Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
File:                     Anes0RLxxsgzvsIvi1PMcNI5CHY.mft (raw, json)
Hash identifier:          jl9r6wEK1FVg+Bairo0KNrijM2uuHBXg4g3Gzw/AlBE=
Subject key identifier:   3D:88:AE:B2:87:E5:3C:1D:36:49:B7:0A:05:4D:1A:F3:6E:BE:C8:43
Authority key identifier: 02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76
Certificate issuer:       /CN=0277acd112f1c6c833bec22f8b53cc70d2390876
Certificate serial:       0197C56EF2B1F826FC5D5DAB99D3846B9B12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
Manifest number:          15BD
Signing time:             Tue 01 Jul 2025 10:01:11 +0000
Manifest this update:     Tue 01 Jul 2025 10:01:11 +0000
Manifest next update:     Wed 02 Jul 2025 10:01:11 +0000
Files and hashes:         1: 2nLfLY9iuS0QWJUoxMXGuTVNh4Q.roa (hash: KGQN3KTkCEm9UO8mNAZfG4hkgxNjImc/0aUX1CErP0M=)
                          2: Anes0RLxxsgzvsIvi1PMcNI5CHY.crl (hash: EFrPXUOUofpKaVv92rItRd/3YUQGvT5E/7/7Wy6ljEM=)
                          3: OP_LxEh3lwkqqiARAnCPDgbwZFo.roa (hash: s8g9cGnm5CE4zgxAFLfWVnDVE/Wx0l3/tOuxqSeDbUw=)
                          4: Th0AzgJWNzEMUInk7IHPiBNTMFs.roa (hash: 0b9R/T23sDaiRJT9SmZqwKUiLRaB4TURwrsLOA1pG44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c5:6e:f2:b1:f8:26:fc:5d:5d:ab:99:d3:84:6b:9b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0277acd112f1c6c833bec22f8b53cc70d2390876
        Validity
            Not Before: Jul  1 10:01:11 2025 GMT
            Not After : Jul  2 10:01:11 2025 GMT
        Subject: CN=3d88aeb287e53c1d3649b70a054d1af36ebec843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6e:23:07:ed:9c:8e:1f:12:e5:84:76:9d:17:
                    76:3c:b3:48:b9:05:e4:ec:18:f8:07:21:fb:7b:b3:
                    48:df:23:ab:ac:79:f0:46:38:41:dd:ab:94:5f:ea:
                    ab:66:fe:00:56:de:de:fa:67:a7:ce:2e:b5:c4:64:
                    f7:da:91:21:46:a6:c8:c4:06:b3:c0:50:1a:6f:9a:
                    6d:1b:8b:5e:90:da:ab:6c:c9:75:88:e7:09:44:19:
                    85:1e:2d:32:58:05:2c:8d:1d:6e:f0:63:7b:f5:1f:
                    59:5a:56:56:b3:19:3c:cd:82:6a:35:44:fb:d3:dc:
                    88:0e:47:b6:27:63:ec:18:37:e7:3a:8f:e9:c7:b2:
                    33:f1:f8:0d:90:aa:2f:2f:fa:60:44:00:2a:f9:7b:
                    51:e9:be:9d:9b:93:60:a4:ba:73:b8:d3:e4:ff:46:
                    1f:46:38:64:8f:d5:a0:9f:22:76:f6:62:b2:0d:e7:
                    3b:62:f4:79:68:1f:1b:19:1b:53:b3:2c:68:a3:09:
                    36:71:47:9a:5f:e4:e1:0c:76:ce:93:b0:39:d4:c8:
                    51:ae:ea:e3:13:8e:1b:12:eb:e8:da:43:c9:56:2a:
                    e3:03:dc:17:ec:29:7b:f4:ec:fa:fe:38:1a:81:77:
                    24:70:ed:50:c8:4c:d6:52:e2:dd:63:fd:fa:41:19:
                    ee:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:88:AE:B2:87:E5:3C:1D:36:49:B7:0A:05:4D:1A:F3:6E:BE:C8:43
            X509v3 Authority Key Identifier:
                keyid:02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f8:8d:a9:6e:47:3b:62:4f:ef:dc:04:48:f0:a8:bd:55:e3:
         49:e2:a3:bd:29:43:ae:27:4e:9e:75:09:68:30:78:59:ef:0f:
         53:c1:07:6c:b5:45:bb:06:e4:1b:b2:42:ac:e0:36:3b:d1:c3:
         2a:fb:c7:09:30:cc:0b:8d:37:50:a4:fc:80:d9:c1:6d:97:01:
         48:4f:b9:cc:bd:b6:78:fc:14:ad:7a:46:53:d7:6f:fa:94:76:
         59:11:05:85:94:c0:5b:47:a3:0f:df:5f:83:40:bc:af:b0:a3:
         c7:a9:39:a0:f4:c0:c1:e5:7e:8d:1f:2c:e6:9b:6f:63:59:3c:
         99:fa:2d:27:ec:5d:7d:69:ad:5e:07:47:8f:5e:e3:32:7d:16:
         f8:8f:0f:74:fe:41:b3:19:08:e3:a2:a3:4f:42:44:35:ed:97:
         ff:72:15:56:ef:18:8b:a3:36:84:31:03:db:db:57:db:c3:68:
         cd:98:ce:56:f6:fb:06:f3:5b:9d:c4:1d:6a:ec:72:32:e0:53:
         06:03:63:e2:0a:03:92:48:d8:ed:04:42:ab:f6:cb:24:bf:1c:
         66:b4:8a:94:47:dd:36:88:6e:41:ac:48:18:42:e5:67:93:ef:
         74:1d:b0:f1:d2:9f:1f:ea:70:9b:d7:af:88:00:73:c7:08:f5:
         75:25:1a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:10:45 2025 by rpki-client