Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
File:                     t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft (raw, json)
Hash identifier:          nFHGdUSCpeBKNTKxEjWL+RK3OdfI1QiKAE2OsGzjgBg=
Subject key identifier:   B5:A5:D0:CC:FE:79:4C:18:F4:69:F0:65:F5:76:F1:70:49:E8:8D:02
Authority key identifier: B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0
Certificate issuer:       /CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
Certificate serial:       01975422643117E308F8E7C2F2BF532EEFDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
Manifest number:          0FE5
Signing time:             Mon 09 Jun 2025 10:00:29 +0000
Manifest this update:     Mon 09 Jun 2025 10:00:29 +0000
Manifest next update:     Tue 10 Jun 2025 10:00:29 +0000
Files and hashes:         1: Dg_nZXNMxQynE5ehC7tXyWYcMIY.roa (hash: GdXBqs86r5DAb+MyyV4wEtv+zLO6JrCMc/QjbYWwSSo=)
                          2: t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl (hash: nmAUEv4yfWVBzqh9Rqtwwzzm2cEsAhvvmJb3QNiBsjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:22:64:31:17:e3:08:f8:e7:c2:f2:bf:53:2e:ef:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
        Validity
            Not Before: Jun  9 10:00:29 2025 GMT
            Not After : Jun 10 10:00:29 2025 GMT
        Subject: CN=b5a5d0ccfe794c18f469f065f576f17049e88d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4f:9a:5e:9c:70:4b:41:12:8f:fa:34:3e:06:
                    a0:59:e1:f0:77:5d:f5:a6:20:de:d1:59:5f:d8:a0:
                    a8:b7:e0:4e:89:5b:d7:76:18:dd:f7:bd:d3:86:05:
                    3c:b9:59:10:ed:57:7e:f0:72:2c:68:18:23:a3:3f:
                    b2:fa:75:b6:ae:22:18:09:1e:6e:21:71:44:ce:a3:
                    73:20:ec:8b:97:c3:51:37:c0:a0:ca:c3:84:aa:9d:
                    1f:7e:b0:c2:a3:da:0b:21:20:cb:89:fd:76:f6:a9:
                    4e:a9:fd:90:9c:af:73:1e:9d:31:37:8e:9b:2e:cb:
                    4c:8b:98:3e:b9:ca:ff:ef:a6:bf:27:50:89:92:21:
                    29:bd:03:6a:ba:e7:f9:52:b2:ab:3e:af:36:c1:08:
                    05:bc:06:70:83:ac:f8:79:53:fc:40:34:a2:5e:aa:
                    64:d1:ad:87:1a:31:27:27:9c:1b:7a:de:af:26:1d:
                    8b:83:4d:74:f3:5a:f0:e5:e3:1b:a3:66:41:eb:78:
                    6c:d8:e3:be:f4:50:3e:ea:ae:48:ef:a8:5c:48:0c:
                    98:55:38:8e:c1:dd:d4:da:5f:40:c5:01:f8:db:58:
                    d7:3f:a1:8e:d8:db:72:3f:db:f2:08:54:ea:cd:22:
                    c8:1d:0d:55:ff:04:0a:a3:70:89:21:d0:c5:d8:24:
                    f7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A5:D0:CC:FE:79:4C:18:F4:69:F0:65:F5:76:F1:70:49:E8:8D:02
            X509v3 Authority Key Identifier:
                keyid:B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e2:b1:16:ad:9a:79:6f:12:bf:38:0b:b3:91:52:aa:99:e8:
         e5:31:99:62:6a:70:ab:eb:66:22:e4:62:2a:ad:95:ea:62:73:
         07:51:ed:92:bf:60:c1:67:2e:42:f9:0b:a0:79:b3:4c:7b:08:
         79:3d:65:1a:7d:09:13:af:04:62:d8:65:a1:0c:b0:b7:2d:87:
         8b:6f:67:14:04:4d:20:4f:ac:d4:7f:44:37:1f:ee:f8:c4:1c:
         82:67:c9:63:f9:f7:ac:33:73:9d:64:5f:5b:a2:83:3d:f6:e8:
         5b:96:6c:6f:ed:99:8a:79:fc:c1:3d:2a:5e:a1:b0:e0:71:bd:
         ea:3b:ce:e5:74:d0:10:c8:0a:dd:3e:2f:62:26:41:de:74:38:
         f0:eb:f8:e6:e1:9e:5a:08:32:a6:cf:dd:1d:3e:2f:4c:1b:79:
         f8:e6:98:b0:28:7a:b1:51:17:a1:9c:40:e4:5a:2a:ba:71:b9:
         6e:38:34:83:70:fa:a7:5a:1f:56:73:62:d6:81:3e:04:45:46:
         8b:31:53:ae:0b:5e:d2:d4:0b:46:42:7b:5a:8c:40:a9:12:bf:
         27:38:47:c2:d8:6d:a9:46:dc:3c:94:c4:7b:6d:c4:3d:d1:0b:
         2b:ff:a4:3a:c6:96:0d:3b:c2:c6:09:a9:8d:cb:87:12:98:68:
         f6:86:f6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:26:15 2025 by rpki-client