Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
File:                     iZJBoANIMVwCwOKpFQuGMIfRyFc.mft (raw, json)
Hash identifier:          c7oeJwCoPC08Pny0AAQ6TNjOy8t40Yyp7CbxVewMBSw=
Subject key identifier:   A2:EF:98:FF:D0:AF:B1:DB:03:29:C5:4D:92:CF:D7:08:E8:0D:F8:17
Authority key identifier: 89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
Certificate issuer:       /CN=899241a00348315c02c0e2a9150b863087d1c857
Certificate serial:       01974779C496B6C349B3F0E77AFCE412B137
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
Manifest number:          03AE
Signing time:             Fri 06 Jun 2025 23:00:51 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:51 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:51 +0000
Files and hashes:         1: 4ttxHqG59duZ5ALfvPB_x9iVGCs.roa (hash: fJvQbvQakJgNuM3dzhqnbPVFRMsvp98NzyW7hIi8pio=)
                          2: NhicUss_-kBiNIFBTBFdbugxZaU.roa (hash: x3eOaLcQnmMrFRkUTb/8DthAE9edvP0YO/DPYux9zTE=)
                          3: UZiFFztRfeKmfRhqu-DMXiBHSwY.roa (hash: LxeETqbIhKu+XVMzaqPP2mnLDNqdpGhRBtoYHWGJNkY=)
                          4: WDn1mbHRkiQwKXkGzlfqrEUF0Pw.roa (hash: L1bh3lJQlQbB+0euiek2LnVAf5GTLk4lwBwlyM5cRJ0=)
                          5: eeMUvhikn7BcQGcUG3J_KumqmI0.roa (hash: rMyPtHGXVd59N7ATnOyDSnVnrrZL6fZtXGf2fhRBUW8=)
                          6: iZJBoANIMVwCwOKpFQuGMIfRyFc.crl (hash: iNo8a9AFeurqhRdADGrDBEQQ8gm6ZCgHcLRuk0cu1ZM=)
                          7: yHRWciFFOnDT7mIADGdvOTHOJRI.roa (hash: OaAq5TmHl/2ctslO8/QJcZi4nuJ1WFnqWLqN1q7rq1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:c4:96:b6:c3:49:b3:f0:e7:7a:fc:e4:12:b1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=899241a00348315c02c0e2a9150b863087d1c857
        Validity
            Not Before: Jun  6 23:00:51 2025 GMT
            Not After : Jun  7 23:00:51 2025 GMT
        Subject: CN=a2ef98ffd0afb1db0329c54d92cfd708e80df817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8e:f1:1c:eb:e7:44:63:6a:3c:c0:1a:be:4a:
                    c9:40:f5:7d:a5:e6:bb:43:a8:76:a3:f6:8d:5c:8e:
                    95:8b:c3:00:62:16:6c:c2:55:80:33:1e:6d:e3:78:
                    29:1b:c7:80:4b:ab:6b:8a:2a:19:79:61:cd:15:62:
                    ba:f4:c0:66:fb:32:18:0e:90:dc:2e:b8:c1:6a:c7:
                    16:38:68:31:cb:91:6d:63:80:ac:fe:0d:58:c4:7d:
                    de:2d:e0:31:bf:ae:a8:b5:cc:1d:2d:5e:97:7a:51:
                    e5:f7:41:2a:2d:02:e4:8d:1c:d3:28:48:ce:e7:47:
                    61:76:fc:b1:5f:40:68:66:fe:3b:63:13:be:7a:71:
                    a7:41:3a:4c:97:30:da:10:56:3c:a3:f7:e5:f2:78:
                    db:b4:7a:3b:93:40:98:99:70:ee:d7:4b:73:cc:09:
                    26:23:f4:c3:0e:7b:52:7b:90:de:3e:bd:91:ef:23:
                    e6:99:e3:36:6e:22:80:f9:2c:80:b1:d3:dc:1e:8d:
                    2e:63:14:b5:b3:e8:f0:b9:77:ce:8b:54:61:73:4e:
                    9b:b0:f3:82:87:83:5b:88:cc:32:a8:df:a1:03:9e:
                    1e:ce:8b:d7:af:cf:78:c1:f6:11:85:cf:e5:00:0e:
                    f6:5f:29:30:25:da:f6:51:e2:dc:06:8a:f3:12:c3:
                    86:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EF:98:FF:D0:AF:B1:DB:03:29:C5:4D:92:CF:D7:08:E8:0D:F8:17
            X509v3 Authority Key Identifier:
                keyid:89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:10:1b:8c:59:03:14:66:4a:b9:3d:d0:60:74:5d:97:62:e3:
         c8:58:58:8a:35:c3:e8:2e:c6:6a:83:d1:da:1a:41:cc:19:2a:
         52:60:a3:b4:95:1c:df:b8:48:f6:06:91:ef:9a:83:ad:b7:ba:
         ed:6f:7c:f0:74:60:b7:a0:4f:1f:f0:94:64:ed:52:91:b6:2f:
         d4:a9:18:e4:f0:db:64:af:c6:dc:ef:76:ff:91:e8:cd:95:22:
         29:19:89:c7:68:c6:07:4e:14:37:c8:d4:a3:34:55:9d:d6:cc:
         12:08:37:1f:a3:cf:6f:42:f9:aa:80:08:5d:9f:8d:d1:f1:27:
         c3:c4:18:3a:79:46:10:0d:f9:43:a6:25:85:8b:e3:e1:f8:48:
         0e:c8:09:26:bb:c7:d7:24:61:c1:a6:51:ce:e5:79:6e:d8:d3:
         c8:92:7e:b1:92:44:cf:54:82:11:d4:0c:8f:da:cf:7e:5b:c6:
         97:c9:c2:34:06:c3:64:c0:a5:4d:d1:6f:e6:fe:8c:4b:1f:e5:
         6d:ff:d1:5c:b9:74:54:e8:39:c4:4b:22:4f:b1:81:ab:41:39:
         c5:ba:9c:61:4e:50:94:07:3f:22:b3:ee:87:50:66:2d:35:a8:
         0f:0e:e5:0b:5d:bb:e2:8e:a2:34:b7:79:24:ca:47:a5:bd:82:
         d6:2a:56:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:58:25 2025 by rpki-client