Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
File:                     r0E_0q2eJchLwLWeYIpkNmPmu2g.mft (raw, json)
Hash identifier:          2yN33jaihUiDEZvFYEo0K/W+ihRlQa3yqOyRMvsTirU=
Subject key identifier:   41:B2:59:00:6A:15:BE:C7:CE:0B:31:FD:78:FB:9D:92:E6:42:BD:11
Authority key identifier: AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
Certificate issuer:       /CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Certificate serial:       0197B7EA7845BC858A5F9C90FD26BFA10E63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
Manifest number:          06BE
Signing time:             Sat 28 Jun 2025 19:01:26 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:26 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:26 +0000
Files and hashes:         1: ZRG74paviVX-XS90B8J_nR1og6Y.roa (hash: RiJuDSGI6phByjHDly7Ub5V9tWyhmJNeE34595qod9o=)
                          2: r0E_0q2eJchLwLWeYIpkNmPmu2g.crl (hash: 9YblOz5R7I8nzoxg7rtr2V1nrV48nBclpGrQJB326Nc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:78:45:bc:85:8a:5f:9c:90:fd:26:bf:a1:0e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
        Validity
            Not Before: Jun 28 19:01:26 2025 GMT
            Not After : Jun 29 19:01:26 2025 GMT
        Subject: CN=41b259006a15bec7ce0b31fd78fb9d92e642bd11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:19:9b:37:eb:0a:4c:c7:66:ec:ec:32:6e:57:
                    dc:29:3d:ca:91:7a:55:d7:05:40:f4:72:db:f7:d3:
                    35:ee:12:b5:9e:90:52:03:e4:f7:5f:e9:0e:7f:3c:
                    47:01:27:5a:a8:12:c8:5c:0c:c4:7b:2c:9d:22:2b:
                    b0:a9:67:b7:90:c2:6e:70:42:87:8b:8c:4f:b5:b6:
                    df:23:34:80:2c:1a:c0:a2:48:44:0e:ff:7d:63:73:
                    b1:78:09:92:2f:17:5c:93:46:00:1e:bc:41:53:23:
                    4f:75:40:b2:c6:33:c8:d2:6c:34:23:cf:6d:17:3d:
                    6f:42:d5:a0:06:08:75:2d:29:e7:32:9b:a4:d4:0c:
                    1e:69:86:30:46:09:f7:b1:bb:79:82:0d:46:6b:43:
                    40:36:8c:33:f4:f9:e2:11:35:e3:23:05:9f:b7:32:
                    22:88:7c:65:96:ab:1a:7f:3c:c2:83:d1:6e:14:9a:
                    12:88:f4:cd:1d:2a:3e:cd:e4:10:82:63:1b:3b:34:
                    c6:5f:e5:26:11:a4:50:08:45:ee:89:01:15:ee:8d:
                    5c:cc:03:f6:92:36:9e:46:24:ae:e3:c2:a0:ce:e0:
                    c1:25:ca:ca:86:cf:89:ed:78:24:83:d4:c4:d1:56:
                    20:0f:23:6f:cc:81:fb:20:2e:35:ab:50:32:8b:70:
                    fd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B2:59:00:6A:15:BE:C7:CE:0B:31:FD:78:FB:9D:92:E6:42:BD:11
            X509v3 Authority Key Identifier:
                keyid:AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ba:d8:83:08:58:86:56:33:6f:5d:73:da:a7:29:ae:63:b4:
         ca:5f:35:dc:f4:bf:62:61:ea:bc:de:14:49:b8:cf:93:8b:f3:
         51:2a:6d:e3:73:4a:f6:fd:c9:c4:14:db:10:09:6c:21:87:44:
         4d:bd:01:6e:01:ba:a5:03:14:6d:0c:7d:67:5d:28:ca:58:5e:
         62:ce:3e:7d:09:c5:7c:d7:62:a6:b1:21:3c:ff:05:2f:f9:29:
         48:33:42:ee:b4:f1:5f:97:31:75:ba:26:ed:c5:47:3e:5f:70:
         5e:db:9d:39:99:8a:7c:7f:bc:d4:c2:47:da:9b:21:ec:f4:5e:
         3e:1c:60:e3:4a:0b:8d:20:a0:9f:b3:84:75:ed:09:ad:e2:d4:
         43:d6:bc:39:b1:c4:ea:b1:52:7e:ae:1b:78:cb:f9:86:f3:c7:
         93:55:39:27:35:85:59:45:cb:3f:76:52:6b:ca:a9:55:d1:02:
         b9:87:3f:11:14:99:b2:28:6e:98:2c:70:27:8e:81:ad:bb:8b:
         5f:2f:96:d1:c7:06:75:b5:bb:10:1b:64:ac:ff:71:8d:32:2d:
         44:a6:e6:44:ff:ac:0d:14:30:fe:c9:62:5a:97:37:3a:29:34:
         f5:dd:52:2c:86:e6:86:c5:b3:a0:b4:19:ae:24:eb:b2:c5:89:
         08:70:7e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:10 2025 by rpki-client