Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
File:                     a3-gXmtNilEpRAdQTZZBrT4CBD8.mft (raw, json)
Hash identifier:          TngmQ2nGlF7MGf97pWRtSngh07zorJa1UNyjFLrPaE0=
Subject key identifier:   12:62:E2:14:F2:FB:AA:8F:9A:54:CE:83:EA:32:63:E6:90:E2:EA:4A
Authority key identifier: 6B:7F:A0:5E:6B:4D:8A:51:29:44:07:50:4D:96:41:AD:3E:02:04:3F
Certificate issuer:       /CN=6b7fa05e6b4d8a51294407504d9641ad3e02043f
Certificate serial:       01976628BD9C84E4EA30C9DB05577796F119
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
Manifest number:          0F03
Signing time:             Thu 12 Jun 2025 22:00:35 +0000
Manifest this update:     Thu 12 Jun 2025 22:00:35 +0000
Manifest next update:     Fri 13 Jun 2025 22:00:35 +0000
Files and hashes:         1: B2d2juf7uKwnCru3ZiDDoYOXciY.roa (hash: 82W2phd9aqBUTlWrD81GDTCzzKIr5I7VokuYsIuKW0U=)
                          2: a3-gXmtNilEpRAdQTZZBrT4CBD8.crl (hash: nztIoi8bdH0EPrmEsAPTUVQ7rGTWLM0xY2ojB/Zx7Bw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:66:28:bd:9c:84:e4:ea:30:c9:db:05:57:77:96:f1:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7fa05e6b4d8a51294407504d9641ad3e02043f
        Validity
            Not Before: Jun 12 22:00:35 2025 GMT
            Not After : Jun 13 22:00:35 2025 GMT
        Subject: CN=1262e214f2fbaa8f9a54ce83ea3263e690e2ea4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:ca:c3:4e:e3:50:c3:f2:8f:46:00:8b:32:
                    eb:26:00:a1:38:dd:ef:e1:f8:65:13:96:0a:76:12:
                    39:1d:1b:a5:d7:36:e9:58:f7:6b:61:71:55:44:7b:
                    e2:6f:d9:9e:10:d8:f5:ee:26:f9:9e:03:26:ad:d5:
                    75:3b:ee:e9:fc:74:ff:2e:4e:b8:e5:c8:7d:91:6b:
                    87:29:25:aa:f3:b2:29:1c:28:86:2c:73:23:12:22:
                    14:ec:28:d9:33:20:b5:0b:c7:94:fa:31:df:75:a2:
                    e5:81:45:5c:10:ca:5f:85:66:de:1c:9b:1e:fa:25:
                    5b:01:8a:6b:e8:ae:6c:63:84:1d:ba:aa:d6:32:84:
                    b0:06:77:4c:f5:29:f1:3f:23:5f:76:8d:b7:4d:b5:
                    c4:db:5f:56:62:d5:ec:4e:20:f7:65:e6:71:26:e0:
                    ed:b6:62:77:24:55:8a:97:22:7a:c4:fe:dd:1c:ff:
                    05:00:89:55:f8:20:ba:e5:c2:61:4d:36:81:a0:c3:
                    75:3f:dd:c3:6c:49:a7:90:c3:90:53:a9:b5:3b:dc:
                    66:80:35:9a:1e:a7:ed:0c:18:5c:b8:ac:4f:40:24:
                    d1:df:0d:0b:ae:6f:73:ba:54:4f:fb:ff:6a:47:7d:
                    58:e5:ba:e4:8d:06:8b:5e:1b:e8:9f:ec:a2:93:3c:
                    d1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:62:E2:14:F2:FB:AA:8F:9A:54:CE:83:EA:32:63:E6:90:E2:EA:4A
            X509v3 Authority Key Identifier:
                keyid:6B:7F:A0:5E:6B:4D:8A:51:29:44:07:50:4D:96:41:AD:3E:02:04:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:e9:fc:a7:11:5a:65:91:a1:d4:32:d5:d0:e8:3a:fd:96:17:
         af:49:8f:39:d9:8a:1f:5b:8c:0c:97:89:d2:71:93:ab:95:25:
         80:fc:76:b1:41:77:4c:81:00:c3:7e:03:2a:ec:0d:92:ff:44:
         c6:40:18:02:be:f6:75:b9:c0:c2:3a:e1:96:6e:7e:ae:4e:b1:
         11:d8:5d:d6:9c:c8:6f:7c:fd:ca:10:9d:05:25:ea:30:fc:84:
         cb:65:39:77:e5:30:ab:96:04:81:92:35:47:0c:fe:6e:c2:f2:
         89:1d:7c:0f:b1:d8:75:69:48:2d:ad:8a:67:40:3d:69:b4:7f:
         a4:f3:5b:ba:41:bf:94:2b:d6:4d:36:32:73:5d:c4:fc:37:45:
         bb:11:32:19:a3:fa:15:5c:76:ff:94:f9:98:e3:3b:12:4b:5e:
         bd:8b:7f:a0:34:c9:7c:3c:20:68:56:44:19:e5:43:9a:5f:f3:
         04:2e:87:fb:4c:4a:4f:0c:73:a1:6d:3f:90:c5:1e:ea:32:f9:
         cd:24:34:dc:a5:47:19:34:cc:e3:42:6b:a2:83:fd:99:66:15:
         b0:bf:bb:2e:21:a2:80:4d:37:6e:77:c4:69:a5:f2:b2:58:93:
         4e:26:3f:17:02:e4:dc:70:58:6e:81:db:aa:ed:47:b2:2f:07:
         c1:9f:23:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 08:22:43 2025 by rpki-client