Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
File:                     V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft (raw, json)
Hash identifier:          QQM+5lAmmqkWug6+R8DM/GqwqOyYPoLe52/nQwvOy0s=
Subject key identifier:   C0:3A:FC:0A:9F:3C:90:43:70:D0:8D:CF:53:1F:6D:95:5F:62:11:98
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Certificate issuer:       /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial:       01974B5692ADBC0BD93D543EE148A7611B4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
Manifest number:          0EA7
Signing time:             Sat 07 Jun 2025 17:00:54 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:54 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:54 +0000
Files and hashes:         1: GyhAtf15yZqMprvOSAG-mSzNZTU.roa (hash: jfVjDUAXNOWRUx2duW7NqVNPhOHvwJFkEOJDlRjLf1c=)
                          2: Jn9LNrC4wIy3yIlbSkthFN9Albs.roa (hash: 6lIOMorBJKMVKOZBPqKcGfElc6xi+Wc/c9B3Sn6wFrA=)
                          3: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl (hash: vQWG9GNKSUCMH1qkV4m27W7Prjsp365psZABa10cp28=)
                          4: Y2_bnui3NBLO8jQirmiUuAzGyRw.roa (hash: Sj4Gp5iophRPrZcWhz+iS2BZX0tuH2ZNqq3e2/zFjig=)
                          5: ntrt1qLEp7JFw_l17Dbev4liPcY.roa (hash: 5lVCUBQu1df/S1FQOKl/MyF/XxoO3ZxscsaY8Q1dPLk=)
                          6: vfMCWDXHqUhfE9pCWjy3UIK3sYE.roa (hash: cZ4cjZLkxHd/pGP9SjokJ4j+E/I+MNHdDpithj4CeCo=)
                          7: zaxDDa76odJm9ePdrwAGeOqRpTk.roa (hash: LPUFtmetdpPIYathbUV2AsqucuRhOg7pKFky/Ou4leU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:92:ad:bc:0b:d9:3d:54:3e:e1:48:a7:61:1b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
        Validity
            Not Before: Jun  7 17:00:54 2025 GMT
            Not After : Jun  8 17:00:54 2025 GMT
        Subject: CN=c03afc0a9f3c904370d08dcf531f6d955f621198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dc:fc:c7:0a:5e:aa:1b:42:a0:0b:54:f0:f6:
                    05:96:d6:97:60:a4:fa:99:89:e0:31:e4:d2:e9:58:
                    4b:63:e6:dc:9d:21:ea:b6:57:ea:5d:c0:e2:b9:b5:
                    ea:25:b1:6c:4a:f5:e2:f0:df:f0:a2:b9:6f:32:e2:
                    37:0b:e6:00:fe:96:f0:17:35:3d:39:62:c4:40:80:
                    d5:91:52:e3:69:00:df:79:19:26:82:3f:09:ef:53:
                    af:1d:ad:4f:27:e4:46:58:d7:4e:dc:27:6d:6d:22:
                    82:8b:29:44:4a:98:63:6a:86:58:88:e6:cd:af:8f:
                    e3:4c:59:78:eb:56:c7:1c:d8:1b:90:c5:f4:a5:81:
                    6d:b2:41:94:c9:c3:09:76:19:a0:20:ff:f1:bd:09:
                    22:a7:2d:58:eb:06:8c:6a:00:18:e0:28:02:03:dc:
                    be:e9:d3:06:69:9d:43:0e:bc:86:d5:a5:14:31:76:
                    c5:e6:02:6e:90:27:14:a4:d9:29:91:bd:a7:54:4e:
                    be:7b:f6:23:50:49:64:f7:46:70:f9:a3:cb:76:0c:
                    43:c3:70:d7:c8:a0:74:14:88:73:9e:6a:ee:40:45:
                    a2:bf:6c:c0:f2:da:f2:88:18:f6:0d:52:f6:33:e6:
                    6d:b5:78:91:b3:5b:90:7e:39:b3:34:b0:f2:6d:e4:
                    b8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3A:FC:0A:9F:3C:90:43:70:D0:8D:CF:53:1F:6D:95:5F:62:11:98
            X509v3 Authority Key Identifier:
                keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:4f:73:10:9f:e1:78:70:9c:bd:db:6a:04:5b:8b:72:81:d3:
         db:ba:24:ef:e0:f4:73:e2:c2:89:a9:14:4b:cd:25:bc:02:0d:
         ef:dc:1c:62:c9:d7:c2:a9:58:b8:91:de:e7:b3:71:d6:b1:ec:
         1f:a6:50:61:b7:01:d6:6b:0a:64:d0:07:82:5d:7e:01:93:ab:
         60:fd:e4:18:21:71:8d:3f:bd:d8:c6:01:7e:ba:56:7e:e6:bd:
         d0:5e:59:ec:a5:61:73:ba:cf:1c:bf:09:5d:b0:d4:c8:0a:58:
         22:d3:9f:62:d0:34:89:59:a3:9d:23:0b:ba:34:71:8a:f5:e5:
         3e:3e:d8:4b:1b:05:10:96:db:5c:c7:1f:f8:86:c1:31:9e:90:
         bc:91:da:bc:01:60:ce:fd:3c:96:22:df:1e:21:97:59:eb:9d:
         6b:f5:3c:b7:86:0c:a3:96:37:22:5e:35:4f:fd:2d:30:86:08:
         c9:66:0a:4d:b8:0f:a8:ee:66:b4:58:e0:e6:d7:c2:17:d0:34:
         8b:8a:5e:27:9e:d7:ad:20:0a:0d:2c:c8:46:87:4f:64:cf:99:
         03:a8:79:ec:93:cb:3c:1d:60:0c:0a:44:f5:7a:84:c1:eb:b0:
         48:09:6b:9d:58:35:50:e4:c8:71:e4:26:47:13:4c:bb:77:93:
         d4:b0:1e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:15:51 2025 by rpki-client