Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
File:                     aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft (raw, json)
Hash identifier:          3idYUNZZk2wO8d2/zR4wRncDgD2/26Gwp10PEpIr37Q=
Subject key identifier:   4D:98:0E:C6:C3:92:49:E4:F4:12:3D:C5:54:1E:A1:BD:E3:9F:40:5F
Authority key identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
Certificate issuer:       /CN=69737c6e0602be3804e277580bab7e21e6e33474
Certificate serial:       019849659AC22A45DFBAC10F12365C06D038
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
Manifest number:          0662
Signing time:             Sun 27 Jul 2025 01:00:52 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:52 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:52 +0000
Files and hashes:         1: 86oammqkU0TE8AzqwBVv1FmzBYc.roa (hash: H3QOeQw7Wu4vQlfZwSufbLTx40TDb5RrgWASWL9m9b8=)
                          2: VRgzvsIGyVGSMvCfEEXMwDue8MA.roa (hash: PsTu4TZ4HzWVeuIcWadKHbXlWOA/8zFocM48RCXa9/k=)
                          3: aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl (hash: 7QWdHXbgU+67mxcPeB35aOS4qVsUGJh61DXznIokvtQ=)
                          4: jjkZ2yb-jO_dwKLdx8H317IXScQ.roa (hash: HCz04W3HLqaOC0rvZdH98CWQlK6DEnW7DscRc2ODf9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:9a:c2:2a:45:df:ba:c1:0f:12:36:5c:06:d0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69737c6e0602be3804e277580bab7e21e6e33474
        Validity
            Not Before: Jul 27 01:00:52 2025 GMT
            Not After : Jul 28 01:00:52 2025 GMT
        Subject: CN=4d980ec6c39249e4f4123dc5541ea1bde39f405f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:88:af:12:b2:87:07:67:16:0a:cc:b4:0e:30:
                    95:5d:f1:3d:ff:0c:9a:00:5d:e0:6c:f0:6e:49:19:
                    1d:5f:59:08:dd:52:a2:b2:5c:00:51:7e:33:d9:e6:
                    80:26:12:6e:07:97:69:59:f3:f9:db:b6:1f:d8:0c:
                    9f:75:f2:a5:34:a4:cc:46:9b:c0:9f:9d:23:2b:4d:
                    28:eb:af:f0:27:e1:fd:cb:56:39:db:f5:e5:56:29:
                    de:34:4f:48:98:83:33:73:5c:de:25:ca:37:95:cb:
                    06:81:56:37:2c:16:5a:98:18:25:c0:72:c8:77:86:
                    45:55:20:64:ef:d4:78:96:f3:ca:8b:84:81:f3:2c:
                    a9:be:30:35:98:8f:75:64:c7:f3:e1:e1:3d:c0:d0:
                    8e:8c:8f:70:ba:8f:d8:df:22:95:8d:65:4d:e4:24:
                    13:83:41:74:1f:8b:41:7c:0e:26:bd:d1:64:65:a6:
                    c2:8e:44:18:ff:e8:35:39:aa:4a:85:ea:75:a3:59:
                    8b:fc:5d:d2:2b:47:7d:c8:f0:12:04:fc:3a:8c:80:
                    e2:5e:c9:0b:1a:0b:1d:4a:89:24:96:75:07:7a:15:
                    41:15:a7:27:8b:41:fc:08:d7:91:fe:0b:fb:54:5d:
                    f4:b6:1b:03:54:df:60:ab:5a:59:03:87:1d:a7:ed:
                    45:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:98:0E:C6:C3:92:49:E4:F4:12:3D:C5:54:1E:A1:BD:E3:9F:40:5F
            X509v3 Authority Key Identifier:
                keyid:69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:17:0a:0e:12:07:1b:da:3f:3e:88:3d:1b:a0:72:83:56:f3:
         6e:7d:a1:e6:00:49:e2:dd:15:cc:ed:b7:57:fa:08:7b:2e:09:
         8e:a1:c5:6f:02:94:d4:47:30:34:1c:92:d3:86:4d:c8:fb:3b:
         ef:66:08:7b:7f:d0:50:69:b5:05:d7:ee:48:f5:63:9b:11:a9:
         9d:f2:1b:45:d8:e0:88:3d:25:5f:5b:f2:4f:e5:0f:a0:df:e7:
         f3:83:c2:a9:3f:2a:3d:d7:8f:01:e8:65:b0:3d:b5:5f:b7:88:
         e7:17:49:1a:b8:dc:5a:47:8e:ce:d9:18:13:12:0a:a5:7c:46:
         61:20:a5:24:3e:18:c2:70:84:5e:9c:ba:c3:bd:41:fc:46:fa:
         4f:87:95:cd:32:88:97:c5:79:cf:7f:eb:85:77:3b:02:d6:42:
         72:82:aa:2b:4e:c2:63:fd:b5:be:e2:82:11:2e:0d:76:3d:2c:
         29:f0:39:57:d4:b5:e9:8d:2c:9f:fc:9f:76:84:f7:8b:eb:81:
         eb:f2:35:55:4b:ba:1a:c2:bc:a3:89:bb:ff:e8:c3:7c:a7:35:
         fb:75:be:8f:f2:3b:6a:2c:66:8f:7f:59:51:e1:44:62:60:b7:
         82:20:a4:c0:8a:d1:59:3d:01:de:08:d2:ee:59:31:c2:0f:9f:
         ff:1c:03:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:30:09 2025 by rpki-client