Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
File:                     KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft (raw, json)
Hash identifier:          XanITuQ/xibZB2RoiTemUHtJC9GLS4fGGAS60hs5Wmw=
Subject key identifier:   77:7E:C0:32:DD:F1:43:47:7C:C8:A4:E6:2F:65:04:12:0F:B3:95:0A
Authority key identifier: 28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
Certificate issuer:       /CN=280c3860fb96a823971e2ee62f8abff093861604
Certificate serial:       019748FAB76010656EE3E8DF9297EE587CDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
Manifest number:          01E9
Signing time:             Sat 07 Jun 2025 06:01:19 +0000
Manifest this update:     Sat 07 Jun 2025 06:01:19 +0000
Manifest next update:     Sun 08 Jun 2025 06:01:19 +0000
Files and hashes:         1: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl (hash: ReB+LwpUz5agAUGqL5cWZf4FtuwhR/Vi++/uZruGLxY=)
                          2: vSQNJQ-TqAY10tditE63QDgLi4U.roa (hash: OmFUSF7SfEkV+4PCWG7ne1LHCjmLdydl9a/jqJ2m+sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:b7:60:10:65:6e:e3:e8:df:92:97:ee:58:7c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280c3860fb96a823971e2ee62f8abff093861604
        Validity
            Not Before: Jun  7 06:01:19 2025 GMT
            Not After : Jun  8 06:01:19 2025 GMT
        Subject: CN=777ec032ddf143477cc8a4e62f6504120fb3950a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:f2:dd:1f:5d:88:48:39:cb:de:fe:19:99:
                    77:f8:58:3b:9f:b1:da:6c:a2:16:aa:20:1d:2e:6b:
                    6e:a7:cc:d2:56:a5:50:9f:45:ec:18:62:df:68:b9:
                    e3:48:e0:96:c0:73:4f:72:88:df:eb:52:dd:70:43:
                    32:5d:25:49:be:c0:6b:73:10:5d:0f:f3:b2:56:07:
                    78:23:f8:8c:7d:49:ba:87:69:56:05:d9:97:96:6b:
                    25:82:98:69:c0:98:08:7d:fa:1b:2e:5a:1c:81:43:
                    8b:31:30:f9:48:97:cb:2a:9f:51:cb:24:fa:a6:54:
                    6e:ee:93:6a:db:1e:b7:68:02:2b:ef:df:a1:ec:16:
                    38:1c:33:30:ec:58:6c:ec:a1:33:03:5c:00:73:b3:
                    0b:6c:30:e3:9b:7e:17:a7:95:21:2a:87:c6:35:ff:
                    43:fc:5d:3e:6c:f5:f3:64:a0:1f:1c:cd:a3:3d:f6:
                    3d:29:9e:7a:e0:63:a9:9b:dd:96:59:81:5a:ae:ce:
                    81:c7:da:77:39:a9:c4:ba:de:3d:b6:aa:3d:36:b6:
                    06:ea:13:bc:cc:2f:51:ca:a2:74:3c:62:3d:56:c3:
                    3b:52:24:77:75:af:87:00:6d:ec:d1:b3:bb:c9:bf:
                    ca:8f:ae:93:0b:0d:e1:6f:b1:ea:c3:2f:45:b7:e5:
                    3a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7E:C0:32:DD:F1:43:47:7C:C8:A4:E6:2F:65:04:12:0F:B3:95:0A
            X509v3 Authority Key Identifier:
                keyid:28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:4d:f6:85:66:bb:f0:4b:74:e9:46:5c:9f:49:ce:65:c6:e7:
         02:d2:c2:c2:2c:4d:1e:f2:0e:de:9d:2f:c3:f6:b9:06:ff:64:
         a7:a4:63:a8:1d:2b:6a:ed:a1:b2:69:2b:29:1f:25:88:01:00:
         84:70:5f:9d:80:82:7a:a3:11:d1:e9:74:70:d8:71:4a:f9:22:
         ae:bd:45:75:3c:a9:4c:e5:a9:a9:99:89:25:6c:2e:1a:77:eb:
         7e:07:5b:2d:77:0c:43:91:d8:fc:80:dc:d2:ba:3f:fc:e7:76:
         01:40:51:ee:1d:b0:09:a5:e5:60:e7:68:01:9c:f8:11:ad:bd:
         e9:75:a1:d3:e8:64:f2:c4:f8:c5:a3:f3:54:ce:a8:27:10:80:
         0e:f4:b8:21:e2:00:b9:b3:e8:44:68:ce:6d:27:dc:9e:ab:b4:
         b9:6c:74:35:e4:80:d0:cb:30:ae:a3:dd:6a:0d:b8:f3:1f:4e:
         78:e4:53:83:36:46:0a:03:21:c7:bc:e4:72:6e:58:56:b4:8a:
         5a:f6:e4:d3:ac:f6:43:64:b8:76:82:9b:b3:ad:8c:4f:63:76:
         99:91:da:5f:4e:b7:95:8e:77:b9:23:ed:fc:4f:1e:17:a1:21:
         1c:79:fe:a7:a7:4a:f7:3d:bf:e4:0e:de:66:3f:64:d1:a9:b0:
         9c:fd:39:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:15 2025 by rpki-client