Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
File:                     tLuK74sObZxv9jIIB_WpAHWY7rA.mft (raw, json)
Hash identifier:          fwtw0yT5D5jaoPEBgYqDuikte2Ap6MnzLMqPNFvFmE8=
Subject key identifier:   4A:FE:87:27:FE:39:CB:FD:0A:73:F2:16:D7:DA:31:33:DC:CA:6D:71
Authority key identifier: B4:BB:8A:EF:8B:0E:6D:9C:6F:F6:32:08:07:F5:A9:00:75:98:EE:B0
Certificate issuer:       /CN=b4bb8aef8b0e6d9c6ff6320807f5a9007598eeb0
Certificate serial:       0197BF6CC3D6BCDC9AE9E46848EF5376560B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
Manifest number:          084C
Signing time:             Mon 30 Jun 2025 06:01:05 +0000
Manifest this update:     Mon 30 Jun 2025 06:01:05 +0000
Manifest next update:     Tue 01 Jul 2025 06:01:05 +0000
Files and hashes:         1: 8ntjSMus2ECR1PU4tfABg9_MTk0.roa (hash: NThyxZZCDawOVk5/yNg7I3X8M08Hqe7vBd2lZGQPe1c=)
                          2: tLuK74sObZxv9jIIB_WpAHWY7rA.crl (hash: sNDReGBU7qfo03A9dhOgIL9iyAHbBSfB5ET3K6OPsGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:bf:6c:c3:d6:bc:dc:9a:e9:e4:68:48:ef:53:76:56:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4bb8aef8b0e6d9c6ff6320807f5a9007598eeb0
        Validity
            Not Before: Jun 30 06:01:05 2025 GMT
            Not After : Jul  1 06:01:05 2025 GMT
        Subject: CN=4afe8727fe39cbfd0a73f216d7da3133dcca6d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fb:6b:fb:7e:dc:d6:fb:24:fd:1a:fc:89:c4:
                    ce:b6:9a:46:0d:dc:c9:53:6d:1f:00:76:82:54:a3:
                    67:f4:fc:75:9f:a2:9b:74:b2:da:bf:c1:56:fc:12:
                    13:7b:a1:14:f9:f5:b2:18:c1:53:77:9c:a3:76:39:
                    a3:66:25:20:c0:36:2c:0b:6c:db:11:af:35:cd:83:
                    7f:5b:71:4a:57:65:0d:88:0b:d2:28:f1:56:59:a8:
                    b0:6a:47:46:2d:f6:04:dc:e0:fc:b5:a5:a1:58:0e:
                    e6:6e:7c:57:1d:c4:20:ba:5f:e2:59:03:9c:a6:e6:
                    6e:0d:ba:da:0e:3a:0b:03:ec:50:a8:0e:1c:e4:25:
                    58:d4:2e:62:16:57:10:28:b4:0b:31:ca:57:4b:c5:
                    50:2c:ac:63:c3:d9:bb:86:d6:20:61:21:16:e4:a7:
                    17:38:1d:44:80:82:3d:87:17:3c:c2:e4:85:ae:7e:
                    2d:f8:8d:4d:88:e8:a0:96:ec:44:f1:39:c4:4e:8e:
                    dc:38:c6:2e:90:48:5f:ca:9b:d8:32:ff:45:a2:d5:
                    a7:47:33:7e:e7:34:19:a4:61:9f:1b:ee:f2:78:07:
                    23:74:94:3f:b2:77:af:bb:3d:d5:e5:2f:3a:32:70:
                    53:20:a5:d6:b4:ad:2f:ef:82:11:8c:17:d1:eb:e1:
                    39:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FE:87:27:FE:39:CB:FD:0A:73:F2:16:D7:DA:31:33:DC:CA:6D:71
            X509v3 Authority Key Identifier:
                keyid:B4:BB:8A:EF:8B:0E:6D:9C:6F:F6:32:08:07:F5:A9:00:75:98:EE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:39:45:c9:de:15:fa:85:0a:7a:f9:34:10:93:8f:4b:53:ce:
         73:17:f9:6e:a1:d9:84:98:61:e9:e4:1d:5d:4f:33:39:d5:17:
         11:ac:c8:14:98:80:54:e8:6d:46:25:aa:d6:d8:9e:bc:4c:84:
         71:60:ad:98:ef:8c:8f:8a:b5:cb:5b:3d:24:ee:ba:63:aa:fe:
         14:1c:a7:ab:47:90:e8:be:fb:d5:51:80:e3:45:d2:4e:1b:6a:
         59:04:47:71:d2:e3:e0:f8:15:b1:9c:99:63:d3:f8:c2:7c:aa:
         0b:4a:a3:56:f9:76:64:bc:39:fc:49:69:fe:99:fb:d3:57:0c:
         46:27:24:61:dc:9a:1e:7d:a9:c6:e0:e6:bc:d4:b4:34:35:72:
         c8:be:31:5a:d9:7e:21:42:d7:5f:a9:8c:a3:45:bc:74:d8:82:
         5f:6a:de:1e:60:0d:65:be:cc:8b:52:7b:20:36:bd:03:45:3b:
         96:11:97:99:28:d1:17:c9:71:e0:08:f3:ca:b2:ac:97:dd:e7:
         88:ca:2c:83:a7:cb:84:c5:6a:83:b9:c6:bc:23:f8:37:91:6e:
         80:d2:31:f2:0d:a4:b0:7b:71:16:e4:1f:c5:e1:d8:cd:0b:90:
         67:93:52:fe:a0:f1:7c:f0:7d:33:b7:8b:9e:3b:a1:81:ca:bc:
         42:fb:2c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:40:30 2025 by rpki-client