Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
File:                     T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft (raw, json)
Hash identifier:          Glie42yc9Rf/WTHQ1z9OwrJd5gVCOzCjywzsOwY3xmA=
Subject key identifier:   F6:3F:78:BA:98:2A:18:BC:1C:B9:F4:DA:3B:B5:0E:2E:A1:D0:F4:8A
Authority key identifier: 4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
Certificate issuer:       /CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Certificate serial:       0197B88EC56F0AA7335FBF41903500807B77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
Manifest number:          0D65
Signing time:             Sat 28 Jun 2025 22:00:53 +0000
Manifest this update:     Sat 28 Jun 2025 22:00:53 +0000
Manifest next update:     Sun 29 Jun 2025 22:00:53 +0000
Files and hashes:         1: QjtOOOK5pwQKBGSkxklhdFksgp4.roa (hash: mBFc78U/Py4iQS+BrsEjELYMOU1hEEh06mY9X8mzPLw=)
                          2: T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl (hash: Vg2Xgd0J6NAGysObjRW20c9XtXs7DX7zbHMah1ka5e4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 22:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8e:c5:6f:0a:a7:33:5f:bf:41:90:35:00:80:7b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
        Validity
            Not Before: Jun 28 22:00:53 2025 GMT
            Not After : Jun 29 22:00:53 2025 GMT
        Subject: CN=f63f78ba982a18bc1cb9f4da3bb50e2ea1d0f48a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f3:62:ac:19:28:d5:58:f8:cb:25:91:a9:fc:
                    9e:92:8f:ef:c7:90:34:ad:cd:8f:08:1f:a2:29:13:
                    ef:08:d5:5b:9a:e7:f6:99:71:07:d2:e0:f5:a4:30:
                    e3:41:2e:d1:f2:61:97:84:0d:01:4a:d1:c6:d9:11:
                    e7:9c:c1:c1:ec:1e:a6:82:67:f7:29:11:21:cc:0d:
                    e7:52:57:1f:dc:0a:2d:ea:fe:30:c3:35:be:92:fa:
                    1c:78:7d:46:de:a6:01:a9:70:93:ee:99:1a:fb:fd:
                    02:49:79:21:f0:d4:a3:99:2f:63:f0:89:67:22:e7:
                    28:8c:02:69:d9:35:ce:d1:66:0f:66:17:26:0b:f7:
                    33:4e:93:57:ab:a7:8d:42:25:9b:8a:70:08:10:69:
                    a0:de:56:ce:33:e2:13:f2:ed:89:20:82:99:f4:a5:
                    df:e4:65:d6:75:90:5f:4a:b4:df:59:7e:7c:41:a9:
                    d3:cd:2f:36:8b:b3:96:3a:b1:43:5c:18:e5:32:77:
                    95:aa:94:c6:c2:d4:d7:17:06:b3:fc:21:d5:52:60:
                    19:f2:a5:69:0d:f6:62:07:29:a5:e9:25:2f:f2:cb:
                    f4:85:cd:79:0c:ba:80:be:a0:0b:58:26:12:99:cd:
                    19:bd:3d:65:28:7c:40:50:71:80:02:61:10:39:63:
                    08:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3F:78:BA:98:2A:18:BC:1C:B9:F4:DA:3B:B5:0E:2E:A1:D0:F4:8A
            X509v3 Authority Key Identifier:
                keyid:4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c7:9a:59:db:1f:c5:d7:90:dc:7c:8f:b4:f2:48:41:c4:54:
         05:9f:bf:e9:bf:75:c4:7a:5d:90:1b:7f:8c:24:84:24:fa:5c:
         4b:a0:01:f6:b3:00:c4:d9:56:50:b5:83:92:d3:c6:36:7c:c7:
         e1:e4:22:ed:71:01:32:a8:8c:7d:6a:d2:43:cb:0f:c5:6f:97:
         6f:c8:47:d2:95:72:5d:a9:e2:29:11:c1:26:92:ad:53:86:36:
         af:3e:d9:9e:32:0c:f9:39:3c:c8:71:e5:3c:ad:27:4d:d0:9d:
         64:70:e4:22:31:db:e1:a5:12:f1:fc:90:87:c1:23:20:dc:14:
         20:d6:39:1e:6e:48:d2:52:61:39:5d:84:2a:b0:88:a3:c0:61:
         be:e0:b2:9d:1a:08:93:b7:48:32:0f:17:06:74:5f:0e:83:fd:
         1d:22:05:2a:19:ef:98:dc:52:3b:71:ba:de:a1:af:f9:fd:12:
         07:27:4d:c8:ad:d8:14:16:c5:38:c0:6a:54:15:f9:de:63:4c:
         77:32:aa:c2:3b:cb:da:f8:65:98:de:02:91:17:11:ff:ae:3d:
         96:04:2d:85:21:08:a3:b7:6c:11:f0:0a:93:21:f4:0f:92:d0:
         36:10:8b:98:ce:4b:a8:1b:76:7a:c3:0f:57:56:0a:63:ad:73:
         bf:74:dd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:35:02 2025 by rpki-client