Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
File:                     moBTvNLE2KeioyXit0ZBZqXkjd0.mft (raw, json)
Hash identifier:          Slyza64NQyJX4BsSb71z0pjnmdXoCg+siAUnALwlqYs=
Subject key identifier:   60:0D:96:F9:E4:D2:D0:96:0C:2F:9F:29:4E:93:76:BB:78:A1:7F:FE
Authority key identifier: 9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD
Certificate issuer:       /CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
Certificate serial:       0197485589B38D3047F22FACC1063137FF3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
Manifest number:          1007
Signing time:             Sat 07 Jun 2025 03:00:54 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:54 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:54 +0000
Files and hashes:         1: cxA-RyOMLkq935v_LceKQwYPwHs.roa (hash: HnGDMBYysRSj3AGQ0kR7dSJMblTeuNonvUsGSEcjwQ4=)
                          2: moBTvNLE2KeioyXit0ZBZqXkjd0.crl (hash: K2n07xtk4Gtisf7HVcZgBA8k+ul1medqOcvqLa15FrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:89:b3:8d:30:47:f2:2f:ac:c1:06:31:37:ff:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
        Validity
            Not Before: Jun  7 03:00:54 2025 GMT
            Not After : Jun  8 03:00:54 2025 GMT
        Subject: CN=600d96f9e4d2d0960c2f9f294e9376bb78a17ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3a:a3:a2:42:f0:ab:2b:6e:00:68:95:38:96:
                    57:30:fa:6b:29:f4:ee:b3:38:af:c5:fd:0d:92:b6:
                    b5:65:51:a7:19:8f:99:56:65:65:08:89:ad:e2:a5:
                    43:f8:87:d0:22:b9:02:1f:95:a9:76:07:d9:77:8d:
                    9e:98:3e:59:03:f0:b3:4a:1e:03:5e:0b:6c:4a:df:
                    fd:12:5c:68:32:42:93:38:1c:27:97:e3:e6:fd:2f:
                    0c:77:cc:c9:82:2f:38:25:37:8e:58:da:f3:71:7f:
                    39:74:b0:3c:6c:9e:ff:24:95:b3:28:0a:ab:3c:9f:
                    b2:3b:24:55:fd:8e:e3:12:c0:5e:b3:46:ae:a7:d9:
                    01:ac:9a:38:2b:16:da:72:de:bc:86:0f:dd:e0:c1:
                    f7:35:c2:c6:0b:2b:12:87:db:a6:bf:52:3e:31:34:
                    d7:7e:54:e6:5b:a0:f7:10:6f:f3:bb:24:30:30:c6:
                    78:c4:c6:82:30:3f:82:6c:77:d9:9e:15:3e:58:ae:
                    6f:19:bc:56:fd:53:d3:57:8f:d9:d3:11:44:4e:40:
                    de:d6:ef:5b:00:95:f2:ee:7f:7d:b5:b6:f4:cc:0b:
                    e9:37:b3:bb:d0:2d:66:45:29:09:0d:0f:e1:9b:1d:
                    b3:a9:06:01:24:c9:d3:fd:f5:da:99:da:c4:db:86:
                    b4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0D:96:F9:E4:D2:D0:96:0C:2F:9F:29:4E:93:76:BB:78:A1:7F:FE
            X509v3 Authority Key Identifier:
                keyid:9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:3c:91:dd:48:88:2f:28:88:ee:64:9b:7a:4d:18:24:45:62:
         44:5a:72:98:00:c8:af:7e:dd:ed:39:40:81:e9:44:db:6c:6e:
         c6:cc:ad:30:0d:86:20:14:42:0f:f0:c3:09:ad:30:91:62:b4:
         35:f5:1c:a7:58:95:7a:6c:1d:be:a3:b3:e7:ef:17:22:93:d9:
         e4:86:f8:7d:4e:a9:86:28:79:86:3e:0e:f7:b0:41:0b:36:9b:
         ba:69:80:0d:f7:70:96:55:72:e6:a2:36:ac:27:18:3e:da:2d:
         da:a7:a8:db:d1:4d:d0:a7:e4:ab:73:7e:1c:ab:b8:fd:49:6e:
         af:e8:49:e5:78:e1:c1:94:6d:be:1c:18:e6:b6:35:0b:00:14:
         bd:24:4b:19:25:d8:7f:e3:60:e0:c1:08:fc:48:8c:0b:8f:42:
         b2:4d:28:3c:73:8f:7e:35:7b:ae:ed:f3:9e:ae:63:a6:8b:08:
         30:4a:b5:ed:b0:35:ce:61:72:84:8d:47:c1:b2:ed:66:74:67:
         b9:50:b7:3d:92:16:24:e1:71:61:ba:d6:13:d3:f3:49:c2:32:
         cb:3f:7e:29:5b:f6:9a:e8:e7:60:0d:9e:7f:52:19:4a:2b:a8:
         ca:3b:bd:a6:23:48:d3:18:bf:e9:9e:70:c9:5a:a5:f0:8b:e2:
         7a:28:e9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:58 2025 by rpki-client