Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
File:                     r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft (raw, json)
Hash identifier:          /caFPx9ivdilNdG18x5lb7ub8XejCYPNsSyPYuy5lFI=
Subject key identifier:   6A:3B:20:A4:55:B5:BE:82:9D:63:13:38:E6:03:4F:76:2E:9E:D8:C1
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Certificate issuer:       /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial:       01973D9AFF900D1BEDBABD670C456FCDA1B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
Manifest number:          0F4F
Signing time:             Thu 05 Jun 2025 01:00:57 +0000
Manifest this update:     Thu 05 Jun 2025 01:00:57 +0000
Manifest next update:     Fri 06 Jun 2025 01:00:57 +0000
Files and hashes:         1: 4fpK3rH7dDsLZcwC8fv__9MCBNk.roa (hash: H+mNwrXZUXB3OGGb/VrqoSQBBpWlzYIXILfgLQd6xuU=)
                          2: 4niQy2euydDFq7GTJuaxJySkYgE.roa (hash: lEIj5wjui/e5DTBCiecGhk5U5JYfLtQIN+3o7VCLqqU=)
                          3: 5XUzA9Cm_VS0l_J-BI180iVrsSQ.roa (hash: dTmUbt8r9KTK4oCfqPnmc0NkXc8ljy+XbX2k8rf1LxQ=)
                          4: DWF9Jo3FImxKenqMCCuMh99Ds_I.roa (hash: VPrgFeIcUkZV1CVnwsWbonO9j9PHcQRDHPIETmI4o3E=)
                          5: UNKbAcEAJHWJC-HG72D-vYqbVfQ.roa (hash: m35AjrcjrDzhORVJU0fjE54zFfVUjrq+cuZi9udA0+8=)
                          6: cLFAPtOqlcUfpbbbNNENVqdfu8I.roa (hash: fE/OxbEqrhzEaEBEiWo6VY8shfzEaI5zfx5000I8b5Q=)
                          7: hgq-3QFFzN187B-65tYpaJQwwz8.roa (hash: l85+PXj1Myvhf7HIXT0WO1F3ljNUQ844ImZJ7Pq6XL8=)
                          8: r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl (hash: j7svTWX1Pyir7GhEq2ADbT62z/OrU5pR3P/L8cZc+So=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Jun 2025 01:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3d:9a:ff:90:0d:1b:ed:ba:bd:67:0c:45:6f:cd:a1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
        Validity
            Not Before: Jun  5 01:00:57 2025 GMT
            Not After : Jun  6 01:00:57 2025 GMT
        Subject: CN=6a3b20a455b5be829d631338e6034f762e9ed8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:63:5e:f7:5f:d8:1c:b8:5a:a8:ab:c8:a5:c6:
                    05:13:13:65:c7:b9:f8:c7:e2:b0:e7:14:d8:fd:f8:
                    7e:58:f9:36:b4:5e:6a:f1:01:6b:06:57:20:54:9d:
                    18:fa:5d:58:8e:90:a1:94:f3:9b:a4:f6:21:a4:bf:
                    69:15:ff:8b:7e:25:08:6d:63:9a:73:58:a8:24:ed:
                    39:9d:85:48:7d:c7:46:e8:de:23:f2:d4:55:f3:d2:
                    49:3c:ee:90:01:d1:e3:9d:29:d0:ec:c0:58:63:d9:
                    a4:fa:66:c9:3e:1c:3e:5f:b5:d7:55:77:05:34:f1:
                    3d:f8:52:65:98:d4:00:1a:d3:5f:b1:91:9d:30:81:
                    04:02:f2:a2:ee:40:d2:5e:67:cb:b0:49:12:fb:80:
                    1b:4e:83:e0:6c:89:15:53:22:af:39:1f:e3:29:d3:
                    70:2b:e1:9c:be:52:87:f5:f5:39:e5:bd:d1:ab:17:
                    1f:61:42:f9:b4:ad:9f:dc:d6:bb:87:1a:5d:97:46:
                    44:78:32:12:33:90:fe:3a:4e:a9:e5:15:c8:18:5b:
                    43:9b:5c:f9:24:22:03:ff:75:cc:8e:bb:b5:b5:52:
                    8c:da:e0:c4:c5:99:0c:22:a9:8e:b0:87:95:b6:b7:
                    54:0c:86:90:19:25:05:aa:82:09:73:04:8a:e4:0e:
                    e5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3B:20:A4:55:B5:BE:82:9D:63:13:38:E6:03:4F:76:2E:9E:D8:C1
            X509v3 Authority Key Identifier:
                keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:cf:a5:3e:ce:2b:a9:7c:e8:e5:5e:ae:47:91:09:78:73:c4:
         a2:50:4b:d8:11:e9:95:3d:85:c2:57:4a:11:b7:65:42:83:33:
         6d:e4:99:c7:3b:b7:82:4a:24:bf:b9:a4:a8:a4:9f:ad:73:d7:
         ea:94:cd:5c:9b:92:2b:1d:73:ab:e5:03:e3:46:88:f7:45:06:
         60:97:2c:2d:30:11:e3:b3:8e:a0:dd:4d:f1:eb:a3:dd:85:16:
         4b:68:11:a3:68:84:29:d6:4a:3a:b2:b2:d5:0e:b9:a6:63:36:
         43:22:d2:50:ed:e7:c9:15:87:3a:10:de:0b:33:eb:b8:c8:a5:
         d1:76:9e:89:17:87:09:e8:c4:32:11:db:0b:76:fb:df:52:4e:
         6c:7e:62:43:e4:22:5c:cc:ce:b0:44:2a:2d:cf:7c:79:09:27:
         ea:c5:c6:b8:80:c1:04:39:55:94:11:4d:2a:2f:14:7a:5e:76:
         b0:49:af:07:52:b9:d7:f9:c7:fb:c6:81:be:b0:3c:6f:fc:3f:
         34:55:80:cd:39:a4:39:c6:dd:a8:c5:99:dd:a4:75:b9:18:79:
         35:61:54:03:80:4d:3c:cf:12:c6:cd:a4:57:2b:dd:e0:60:93:
         42:96:2f:b7:86:12:0b:2b:a8:a0:e3:2e:74:e6:a7:1c:da:e4:
         79:4e:b9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 07:02:47 2025 by rpki-client