Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
File:                     AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json)
Hash identifier:          DZAG8XP7/PI3tTuoy0IiTLmXt18qY92jrNi6L/Y0vHM=
Subject key identifier:   7C:76:3B:44:56:4A:8D:45:81:54:69:83:64:61:AC:F6:68:7D:AB:BD
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Certificate issuer:       /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial:       019754C75E817927B240164FE73E4AD624F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
Manifest number:          15A1
Signing time:             Mon 09 Jun 2025 13:00:41 +0000
Manifest this update:     Mon 09 Jun 2025 13:00:41 +0000
Manifest next update:     Tue 10 Jun 2025 13:00:41 +0000
Files and hashes:         1: 42hpqWqY72USafsvfiD_518D4aY.roa (hash: XyqSHkNb93lXjMdBQV3tT6d41VyHCZFCyukyVX/G7/A=)
                          2: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: msS81Idx+IhN3SWh/J7xCYZoEDdPdMRFKcxY5TMJlnY=)
                          3: B_3pca4XmmEyoD7_YWQ5xsaTGlA.roa (hash: n5M6+Js+wLuWN3HaqVwvyZeizy4tawLMu5EBkNvd9Nw=)
                          4: GNcGFP48VRO_QOUxz3CvJSh90oA.roa (hash: 9T1HgBLEzXKt2GaC2y8FBctN+punw/ln3V52HLktRUQ=)
                          5: IC2VX1jV_Dwi9TgKflm59IYMQeg.roa (hash: 4Tq4DinpdRGqkwFnGKnQe2ovlPCcyDT8nlsjtJqn5tw=)
                          6: g9Hs1uIFeelsIxcu9-JFATbg5r0.roa (hash: i1uLdd6dy3tsCAr6HgKPaDpJNpr4x+g5kpnEdrNnrzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:c7:5e:81:79:27:b2:40:16:4f:e7:3e:4a:d6:24:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
        Validity
            Not Before: Jun  9 13:00:41 2025 GMT
            Not After : Jun 10 13:00:41 2025 GMT
        Subject: CN=7c763b44564a8d45815469836461acf6687dabbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9a:ef:00:ea:39:aa:4e:72:cc:5c:b8:05:9d:
                    61:21:80:ae:ff:ee:98:68:29:5e:31:0e:f1:40:21:
                    ea:76:10:34:6a:70:85:26:83:f8:01:03:a6:43:74:
                    6c:04:88:dc:1c:83:3e:2a:40:86:a3:6e:cd:e3:c2:
                    5a:ce:18:51:ef:38:4c:30:d2:62:f3:51:f7:87:f4:
                    6a:54:df:17:2f:d3:79:93:dd:ce:5a:d8:d3:26:f8:
                    68:72:7a:8a:0f:b5:f2:b8:b6:b0:38:ed:12:71:e5:
                    61:56:ba:0a:d3:2b:ed:e8:fd:03:36:ea:99:1a:7f:
                    00:bd:4c:9a:e9:55:32:19:29:16:62:c7:bf:7a:65:
                    e5:08:17:98:a6:f5:75:ce:8c:b4:3d:73:31:17:04:
                    8b:70:29:34:51:dc:19:81:4c:1f:cb:e9:2e:36:dc:
                    bb:64:e9:50:31:9d:09:87:bf:78:cb:bc:c8:2a:36:
                    2e:29:7e:7a:6e:94:8a:14:42:da:ad:09:32:e0:a2:
                    21:d2:20:f0:e4:f3:7f:0a:f2:b8:aa:1d:30:f0:33:
                    b7:ef:b3:65:a7:d4:be:5c:04:92:95:cf:62:8f:99:
                    d4:15:e2:97:d8:b1:5e:29:8e:31:4a:4f:b0:b9:76:
                    b4:60:a7:f5:e1:a0:da:c1:64:7c:28:f4:09:50:82:
                    b5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:76:3B:44:56:4A:8D:45:81:54:69:83:64:61:AC:F6:68:7D:AB:BD
            X509v3 Authority Key Identifier:
                keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:32:f3:77:94:0e:27:72:37:bd:f1:68:bf:dc:e3:b6:c2:41:
         ad:cd:b3:da:af:0e:49:a7:4b:9c:cc:51:a8:4f:e8:1c:52:e1:
         cd:3c:19:f3:45:d3:ba:bd:be:33:36:31:e2:68:16:c9:de:61:
         68:10:77:07:77:74:fb:b2:f9:34:3a:67:c6:e9:bc:68:cb:ea:
         80:b6:3d:db:65:3c:ab:de:88:19:1e:10:bc:e6:5e:dc:4a:e3:
         12:20:56:7b:75:7d:8a:b3:d2:02:85:cb:c7:42:aa:e5:48:65:
         dc:e1:6d:9a:19:27:93:74:d2:98:b9:c3:a4:a3:7a:32:31:79:
         ae:a8:ad:b6:2c:ec:2c:28:d2:94:4b:bf:20:24:44:fd:79:3f:
         6b:dc:7d:92:8b:4e:bd:a3:95:84:ad:02:c4:58:b2:0f:a3:d6:
         18:ba:35:54:0f:60:3b:f0:81:4a:aa:1a:ba:1f:e0:29:3c:28:
         78:58:b8:81:07:39:78:f8:8d:18:8a:50:00:90:f2:03:5c:ad:
         87:14:61:ed:6d:5b:ca:bb:e2:15:d4:45:31:1b:e9:a8:c0:10:
         fd:33:a8:dd:a1:da:ae:cd:71:aa:b5:c0:b9:a2:39:c7:21:0e:
         70:6d:30:82:a3:de:7e:53:b6:34:01:66:c5:bd:b6:a3:0b:f2:
         79:4f:3e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:21:13 2025 by rpki-client