Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
File:                     ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json)
Hash identifier:          qh4lXu2eJ0tWIBu6Z8aXeUUvyY9wLWZSz23fO1OCO9A=
Subject key identifier:   82:1B:F2:63:1C:91:5F:A7:1D:BE:73:80:D5:8C:B8:18:B1:78:8C:0B
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Certificate issuer:       /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial:       01975C4A2D0A56B992DB122A9EE771D5449B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
Manifest number:          121E
Signing time:             Wed 11 Jun 2025 00:00:54 +0000
Manifest this update:     Wed 11 Jun 2025 00:00:54 +0000
Manifest next update:     Thu 12 Jun 2025 00:00:54 +0000
Files and hashes:         1: NCqzEDAkcdOF_5QXBG8yJjG5C8E.roa (hash: 3y6ZaPdmVv7AeJPbPV9rY47Ckca5BlO8ayxRNoPx1Jg=)
                          2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: oGTBOO7gbN4zwg6csogl2CqQpNHKeXpvyP16uYaipAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:4a:2d:0a:56:b9:92:db:12:2a:9e:e7:71:d5:44:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
        Validity
            Not Before: Jun 11 00:00:54 2025 GMT
            Not After : Jun 12 00:00:54 2025 GMT
        Subject: CN=821bf2631c915fa71dbe7380d58cb818b1788c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:dc:3b:f4:06:b9:6a:53:95:b6:7a:2f:b3:
                    c3:6e:c6:aa:c1:77:0f:3f:17:c8:f3:f7:78:23:7d:
                    07:33:2d:6e:f5:23:7d:e3:a3:12:b3:1d:75:b8:63:
                    fb:77:7c:81:12:3f:04:71:2a:77:cc:f1:fc:7f:c0:
                    02:71:02:59:2f:98:a9:43:cf:59:cd:3f:52:1f:fa:
                    71:6c:37:eb:0a:b4:f1:7b:f1:43:b6:ff:cb:9d:9e:
                    42:35:10:3d:65:e9:f8:99:94:db:45:88:94:5f:63:
                    3a:22:e3:22:b7:a4:c8:55:cf:fa:c6:fd:93:87:37:
                    86:74:fb:f5:e2:3a:f5:1c:ac:10:28:f8:3d:29:1f:
                    5f:a5:6e:e8:53:73:79:12:a0:3d:68:e3:5c:b7:f4:
                    c1:06:dd:ea:ce:68:a3:d0:74:b0:a6:c8:70:5e:46:
                    6e:34:cc:b7:d9:d4:27:24:ce:e4:b3:cb:ea:6a:2b:
                    a5:80:09:ce:89:e7:46:00:eb:eb:25:52:89:28:f5:
                    5c:57:d5:ff:7b:2d:7c:b2:ad:68:72:af:28:0d:6e:
                    14:ab:3f:4b:b1:48:2e:e4:c1:e8:6a:7d:93:34:61:
                    2b:7a:de:9a:3f:52:7a:04:dd:41:2b:17:c7:7c:90:
                    bb:f7:97:ec:53:03:95:0c:66:da:f7:28:74:07:9c:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1B:F2:63:1C:91:5F:A7:1D:BE:73:80:D5:8C:B8:18:B1:78:8C:0B
            X509v3 Authority Key Identifier:
                keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:77:43:ed:e3:fb:95:ba:64:ff:dc:61:44:1e:5e:ba:4c:49:
         b5:93:ba:10:9d:4e:60:00:9d:29:4a:18:1a:1c:c7:39:49:aa:
         56:31:d1:b4:c5:44:a3:33:49:8e:63:70:47:03:06:6e:a9:cc:
         77:48:0a:cc:dd:ea:c9:e9:43:69:16:c2:29:85:dd:9a:37:dd:
         7a:fe:d2:4c:56:a3:a7:f6:d3:2d:7a:72:f7:e6:39:87:3b:0c:
         94:8e:d4:46:37:2b:61:7f:8f:ed:34:79:4f:6f:02:99:cd:85:
         d0:d0:e5:a3:71:77:56:2b:03:9f:13:f7:6a:0f:6b:fb:37:a6:
         3c:8e:f8:ef:88:06:88:b9:43:25:eb:da:fa:1b:74:9d:36:4d:
         4a:7c:ed:8c:84:ca:b9:dc:95:05:e0:f4:ed:44:08:9c:3e:1f:
         d6:80:99:1b:c9:33:49:81:0a:18:63:4c:df:1f:06:40:16:f6:
         c8:65:df:24:ae:4d:91:0d:f1:8a:8c:e3:e8:87:01:e0:35:b2:
         c7:fc:30:9e:60:83:1f:ae:80:7f:1c:95:1f:db:4b:88:e5:0c:
         3c:65:17:60:34:c4:af:d6:b0:74:d1:c3:c6:18:23:69:93:2f:
         02:8f:86:f1:90:d4:44:2f:eb:c4:52:13:c6:31:c6:d6:b7:d5:
         fe:4d:9d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 05:55:43 2025 by rpki-client