Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
File:                     a30fHod8EnmCdOATNFVPiZ846sE.mft (raw, json)
Hash identifier:          K320oYPt/uhbXrdgtWmqEyS8suU5lMjLcfmy4++nr78=
Subject key identifier:   CB:77:FE:BE:A9:76:95:80:CE:68:7B:7A:9B:56:86:11:3A:20:98:A3
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Certificate issuer:       /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial:       01974A0C964BECC0A8EC9D44BAF4AAB3F3AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
Manifest number:          100A
Signing time:             Sat 07 Jun 2025 11:00:28 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:28 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:28 +0000
Files and hashes:         1: 1-47yB099htuBv2m-mnsxmo5hMaE.roa (hash: glbHBbOOXucvNPZBEZEZlyBvhlSEAVVGrvhxKUG4Uz4=)
                          2: St4HRjoesIgHRfExOBffE_pcBIw.roa (hash: zj7JSUVTgp8pR7SRQVxha79Is1N6T3q+JK526mfdo5s=)
                          3: ZRn8_lnFsXvgqivcUn4eIrUv-Ic.roa (hash: ViUiWV5ebu4waGuKqQE1IWidKaFMMzGFtUARe3tVsh4=)
                          4: a30fHod8EnmCdOATNFVPiZ846sE.crl (hash: scUDAzAoOg0bDr1C+eOKfXzvxO9lIH96xdJFDcrwL+Y=)
                          5: lKdTsJ9TvIICTgPRcm3O1hlBWiM.roa (hash: py16JH9zUXcJT+HWUygN67vLSyq6kBTksveRhrIkt/k=)
                          6: pTwzFC29LPXNKIBj8fs94m0Kbbg.roa (hash: sPgk9WDd2v8KxrBOyyp78OiRQG9IETqQ+gnNWNn4qjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:96:4b:ec:c0:a8:ec:9d:44:ba:f4:aa:b3:f3:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
        Validity
            Not Before: Jun  7 11:00:28 2025 GMT
            Not After : Jun  8 11:00:28 2025 GMT
        Subject: CN=cb77febea9769580ce687b7a9b5686113a2098a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a2:e4:a4:37:4a:82:5b:79:4b:4b:62:8d:4d:
                    e0:6f:8c:b3:44:99:04:90:64:ea:36:82:5f:60:27:
                    c7:e2:37:84:55:8b:76:d0:48:21:20:72:4d:d5:ae:
                    3b:46:dd:b3:90:9d:6d:57:0d:64:84:f0:9f:76:2d:
                    48:54:90:70:02:38:a8:39:03:1a:ed:50:54:cd:e1:
                    5e:a4:bf:77:4a:81:cd:66:a2:f2:be:0c:91:e3:56:
                    38:95:0c:9f:c4:df:e2:00:c4:2a:d4:88:8a:d4:6d:
                    10:5b:eb:29:30:2c:56:30:de:a9:75:f7:79:e9:72:
                    d1:bc:87:dc:d4:1f:48:2a:ba:28:17:c8:48:92:9e:
                    89:b5:ea:7c:a6:06:3f:8f:f0:21:c5:e9:1a:9f:03:
                    49:6a:60:83:58:e6:10:30:4d:87:f9:70:42:27:96:
                    04:f9:90:46:4a:6d:76:9c:a9:2b:05:96:4d:6d:de:
                    16:80:08:51:ea:04:6e:4f:a0:9c:a9:f6:c6:e0:ea:
                    2e:58:0a:78:da:67:01:2f:fb:36:16:a5:38:e5:63:
                    e0:62:04:40:06:99:5b:86:0c:20:80:c3:13:4f:87:
                    f5:5f:37:7e:53:0b:c2:8c:80:8a:d5:56:cb:43:69:
                    3c:4b:0e:e0:8c:e1:41:eb:71:2c:ba:d6:0e:82:f5:
                    25:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:77:FE:BE:A9:76:95:80:CE:68:7B:7A:9B:56:86:11:3A:20:98:A3
            X509v3 Authority Key Identifier:
                keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b6:e3:0a:85:6c:a7:4e:1f:fe:1b:35:1c:f6:fa:fa:0b:3f:
         91:76:ee:b0:e2:ea:fd:04:39:ab:c1:b7:b7:ab:61:e2:2b:09:
         4d:de:75:d8:a5:82:ca:fc:10:9e:12:53:8a:65:d2:0f:f4:e5:
         80:b9:8c:19:8c:a6:8e:1a:4b:f3:d5:7d:6c:3e:01:1d:d1:2a:
         ea:c9:ec:35:c2:df:f4:75:5e:fc:5a:fd:59:9a:4f:ae:49:f8:
         d2:70:34:46:45:34:f2:02:68:0b:18:ca:b1:9f:50:ac:78:94:
         44:2d:10:ae:1a:8c:54:ad:fb:72:66:2c:1f:bf:f3:c1:e2:b0:
         6d:30:04:01:95:ef:40:55:24:03:8d:7a:5d:89:8c:15:45:23:
         0f:1b:ca:04:6d:39:46:20:6c:46:20:5e:f3:f4:48:33:16:68:
         37:83:89:d7:c5:02:65:53:f1:90:e9:15:fa:54:e8:85:ad:52:
         c9:16:d7:68:8c:02:20:01:69:05:ef:b1:93:a7:98:84:7f:27:
         31:76:56:de:60:b7:f6:1f:cd:6d:82:93:99:f8:d1:1c:9f:29:
         b5:3e:52:d3:db:9d:00:c6:0a:f9:74:6b:7d:42:d5:b4:4a:fc:
         da:fd:7f:5d:af:a2:3f:f7:b1:dd:06:98:9d:d2:b9:6a:60:7c:
         f8:9d:36:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:32:33 2025 by rpki-client