Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
File:                     rmjJUYwq1UwKy4IUaMhuRboWHBg.mft (raw, json)
Hash identifier:          0Gj9LIroWetUi7eg0SPdOK/8jCcN+3AmY+36OwjuEhs=
Subject key identifier:   0F:9F:1A:60:AB:AD:FC:6F:06:5F:B9:7A:66:22:9D:BB:66:EB:64:34
Authority key identifier: AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18
Certificate issuer:       /CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
Certificate serial:       0197B6A22B53BDE8227C8F2495256012DC63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
Manifest number:          0480
Signing time:             Sat 28 Jun 2025 13:02:50 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:50 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:50 +0000
Files and hashes:         1: PwlcQaBPeu72jRxpS1TyAFafqIs.roa (hash: zweRMxR6GdWC0C5ngJnRInvOkWHsboI5uvSiYLo2X20=)
                          2: rmjJUYwq1UwKy4IUaMhuRboWHBg.crl (hash: Hkj9lAayNgeZdKiKto+KbJd0CZOMagch6BlY+YIue2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:2b:53:bd:e8:22:7c:8f:24:95:25:60:12:dc:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
        Validity
            Not Before: Jun 28 13:02:50 2025 GMT
            Not After : Jun 29 13:02:50 2025 GMT
        Subject: CN=0f9f1a60abadfc6f065fb97a66229dbb66eb6434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5b:d9:55:ce:df:09:5e:1a:0e:fb:2f:33:7b:
                    b1:00:cf:4d:99:9d:1e:97:06:cd:8f:31:b0:0a:8c:
                    2f:73:eb:ab:da:be:8d:ac:ed:9c:8e:a4:7a:e7:2d:
                    cc:00:19:eb:bf:7a:7d:4c:0d:f6:4a:00:b4:e1:ce:
                    5c:75:d4:92:49:83:24:06:6e:2e:03:b4:4e:ae:94:
                    1a:12:7f:00:42:af:7e:da:cb:2a:a1:6d:05:26:c1:
                    08:32:f6:87:2c:4c:8f:b3:7e:80:7f:fc:90:4b:e1:
                    ad:3f:c5:bb:67:d4:cb:91:05:b3:76:24:72:c3:24:
                    a1:db:90:02:a2:3f:8c:bd:d0:eb:55:f4:87:5d:28:
                    a5:ea:f8:a2:53:09:7e:e6:f8:56:11:bb:2a:ba:6d:
                    61:a3:c0:2d:d8:06:e1:1e:98:f8:5c:81:6c:cd:44:
                    db:58:eb:78:3c:3b:12:7f:d9:97:11:dc:7f:ba:e4:
                    99:50:43:3a:59:cb:d6:a4:0d:01:8e:1b:df:2f:c0:
                    d3:2e:5e:19:d6:db:af:e1:2e:39:c3:3f:19:18:f0:
                    d0:27:0a:7a:61:ad:4d:27:80:2f:91:d3:66:69:f5:
                    32:74:a2:db:9a:24:c8:91:04:1d:c3:46:76:43:b1:
                    ca:41:a9:4f:c1:11:36:11:cb:e3:28:5e:2e:4b:eb:
                    a1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9F:1A:60:AB:AD:FC:6F:06:5F:B9:7A:66:22:9D:BB:66:EB:64:34
            X509v3 Authority Key Identifier:
                keyid:AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c9:7a:d6:ea:0e:9a:8a:9a:49:96:8c:42:97:ae:cb:7b:f3:
         38:9b:88:09:ea:01:3a:fc:4e:0c:e1:98:74:21:60:ca:42:cb:
         18:63:df:e7:ad:31:da:a6:90:7c:41:b3:80:bb:1d:e4:3a:11:
         84:94:05:69:7c:3e:d8:7e:25:c1:b1:e4:1e:1e:b4:23:5d:ab:
         6a:3c:98:a3:93:64:70:8a:52:f7:34:6b:ba:bc:f1:0e:29:51:
         5e:07:9c:50:b0:f3:82:83:83:9f:74:22:1b:dd:24:2b:7a:fc:
         04:68:91:51:aa:3c:2e:ad:f5:fb:03:63:52:f0:71:3a:12:0f:
         02:43:5e:9a:6a:17:ac:e6:0b:d6:e7:e7:d3:83:16:7b:22:c5:
         5d:19:fc:2b:2a:9b:30:fd:0c:5e:e7:91:61:02:6b:f5:e2:af:
         01:55:80:56:28:93:85:82:30:c9:58:a7:c2:af:f5:d6:68:e0:
         51:11:0f:2a:a2:9f:de:4b:45:9f:e0:20:4f:e0:16:00:f2:a2:
         27:50:d2:6d:cb:3e:a1:b7:d6:a5:31:de:69:31:d2:6a:b8:c7:
         ec:fc:01:7c:47:f7:b2:58:93:d9:d1:8f:76:a7:aa:ae:50:ca:
         ad:d2:e8:3b:62:cd:a4:14:fb:e4:26:ee:b2:eb:71:57:e6:f9:
         96:e2:e8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:37:53 2025 by rpki-client