Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
File:                     N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft (raw, json)
Hash identifier:          9uJYWP2mITJfbZmuh+0x2iu6pAVSN6wlxNuYVW359+k=
Subject key identifier:   86:C1:FA:89:47:20:DC:8F:36:2E:B7:9F:E5:B7:C4:6F:05:83:44:11
Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
Certificate issuer:       /CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Certificate serial:       0197BA0F3FE80D8810660CD8C7BEDCDD6E48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
Manifest number:          0C6D
Signing time:             Sun 29 Jun 2025 05:00:50 +0000
Manifest this update:     Sun 29 Jun 2025 05:00:50 +0000
Manifest next update:     Mon 30 Jun 2025 05:00:50 +0000
Files and hashes:         1: 8OUuy6RxMKAA3VbPAT05z8x14Y0.roa (hash: /S82CRuIWRkEgkIG58XNeFsI8Jv6K3dyodJP/54XncE=)
                          2: N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl (hash: lFU9P+gY1Zn7WdRrmjkUw5+0S5s7M5OaPD/R8nGd2dY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:0f:3f:e8:0d:88:10:66:0c:d8:c7:be:dc:dd:6e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5
        Validity
            Not Before: Jun 29 05:00:50 2025 GMT
            Not After : Jun 30 05:00:50 2025 GMT
        Subject: CN=86c1fa894720dc8f362eb79fe5b7c46f05834411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c7:80:07:b4:4a:6c:e1:96:0d:c1:87:1c:61:
                    b1:b3:6b:bf:b3:cb:3e:cd:92:9b:2f:1c:7b:1c:e2:
                    a2:49:ed:cb:e6:3d:d8:e3:bb:a0:c1:c5:98:f4:78:
                    26:72:fa:c2:4e:c2:8e:9f:d0:6d:16:60:6a:46:f7:
                    04:5f:00:a8:ef:b2:5d:d6:d8:69:43:b8:d9:38:cf:
                    a7:a0:07:4f:42:45:0c:fa:05:15:46:e0:c8:02:ae:
                    88:7c:08:7d:d1:2d:4c:12:66:dc:fc:74:a0:1a:db:
                    82:33:59:92:c7:34:d6:b8:f2:2d:50:52:48:f6:80:
                    a2:76:99:27:c2:38:09:ba:5a:0b:35:2d:0e:9a:b9:
                    c5:ea:4f:30:0c:b4:69:ff:07:92:8b:c0:6c:c7:76:
                    e7:4a:cd:9e:7f:bd:b9:3f:36:cd:8f:63:c1:b3:ae:
                    d4:02:2d:65:87:a4:db:c5:ba:70:1b:c8:93:61:cd:
                    af:54:f7:85:c1:00:1a:d4:a1:a2:3c:cd:c7:b3:dd:
                    dc:ae:b9:d0:57:1f:21:15:99:9f:71:2f:2c:7e:d7:
                    d1:cf:38:fe:80:4b:80:f1:33:6a:e3:1e:4e:27:ca:
                    0b:fb:98:23:c6:48:2c:06:27:b0:0b:dd:71:df:fa:
                    a7:a7:9a:16:e9:3e:df:e7:e8:99:fe:da:76:68:0a:
                    b2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C1:FA:89:47:20:DC:8F:36:2E:B7:9F:E5:B7:C4:6F:05:83:44:11
            X509v3 Authority Key Identifier:
                keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:0b:24:02:8a:42:d4:9f:ef:4e:58:e9:77:d0:5c:df:e6:5c:
         73:25:f3:16:bc:c5:ed:08:80:a9:05:33:d4:ff:00:31:12:97:
         e1:72:1c:aa:ce:1a:bc:f7:67:e6:46:b7:95:05:73:38:6e:f6:
         95:57:da:19:cd:9c:6f:39:4b:86:1e:18:70:3f:71:f0:9f:2b:
         9f:8f:6e:e7:29:0c:5b:c5:2f:bc:05:8c:42:c1:95:c5:10:14:
         98:1b:b3:bd:f1:86:87:b5:f5:17:bf:c8:cc:92:7b:f8:7c:af:
         62:ed:ec:4d:fc:e5:36:1a:b1:3f:41:60:bb:35:2d:da:c8:53:
         80:af:fb:34:c2:dc:fa:11:7d:06:ed:f3:e0:1c:96:bf:f7:8e:
         1e:ed:ae:20:6c:31:95:41:8b:c4:d6:be:3a:0f:59:b5:d9:86:
         66:3a:ae:f8:4c:66:d3:bf:bc:fb:cd:12:03:7f:8d:24:b4:37:
         33:40:7e:7d:72:e6:7a:79:40:f8:90:b1:2d:33:bd:d6:d3:ad:
         c2:13:a7:16:d0:fb:22:cd:30:a6:5e:8e:23:fa:48:8c:77:89:
         1f:56:5a:a8:81:2d:3f:13:ee:6e:9b:b3:11:8a:27:e5:7d:1e:
         f9:dc:79:dd:1c:bb:86:a9:0e:9d:20:e4:9a:e3:ae:11:d5:8c:
         a0:43:2d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:14:44 2025 by rpki-client