Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File:                     aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier:          ES3fMyy70pj2DxYkXHtw4HSTXWW7Z4w2eRNrpA/Bp+c=
Subject key identifier:   6B:19:E6:D8:73:12:93:E4:74:F4:58:BA:40:BB:76:5C:7D:07:36:24
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer:       /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial:       0197B632E85F9BF42FE23808D1443013D71E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number:          077F
Signing time:             Sat 28 Jun 2025 11:01:18 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:18 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:18 +0000
Files and hashes:         1: 5MKVHwP5QACbDwSUJKA2GW7sHnQ.roa (hash: iXzFw4W5Foz0uwg9MMW+CW99Q/qBQogltnHgfr+P8PQ=)
                          2: MTrzAX_D8XgoMN3mTBa0ASkLO-s.roa (hash: 5xLIJUhiZ8b7rVLgmWHwi35aSAKsu4l83lIArXRkd8w=)
                          3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: tjurte7q3KpGndnT30XGwXZH3qPPT2vfGCO1BTCiXBY=)
                          4: zBSuOK6TSZdyfy80PgMlJMzpxoY.roa (hash: fCR2rdLvuL4emdZ++ZNvy3Kaqpga8geFfxEmhxpqkvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:e8:5f:9b:f4:2f:e2:38:08:d1:44:30:13:d7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
        Validity
            Not Before: Jun 28 11:01:18 2025 GMT
            Not After : Jun 29 11:01:18 2025 GMT
        Subject: CN=6b19e6d8731293e474f458ba40bb765c7d073624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:03:3b:a1:1e:b0:e5:41:07:88:8a:f6:a9:6c:
                    ca:3b:50:7b:36:ef:a4:02:26:25:c5:aa:c5:a5:2b:
                    af:24:3b:8a:5f:77:51:1f:84:4b:87:e9:21:94:e7:
                    d9:62:a2:14:07:0a:2e:cd:37:4c:71:99:a9:f8:66:
                    75:ba:78:d9:e5:5e:26:2d:ad:81:f5:58:7e:e9:d4:
                    fc:ad:5d:f2:48:84:fe:bd:61:e6:ed:28:c7:d0:a9:
                    65:4b:cc:89:3f:b9:53:c6:fd:33:80:60:b2:70:92:
                    07:22:3a:45:7b:97:52:ce:1b:bf:2d:dd:0b:38:5d:
                    77:08:f5:bf:63:dd:94:b4:ca:13:02:66:c4:f3:4b:
                    47:a5:3f:a4:06:5c:fa:6b:01:18:62:94:42:7c:4c:
                    18:7e:8b:af:bf:0e:24:35:59:5f:23:37:05:65:8c:
                    c6:d9:75:62:e2:05:d1:cd:98:3c:4a:0e:7e:81:b1:
                    a3:1a:03:36:fa:7e:d9:4b:a1:9a:8c:d5:44:9b:fd:
                    b2:46:3c:97:21:f2:f5:67:59:42:3f:af:41:22:25:
                    6b:9b:60:be:ed:71:8f:ec:a5:f6:e4:53:a1:ba:26:
                    a5:91:4e:7b:9d:65:7a:24:6e:e9:dd:a8:95:f3:13:
                    29:4d:88:63:ae:e7:4f:61:88:ef:18:a4:3e:c8:2b:
                    12:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:19:E6:D8:73:12:93:E4:74:F4:58:BA:40:BB:76:5C:7D:07:36:24
            X509v3 Authority Key Identifier:
                keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:5d:bf:e7:26:f7:0d:54:70:df:28:12:a2:c0:59:15:9a:0f:
         7a:75:22:38:92:d1:c1:3a:e3:ac:56:af:6a:ea:f0:a6:5f:ec:
         cf:14:bb:79:91:07:0f:28:67:82:d1:d7:86:89:f2:fe:9e:02:
         1d:b8:a5:25:f8:93:9a:58:44:ce:e6:55:d1:33:48:17:52:ba:
         e8:37:7c:9f:77:0a:84:d0:91:d1:42:c4:35:27:45:9f:e3:27:
         46:c9:05:c1:e9:1f:82:0b:dd:36:40:f0:12:94:88:bc:5f:c9:
         c2:23:ec:4e:50:35:3e:75:d6:57:0f:b9:a7:87:ad:d9:65:f6:
         07:15:5d:97:48:d2:3a:6e:47:d7:df:b3:31:23:f6:c6:98:cd:
         71:9b:d1:92:2f:b4:19:77:80:d0:58:69:86:13:5d:3a:99:59:
         cf:80:5f:76:a3:27:d5:10:47:e4:e7:1b:8c:dd:04:2e:f7:c2:
         61:2d:6b:f8:37:05:45:85:15:0f:00:71:d6:be:93:03:ea:5f:
         75:bf:fb:48:0a:74:78:6c:5a:1d:e7:2a:43:62:dd:45:66:2b:
         af:69:43:85:c6:19:15:27:30:ed:43:20:b4:42:8f:bf:70:4b:
         1c:83:47:14:87:df:c2:df:3e:e6:ca:38:1b:f7:50:ce:57:9d:
         23:dc:3a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:06 2025 by rpki-client