Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
File:                     hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft (raw, json)
Hash identifier:          B/1vo8F9Xazf+REzU7FyVKtXKEJHjiLAxDWWHjdxyVU=
Subject key identifier:   0F:AE:D7:34:57:82:F3:03:D6:8F:13:BF:36:20:E4:F4:2D:CF:7B:34
Authority key identifier: 84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F
Certificate issuer:       /CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
Certificate serial:       01974AE8472A14EA106307FC118E726ECDF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
Manifest number:          1031
Signing time:             Sat 07 Jun 2025 15:00:25 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:25 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:25 +0000
Files and hashes:         1: 9IYJ3JT9uAsxxt2lyjGjJVqXG38.roa (hash: Fm2Q+Megk5GLVl9u0EHQZ20RgFMN11FSbY9n50k8CTU=)
                          2: hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl (hash: UV2pW/D7lcSW0deYPS6HPNuSGq9uR2nfOm8H3w4J7Bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:47:2a:14:ea:10:63:07:fc:11:8e:72:6e:cd:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
        Validity
            Not Before: Jun  7 15:00:25 2025 GMT
            Not After : Jun  8 15:00:25 2025 GMT
        Subject: CN=0faed7345782f303d68f13bf3620e4f42dcf7b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cb:b6:c3:40:16:f4:79:32:57:a5:30:da:4e:
                    ba:be:38:7d:64:17:c1:31:25:32:5c:76:5b:80:8d:
                    c7:0e:9d:a9:55:5c:a0:db:07:00:c1:8e:bf:69:78:
                    5b:72:01:96:ec:4f:9c:68:f9:a6:d3:88:57:dd:e2:
                    93:af:b7:98:c0:3b:84:be:c2:88:9d:75:73:2a:62:
                    b1:68:06:2f:44:19:f6:36:fd:56:07:51:48:51:7d:
                    c9:88:a9:09:ca:aa:e5:1c:66:f3:c6:fb:e9:5d:ed:
                    f1:ae:45:5c:81:1f:a0:73:94:b1:20:f3:d9:ff:3a:
                    bc:f1:e0:6d:15:fd:ba:6d:ee:06:a3:6a:2b:e3:d6:
                    28:dd:53:03:58:d7:5b:d8:7a:f0:7f:f5:84:a5:4b:
                    05:46:88:e9:f5:c5:4c:ec:a3:1b:e5:ba:42:c8:2b:
                    6f:7d:ce:03:13:ac:ed:e0:43:2d:20:ec:64:a3:52:
                    7b:48:d9:f4:47:a5:b3:ba:93:89:3f:76:4b:fd:7d:
                    57:d2:b3:06:34:20:df:f3:91:78:d7:5a:dd:b5:34:
                    ec:05:6c:4a:71:a8:ce:db:c5:4d:7b:a6:25:cf:82:
                    4f:45:42:a3:e6:9b:46:51:66:f0:97:00:ff:42:28:
                    74:a9:58:f5:a4:80:fb:10:e9:b2:9b:ef:5e:39:c2:
                    ca:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AE:D7:34:57:82:F3:03:D6:8F:13:BF:36:20:E4:F4:2D:CF:7B:34
            X509v3 Authority Key Identifier:
                keyid:84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:de:34:2d:87:3b:e1:7e:0a:40:d6:d2:46:d1:c6:fd:ae:91:
         e8:a5:b3:8b:9f:cd:9a:5a:5c:e7:d2:ea:4b:fd:e1:84:4f:b1:
         01:72:ff:19:3d:0f:06:22:a0:4c:5d:e0:3c:f4:a1:ba:67:99:
         ef:67:2e:40:21:bb:b8:01:01:4c:b0:f9:3a:a4:d7:81:63:49:
         a0:1e:34:f1:40:d7:7b:c2:94:8e:f5:6f:f8:b9:d5:49:cb:b6:
         7f:62:eb:35:3e:12:b3:97:13:3d:c4:22:12:e4:c4:d3:5d:f9:
         ec:aa:e5:7e:2f:b1:77:16:95:27:33:db:01:01:7d:bc:55:fe:
         88:f3:a2:a8:60:a7:4d:4f:dc:0b:bc:c2:e7:1e:83:33:64:d8:
         ee:c5:94:78:ea:80:55:33:59:1b:56:bc:a3:72:62:2c:28:a4:
         cc:3d:cf:3c:8b:60:04:76:70:93:1c:cc:b6:69:cd:79:27:93:
         66:3a:78:02:d4:59:af:f2:c1:57:36:9f:2f:40:47:8a:68:47:
         3d:75:d5:79:51:00:e1:7c:7b:0c:c5:c2:cf:cb:8f:c6:2d:21:
         06:8d:ad:44:36:86:32:a6:6b:30:ee:a6:2d:13:5c:1d:46:4a:
         07:33:f6:26:10:75:92:65:d3:38:45:6a:81:02:bb:c2:4a:8e:
         c8:2f:ad:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:08:51 2025 by rpki-client