1a:20:34:70:c9:d2:4e:8e:
                    b2:a1:da:f4:98:20:78:5d:eb:b1:ed:2d:83:66:90:
                    47:40:62:2c:cd:01:4b:d9:20:ca:4d:4b:fd:4f:6d:
                    d2:cb:bf:6e:4d:54:c0:7e:22:2e:fe:22:32:93:99:
                    8f:53:32:b8:7e:ac:9d:b4:63:4d:54:83:44:7d:1a:
                    24:06:d1:6b:9c:86:b1:95:15:70:01:e0:e7:57:8e:
                    2f:84:86:ea:f3:2e:ae:d2:df:e9:6f:df:90:ad:29:
                    2a:18:e0:b9:14:76:cc:e7:a9:ff:ae:e7:f9:01:ea:
                    ad:d8:ed:24:d4:d4:1f:e8:bd:22:02:2c:4f:61:74:
                    c1:26:bb:74:ae:06:14:0c:54:84:55:07:53:a2:a2:
                    d3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8E:AD:02:2F:3C:11:7D:11:4A:3E:13:D5:B0:CB:D1:9F:F8:62:CE
            X509v3 Authority Key Identifier:
                keyid:70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ef:bb:3d:f1:70:18:4e:44:00:d5:8b:a1:60:4e:47:76:0a:
         79:66:a3:b1:32:9e:7a:25:a4:39:69:bb:95:c4:7d:88:58:b4:
         dd:a9:ab:f4:3d:87:ad:a1:5b:c7:bd:ef:26:92:94:00:57:d7:
         a5:8c:69:a6:0f:e6:3b:71:79:10:96:e5:da:b1:68:84:68:9d:
         d0:41:18:ec:75:d6:be:52:c2:d9:9e:05:af:9b:73:b7:ad:4c:
         c7:05:48:80:78:34:4b:1e:f2:92:fb:16:87:ca:a1:fe:c2:5e:
         b1:7e:8b:ee:17:7a:a3:d5:03:5d:b9:69:43:3d:b0:aa:a0:b8:
         2c:a9:93:aa:0e:47:47:b9:c1:3c:00:9c:c2:92:45:e9:6a:ac:
         12:5e:a3:37:3b:51:e7:4d:42:27:95:ea:73:1e:37:ae:7c:11:
         a1:8b:55:93:22:16:29:e7:b4:1b:21:5c:16:12:13:84:42:a9:
         6d:d4:28:dd:d8:a6:93:ab:1a:74:b2:37:13:cb:ef:33:3c:bd:
         cd:95:5b:38:2c:08:ed:51:96:82:06:bf:1a:ad:c7:30:ef:61:
         cf:e0:5b:ef:27:d9:1b:02:40:37:56:63:fe:5a:50:51:8a:68:
         37:b5:90:b7:ee:1f:c4:3e:52:a8:71:a9:c3:2f:fc:bd:49:ea:
         8a:56:3b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:00:00 2025 by rpki-client