Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
File:                     r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft (raw, json)
Hash identifier:          yIgf0JdnWbKahPsv9/YMUDdbg3fbcrg9IH9wQziZqcg=
Subject key identifier:   0B:C0:47:D4:09:56:58:7A:97:AE:BF:F3:3E:57:C1:52:CC:04:34:25
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Certificate issuer:       /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial:       0197B6A23DA50A33370CC4497FFA79873647
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
Manifest number:          09D9
Signing time:             Sat 28 Jun 2025 13:02:55 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:55 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:55 +0000
Files and hashes:         1: 1-QcSYLdpveuStLYqlBunMp4JJ5g.roa (hash: NQizYlwEjERl0X/bxZE2nkkRnRTSix4QkB1fVvIKAMg=)
                          2: N77-Ng3AFH6-1aHCnMlAcN-LAHU.roa (hash: kLrijD9G/R0cMvtLz3nwtkgshfFFxhgBoeVfEmhz0ZI=)
                          3: ayI-UL4oibibFX4cW3YWUk6xSTs.roa (hash: N1Uh/40VgHWlkmnSe6ILZ6Uts2Fhgd/GOVLIcEzqLXQ=)
                          4: gnkHs-huFz_Mv1gh2f--oMoTlbI.roa (hash: cAkEhiie/5ypOg0o3pr7TFLqNT0IK1/cxJALcW2pMbg=)
                          5: njDEZbySu24l3-7pqiEP7cKTkYk.roa (hash: sJSOzcEBtzhJa/6Rsm70KNeiGLuydqUWSSlaAXnP8xU=)
                          6: r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl (hash: 2Bm4k5edmHwQoIe8FXtDr0k+HHFIwnUgvmCH0MeKRho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:3d:a5:0a:33:37:0c:c4:49:7f:fa:79:87:36:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
        Validity
            Not Before: Jun 28 13:02:55 2025 GMT
            Not After : Jun 29 13:02:55 2025 GMT
        Subject: CN=0bc047d40956587a97aebff33e57c152cc043425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:78:b9:5e:40:0a:a0:c8:ad:07:c7:74:ed:bb:
                    11:bb:2b:89:93:ec:eb:e1:a2:02:22:16:f8:cb:84:
                    52:96:08:85:fa:8e:0c:43:7f:f5:14:ef:21:8d:ad:
                    e9:bc:a3:7d:13:29:1d:21:2f:6e:58:c0:e9:93:d5:
                    2f:86:f3:7e:c0:72:04:24:34:df:f7:bc:45:6c:1e:
                    4d:2b:81:6e:84:39:11:79:b9:77:f5:91:5b:e1:c9:
                    78:f4:79:d1:ca:96:d7:cf:6a:92:d5:1e:00:e8:09:
                    33:07:0b:69:7f:73:99:cb:5e:cc:62:ec:fb:a1:96:
                    21:71:e4:bb:be:99:3f:be:5b:b6:53:39:43:91:97:
                    47:50:7b:c5:89:ef:91:13:bf:48:cb:06:81:95:ba:
                    8f:9a:4b:08:38:7d:3d:06:b6:64:c9:95:b9:80:81:
                    13:05:c3:cf:c5:5d:c4:3d:2a:1b:b5:79:c1:20:75:
                    c7:6d:8a:76:df:80:5d:d2:03:a4:0f:2d:85:aa:65:
                    f5:ad:38:a2:3c:c6:f1:f7:96:9f:6c:72:59:ad:37:
                    c8:10:4d:c9:52:e3:0b:08:94:02:76:21:55:a9:89:
                    9d:54:48:fe:f2:b1:f9:da:d9:bd:61:3f:b3:e1:da:
                    84:a0:c8:0c:7d:1b:d0:bc:90:3b:8e:50:a6:20:30:
                    04:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C0:47:D4:09:56:58:7A:97:AE:BF:F3:3E:57:C1:52:CC:04:34:25
            X509v3 Authority Key Identifier:
                keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:0a:60:29:93:f0:17:5b:07:55:24:39:d5:3e:76:07:13:b2:
         2e:18:bd:bc:27:a4:b2:b7:0a:80:5e:e8:e3:13:8d:39:07:f5:
         4f:f7:03:82:59:58:a2:ff:7c:53:d1:ed:c9:83:00:c4:72:6f:
         0e:33:42:27:07:2c:91:c9:69:be:9c:d0:c7:4a:cf:ee:1d:46:
         e8:e5:2e:32:f4:81:60:20:f5:6e:53:54:43:ef:2e:8b:80:ea:
         b2:0b:7f:a6:ed:7d:48:56:6f:2c:7e:b8:35:9b:32:04:74:c2:
         15:b5:77:4a:84:1c:0f:5c:08:53:a2:6c:a5:ea:99:77:ce:77:
         1c:41:13:e7:22:52:c6:0f:de:6b:c1:8f:d4:28:23:32:6d:35:
         39:62:5d:47:cc:61:23:9c:16:27:87:1f:b3:a5:ae:12:48:77:
         1b:14:05:37:59:13:8f:bd:26:58:63:eb:2b:32:37:c2:e1:ee:
         f7:04:46:fd:7f:be:47:ab:14:88:67:cf:76:60:ca:1e:fe:cc:
         6c:b6:0f:ab:3e:58:21:25:88:c6:94:9f:80:0f:52:94:4d:e9:
         ac:b1:d6:df:f5:54:50:e4:fb:4f:61:47:e0:97:3b:96:24:56:
         8f:a3:ef:9a:2e:d6:a8:37:78:9e:a7:41:9b:3b:62:55:ec:88:
         84:b2:d0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:56 2025 by rpki-client