Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
File:                     m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft (raw, json)
Hash identifier:          12UNHLTHx4vj0ta24eVtXYvbcK4pAzVXghCvq+5Cd50=
Subject key identifier:   E6:33:1F:51:7C:74:F7:76:65:C2:A4:D4:8F:44:BA:87:42:FD:80:7F
Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
Certificate issuer:       /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Certificate serial:       0197B70F3CCD8F891B443E710F11A9EB5788
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
Manifest number:          14EA
Signing time:             Sat 28 Jun 2025 15:01:58 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:58 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:58 +0000
Files and hashes:         1: 1-lOZ9CojkFPMarDdJI5p8kuB4xY.roa (hash: xSbooZ2aXIQhAjsl9R8IdLyOzoIrIGLJWb0yzYMG7eQ=)
                          2: 9nYCpRDqLjXkPW_4xA3ma8dX4jo.roa (hash: LTkB48lSNoDAYkD/zDK6m8vOh49htS24Ue4wI1v1Jcg=)
                          3: SO2r7hsXMD0rXtOemxDNawKSwK8.roa (hash: 3SE/M/3jMxmStavB2oSEQ1ZOQCjp7NcclCdpHKXNutg=)
                          4: m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl (hash: J16KRoqMo0Pf6QdcoE0uhNCQL40vnfqSqEib8zQxllk=)
                          5: s7p4j9URn2D7wbUlKxsLHirYGx8.roa (hash: DBs/FkHFiHhJS9lahQklwyy7rNMLV87rpIdKTKuvgz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:3c:cd:8f:89:1b:44:3e:71:0f:11:a9:eb:57:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
        Validity
            Not Before: Jun 28 15:01:58 2025 GMT
            Not After : Jun 29 15:01:58 2025 GMT
        Subject: CN=e6331f517c74f77665c2a4d48f44ba8742fd807f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:89:95:06:d1:ee:b8:56:f5:15:f4:61:1e:2f:
                    2e:b5:76:2f:00:f2:f0:e0:f2:ee:ae:5d:62:d9:f2:
                    02:e4:2b:8f:f2:9f:6c:09:57:ec:5f:1d:df:8a:35:
                    83:be:b2:23:4a:4f:cb:fa:ca:5d:0c:26:cd:9e:1b:
                    d3:08:bf:55:52:fd:b2:e6:33:74:7d:69:28:76:a4:
                    89:d4:c7:b7:87:89:ca:78:2e:39:60:c3:96:9e:07:
                    c9:f3:f4:a8:40:9d:8c:53:f3:c4:bf:ed:4e:da:38:
                    29:a9:b0:6c:7a:4a:c2:96:85:df:0a:df:15:62:6a:
                    6b:bb:36:d3:a9:65:ef:b2:ac:a6:29:66:fb:77:28:
                    d1:24:e9:1d:1d:14:ef:bb:5c:43:f1:3e:c0:14:e8:
                    fc:29:05:b1:83:91:fd:a6:6d:3c:0f:55:1b:12:8f:
                    1c:89:37:49:00:32:4e:2c:5d:9b:44:b5:90:69:99:
                    78:6b:12:34:2a:f4:b8:e0:12:b5:e7:58:45:ec:30:
                    94:95:8a:9a:12:93:da:43:ae:c8:72:13:dd:86:3f:
                    6d:c0:41:d8:75:a8:1c:dc:e6:8a:3f:6b:f3:67:9a:
                    26:2f:4d:e7:ae:85:2b:24:bd:3c:97:44:b8:96:6a:
                    38:09:2b:c9:87:25:77:4c:12:d8:09:74:51:79:ec:
                    9c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:33:1F:51:7C:74:F7:76:65:C2:A4:D4:8F:44:BA:87:42:FD:80:7F
            X509v3 Authority Key Identifier:
                keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:18:7d:b4:92:66:fb:49:0b:b8:4f:1e:98:10:13:f1:9f:e2:
         d9:a1:3a:76:e9:56:b3:eb:0f:a5:8b:85:cb:0b:c2:9b:64:f0:
         46:28:c2:b2:b2:4b:11:c0:3f:04:ae:ea:99:13:75:79:c4:1a:
         be:c0:9f:c9:e6:64:4a:15:40:96:8b:92:3e:bd:ea:4b:28:5f:
         af:4e:3a:b7:72:d4:ab:f9:af:34:b8:9c:ea:2e:c7:ac:56:99:
         0c:f4:75:6f:20:a3:b2:06:54:04:91:80:f2:3d:8e:92:ba:b5:
         43:87:87:d4:bc:bd:f8:f8:7a:9e:5e:b0:f9:54:25:ca:26:02:
         f1:8e:6d:e2:91:d5:52:69:02:3b:e9:46:b6:d9:1f:c1:38:12:
         b6:7f:4c:06:dd:03:44:28:8d:ec:49:d1:a4:e7:d7:6a:16:d2:
         71:04:89:c5:31:28:74:da:e4:9c:99:3d:e7:ae:82:84:ab:a7:
         b2:2d:ec:95:ed:c5:fd:58:c8:05:71:dc:6a:cb:e4:c7:2f:0e:
         ef:83:d2:b1:4e:ee:b8:34:04:c3:f5:c4:8b:22:b3:b4:08:3c:
         d3:16:8e:cc:52:2d:25:9c:ab:9c:40:c6:29:6d:d0:f7:a0:a2:
         af:59:27:c0:18:e1:51:39:47:bb:96:31:1d:5d:88:fa:5c:56:
         ae:20:46:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:49 2025 by rpki-client