Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
File:                     A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json)
Hash identifier:          sdHn7H6nO7bGP5/fTBLRrm5zztaUNEYVj1hB7eaAr14=
Subject key identifier:   AE:E7:6A:08:44:7D:9A:54:2D:12:9B:43:52:C2:60:B7:2E:68:83:1E
Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
Certificate issuer:       /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Certificate serial:       01974C325292F187F94D37F38511A564C043
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
Manifest number:          0261
Signing time:             Sat 07 Jun 2025 21:00:55 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:55 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:55 +0000
Files and hashes:         1: 9EiTee9k8nFjET11hPatStF9nkM.roa (hash: rKaveA0rfCcy5/zhxw6q4cAzgO9tcO/IcjE7cyeyoGI=)
                          2: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: mdyd/XZq+s5BI0BvOQrUpe90dSYYJJoiOdWa0gcRTQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:32:52:92:f1:87:f9:4d:37:f3:85:11:a5:64:c0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
        Validity
            Not Before: Jun  7 21:00:55 2025 GMT
            Not After : Jun  8 21:00:55 2025 GMT
        Subject: CN=aee76a08447d9a542d129b4352c260b72e68831e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1b:7d:eb:8c:d4:96:3f:47:62:ba:ce:18:a2:
                    a6:ef:11:76:d0:d4:20:3d:6b:20:33:fe:bc:31:21:
                    ba:59:a0:a0:ab:aa:bb:82:e2:2c:27:69:77:30:c8:
                    b0:07:bd:7b:9e:5c:59:9b:23:86:48:1c:3d:a1:f9:
                    d3:7e:6d:35:8c:b7:3c:6b:1e:47:ce:1c:52:c0:f6:
                    21:f5:52:58:f9:f6:a0:0c:0d:d1:ec:32:8b:95:6f:
                    4c:8c:3f:a9:a4:c8:4c:29:55:88:ba:ee:3d:15:b1:
                    3c:e3:a2:55:a3:78:23:ef:8a:02:b3:72:15:c1:2f:
                    71:7f:7f:6f:cd:00:20:5c:41:cb:91:e9:2a:a8:2e:
                    c1:6b:fd:47:50:0e:7e:a9:d6:b8:81:1e:e8:b5:fb:
                    e9:40:e4:98:d4:c5:6b:4f:5c:7e:c3:23:91:70:81:
                    72:a3:4a:c1:73:96:8b:ee:83:f6:c0:6a:00:08:6e:
                    de:ab:05:fa:d6:fb:2e:4e:5d:5b:1c:9e:04:49:d4:
                    a4:7a:cd:21:f3:f2:9b:a7:d0:b0:11:8e:db:33:b6:
                    80:ca:70:e2:c0:3e:16:0e:35:65:0f:c6:19:ef:c3:
                    fa:63:7d:d4:2a:a2:d2:d5:4a:05:8d:e1:1a:7e:0e:
                    22:58:1a:80:d0:ba:d1:8a:28:4d:88:65:79:63:72:
                    a8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E7:6A:08:44:7D:9A:54:2D:12:9B:43:52:C2:60:B7:2E:68:83:1E
            X509v3 Authority Key Identifier:
                keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:80:1f:9d:4c:3a:bd:c6:0c:2e:b3:d8:69:6e:e4:10:f8:ed:
         57:b2:e0:91:bd:76:c6:6c:3b:ab:9d:bd:fa:94:cb:5b:19:37:
         d0:b3:41:5d:36:f8:1f:4d:1d:85:df:76:38:11:55:1c:c6:2a:
         0c:cc:56:94:23:b8:4f:8c:18:d9:ef:9b:40:f0:c8:9a:8e:42:
         7a:18:61:a7:0b:51:d4:c4:27:4e:ea:ba:fa:28:c1:62:ff:45:
         fc:10:db:38:4a:e6:60:04:c9:3b:f6:73:c2:13:c2:30:ba:20:
         bb:93:a1:90:33:6f:b6:f8:39:f0:b8:53:61:da:e8:80:06:d3:
         b6:b9:33:87:a2:76:9b:91:73:3d:6c:20:3c:94:aa:ee:08:28:
         73:ea:46:1b:c6:39:d9:7c:7b:c7:22:f1:5e:53:d8:e3:e8:04:
         a8:98:47:4b:3b:7f:d6:9e:80:d5:80:95:f9:6a:ef:cc:5d:ef:
         fe:f1:5a:d6:f7:42:49:e4:1a:26:8b:d6:ef:f9:bc:9e:fd:53:
         d7:34:8c:97:c3:5d:6b:34:74:b9:8b:18:a7:f1:0f:2d:80:b3:
         7a:ae:b0:cf:34:ae:86:cd:1a:3d:74:a5:33:36:67:79:33:63:
         00:f4:f9:ff:11:cb:2d:2b:55:cd:03:91:54:3a:b4:fc:16:a0:
         40:d1:e9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:19:02 2025 by rpki-client