Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
File:                     o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft (raw, json)
Hash identifier:          wtCZcjpWbxfl55stxB3j0f2vemkoo8MOHu9QE/GhyyA=
Subject key identifier:   32:2E:92:72:EC:95:68:80:8E:1E:04:C2:A5:CC:29:56:9B:FC:A8:21
Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
Certificate issuer:       /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Certificate serial:       0197602747EBD2B3467E24139AEA0CF3F2A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
Manifest number:          1223
Signing time:             Wed 11 Jun 2025 18:01:16 +0000
Manifest this update:     Wed 11 Jun 2025 18:01:16 +0000
Manifest next update:     Thu 12 Jun 2025 18:01:16 +0000
Files and hashes:         1: 6bKOaNTOD26M5DPQmaAIN6UyW0c.roa (hash: n/Tx+likKaNH/PY72I+EbFWla5M5IP5SB9HyRpTSt7g=)
                          2: QufC61fw7pK87dB-kx4RiKifXlM.roa (hash: r+1QwPLgLXThXyY70R3A0vn9kct3kVdr0ohpYgp0VlA=)
                          3: o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl (hash: oqwZC4BcOsaITRFJqNP9w0n68X2ryI/gnmsNglbFK+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:27:47:eb:d2:b3:46:7e:24:13:9a:ea:0c:f3:f2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
        Validity
            Not Before: Jun 11 18:01:16 2025 GMT
            Not After : Jun 12 18:01:16 2025 GMT
        Subject: CN=322e9272ec9568808e1e04c2a5cc29569bfca821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b1:fc:ee:3d:fb:51:a1:21:9d:bd:c1:aa:c5:
                    a9:b7:6d:01:a3:c5:e3:c7:46:0d:bb:05:a5:1e:d5:
                    b2:fb:cb:4e:2d:a3:b0:60:8d:59:aa:d8:2e:45:4c:
                    81:e6:31:b1:63:ba:cf:ba:67:d3:27:bb:a8:22:03:
                    e9:1b:62:36:87:2f:f7:0c:41:78:3d:09:90:49:8f:
                    53:e8:65:f4:00:d1:fe:77:5b:e5:b6:d0:f9:62:0d:
                    2d:5a:f9:43:96:fa:b2:18:96:53:59:2a:fb:4e:ea:
                    21:f7:e6:d1:0c:56:c3:92:7f:a9:44:71:4b:05:db:
                    3f:3b:e6:9b:c1:20:12:ba:e8:7e:66:00:50:ec:6f:
                    19:28:cf:07:cc:ee:52:3c:85:fc:e7:da:f8:e7:dd:
                    15:39:48:6c:5e:0c:16:d0:cb:e8:cc:0f:ca:7b:5c:
                    68:49:a4:c3:34:ce:ce:a1:3c:c8:36:11:42:2b:64:
                    26:11:0b:05:ed:85:5d:61:cd:e8:a2:26:d7:53:5a:
                    21:1f:eb:61:25:8a:e9:f6:70:fc:f6:2d:b3:0a:dc:
                    7b:67:7d:b2:eb:79:26:bd:6f:8d:3f:e3:a7:56:64:
                    9d:d2:57:d8:45:88:2d:be:5b:b7:4b:d0:ed:ff:27:
                    41:e5:1b:02:ab:20:2c:aa:e7:e4:87:ff:d5:71:2d:
                    6e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2E:92:72:EC:95:68:80:8E:1E:04:C2:A5:CC:29:56:9B:FC:A8:21
            X509v3 Authority Key Identifier:
                keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ad:8e:2e:0b:2f:77:e2:b2:ea:d4:99:47:df:40:ef:eb:7f:
         05:69:dc:c9:8e:70:e8:9a:72:37:70:9f:54:f9:0b:8b:76:33:
         58:2d:9c:e2:e9:38:68:d9:a8:22:b3:a4:01:d5:7e:d5:cd:9c:
         58:bd:78:51:7a:eb:14:57:58:65:14:3f:e2:ae:80:f4:01:9c:
         83:2c:c6:c1:cb:24:56:ee:12:a2:24:7f:ce:32:55:f4:91:2f:
         9b:6b:d0:6e:e3:d2:0e:00:27:9d:d0:6b:d4:11:ac:d4:84:fc:
         25:6c:cf:1e:c4:42:81:dc:f7:3a:6e:89:f4:e7:ce:d7:91:d9:
         d0:ec:b9:74:c6:51:2e:2e:3f:4b:63:5d:1c:25:51:cd:cb:e0:
         42:a1:6f:bd:12:76:60:70:42:ed:af:55:97:e8:c9:47:83:d1:
         e5:af:f0:85:47:97:73:12:27:30:ea:27:bb:a0:4c:f3:5d:fd:
         b3:64:0a:b2:12:4c:91:f6:f4:3b:35:4e:bd:81:45:44:19:b6:
         c6:fa:22:4d:c0:19:04:3a:99:ec:70:b9:9b:e1:ec:8e:95:c0:
         ab:7c:63:e5:97:bb:0d:bd:81:3c:b4:e1:9b:f5:ff:b0:9e:bb:
         ab:73:d5:e3:68:7c:98:38:18:5e:cd:51:b8:e8:6b:cf:84:97:
         ed:37:a5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:37:20 2025 by rpki-client