Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
File:                     Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft (raw, json)
Hash identifier:          J45WDmaLkPL8LdGfadO/j8j4SYYvESF0i4367dVnoa4=
Subject key identifier:   01:14:6F:88:A3:EC:C1:F5:7B:F8:8D:24:5B:35:25:74:65:57:5A:CA
Authority key identifier: 62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
Certificate issuer:       /CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Certificate serial:       01974D7C515722A45A0C0E24DF9D4808E4AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
Manifest number:          0948
Signing time:             Sun 08 Jun 2025 03:01:22 +0000
Manifest this update:     Sun 08 Jun 2025 03:01:22 +0000
Manifest next update:     Mon 09 Jun 2025 03:01:22 +0000
Files and hashes:         1: L7vo6n9BgY3fZANo6epe7vbZHts.roa (hash: Gmx0MV98HD7oOh/xtyqe1DV4s1De/YW1VHipqzOKk8c=)
                          2: Yb9tsCfpQgyQVhV8fqh-Sp_yitA.roa (hash: 2hs56XjZJhM4FFxn6rpMfJzmdBVo5/6HusR5cW2LXtA=)
                          3: Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl (hash: tKf1gtTzMLvKlj+5Qmj3PD/12EYTP3oze5lwn8XW7zc=)
                          4: fVp3g-s19I4wph98MiqmHy9dJ8Q.roa (hash: 1ttOZ6t4S7bYciANzsJmcpLu3G2yq0AKNa7bw1gtrgY=)
                          5: shu5QB5GjPMBcKGZl2o9EhVlwLE.roa (hash: l2v228GgEP09+0vIbdur06C/ah0an7DTOFEqlZLFixU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7c:51:57:22:a4:5a:0c:0e:24:df:9d:48:08:e4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62beaa57c67aeb5bafd99793ab4846850a796c28
        Validity
            Not Before: Jun  8 03:01:22 2025 GMT
            Not After : Jun  9 03:01:22 2025 GMT
        Subject: CN=01146f88a3ecc1f57bf88d245b35257465575aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:89:49:ac:c7:f2:76:24:14:fe:ce:6f:a1:16:
                    57:14:95:a3:ff:f0:56:98:ef:7f:9d:b4:35:42:54:
                    bd:ab:41:f2:3b:16:6f:5f:84:55:23:d6:b1:8c:6f:
                    f1:ca:f1:bb:b6:03:9d:89:81:f3:8b:3d:15:e4:71:
                    ed:1a:f7:3d:86:84:b1:40:b4:cb:f0:a1:05:96:9c:
                    64:9e:55:c0:0e:cb:01:9c:59:76:5a:b7:be:12:86:
                    41:54:9d:d1:45:6d:fa:a2:8b:da:ab:8a:b5:5d:96:
                    d8:75:96:08:97:6f:0a:34:ee:64:d5:b6:87:d5:7e:
                    9f:44:9f:ac:b7:58:81:0c:73:f3:25:8f:ee:b6:b1:
                    87:4f:60:4b:8e:51:36:66:8e:3f:63:5c:72:77:5c:
                    1c:cb:a5:b9:e9:10:93:ec:ee:f5:b9:ef:ea:e3:5c:
                    50:77:15:70:6f:e3:6c:6c:18:d4:27:14:72:2b:c6:
                    7a:33:b4:ae:84:09:0e:57:1a:0d:87:2b:83:3d:2a:
                    72:46:bd:3d:4c:eb:9c:44:0d:7f:14:95:6f:1d:3a:
                    98:54:bb:2e:c9:00:f8:79:ec:da:34:bb:72:c5:af:
                    33:9f:56:98:d3:09:96:f2:ea:8d:70:e9:c2:72:fc:
                    5c:c3:7a:2f:28:68:74:4b:22:25:0a:8a:2a:37:3f:
                    94:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:14:6F:88:A3:EC:C1:F5:7B:F8:8D:24:5B:35:25:74:65:57:5A:CA
            X509v3 Authority Key Identifier:
                keyid:62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:97:2d:d3:62:74:de:59:74:d1:8b:a5:e1:4f:74:f8:08:33:
         2b:d9:37:ea:f8:06:ed:e0:ca:85:69:83:b1:41:af:62:3e:82:
         d2:ab:ae:44:d7:31:5a:01:55:41:b7:cb:7b:05:0f:45:e8:83:
         55:4d:9f:ae:27:e9:f7:78:fb:1e:8b:0a:01:bc:c2:bf:15:ef:
         e1:3e:61:28:0d:ca:99:f6:5f:46:a1:de:f5:42:08:4d:59:9b:
         5f:33:0e:78:75:79:9a:a3:e8:03:bf:50:07:91:da:27:03:f7:
         54:a5:67:54:a8:11:66:f3:16:04:1f:11:38:a9:70:5e:bf:50:
         0b:31:43:3d:aa:2a:83:88:b0:90:38:e8:a3:48:bb:81:bf:5f:
         2a:c1:88:25:21:ba:13:8b:9f:0e:9b:ca:81:3c:32:64:82:aa:
         f2:b7:18:83:d8:37:86:f4:7f:27:af:75:92:fb:cf:c8:87:32:
         af:b0:4c:86:f7:af:b6:0c:8e:0a:e8:30:bf:e8:ac:d5:6e:2f:
         df:d0:87:70:fa:5b:da:e4:5b:b6:10:a8:49:8a:b3:2c:b3:07:
         c5:00:fc:98:c0:09:92:f1:9a:43:55:74:4b:ed:fc:bb:43:32:
         da:4d:46:74:bf:fe:17:bd:7e:0b:e3:c5:87:01:a0:f4:01:d1:
         d0:21:de:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:15:23 2025 by rpki-client