Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
File:                     mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft (raw, json)
Hash identifier:          dK4X9EbpejWppqH9065hD7HCNeD+50tI3/JGvZvHDMU=
Subject key identifier:   1A:0D:1B:21:C2:80:73:B0:08:A1:37:9F:18:32:C5:B3:90:D0:DB:F0
Authority key identifier: 99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
Certificate issuer:       /CN=993900f66e70b2fffd9c0ce92602f2f45c659961
Certificate serial:       0197488C8DC3198787375CB4E3461AD90D69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
Manifest number:          01DE
Signing time:             Sat 07 Jun 2025 04:01:00 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:00 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:00 +0000
Files and hashes:         1: BX8TzVbCvSIW38h_vPu5ASmAFTU.roa (hash: 9fbeu4ndfIatRqGo7OJ1vRbIh5amuFXDGED1/l+TEsY=)
                          2: jq_1ppFWb5g9HX-Mw-WYljosNes.roa (hash: lwyW5RQhcptTES0umbfYTj6Bk0XX6clHFX008ryFUIs=)
                          3: mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl (hash: 33iPdN1C3L8H+Bqk2jfqMNR4vvsAtKdcTz/91MXWcmQ=)
                          4: xouPf0QMMTAL1EjtGFEB8zKRaaw.roa (hash: RP5CrDZJxrGj2kXL8u1z5sEk/FoXNQ43FbO4Ypi7J9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:8d:c3:19:87:87:37:5c:b4:e3:46:1a:d9:0d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993900f66e70b2fffd9c0ce92602f2f45c659961
        Validity
            Not Before: Jun  7 04:01:00 2025 GMT
            Not After : Jun  8 04:01:00 2025 GMT
        Subject: CN=1a0d1b21c28073b008a1379f1832c5b390d0dbf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fa:39:cf:cc:12:eb:cc:6f:49:2e:54:e0:e3:
                    5c:86:d4:1c:6e:f6:35:bd:52:e9:95:aa:bc:55:10:
                    0a:a0:3f:1e:6d:c6:30:62:12:5f:b5:9a:8a:39:43:
                    c2:39:74:50:4a:f1:d0:74:18:23:14:77:24:a8:0a:
                    db:7e:bc:14:e2:f8:9f:d2:ae:8d:70:86:8c:09:9d:
                    be:05:49:25:cd:5a:b7:d0:ed:f3:97:fd:29:29:22:
                    79:2d:de:af:4e:2b:4b:10:1d:83:91:5e:d2:28:a4:
                    89:1f:34:25:40:91:82:16:ff:a7:7d:54:d6:ec:fd:
                    fe:6e:44:17:6d:dd:99:aa:a3:81:9d:26:68:44:99:
                    cc:f7:7e:d3:aa:07:a1:8f:7d:2b:b4:79:e4:8d:80:
                    87:8c:02:16:fb:ac:f9:ea:92:cf:e9:50:0d:32:80:
                    ff:68:c1:51:f1:c8:59:8d:dc:21:df:8b:b7:8d:67:
                    cf:de:a5:42:a0:67:63:18:5f:47:18:06:8f:cf:2a:
                    65:0f:f8:2a:16:cf:e4:21:0f:60:75:9d:99:35:d4:
                    a0:af:24:fe:9f:10:bd:32:ec:48:6e:b9:6f:8b:b0:
                    14:34:41:ac:a3:ac:e4:79:41:8a:ca:64:19:9b:dc:
                    f6:76:b5:bb:9b:2c:09:51:d9:f9:66:ea:75:f4:b6:
                    22:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0D:1B:21:C2:80:73:B0:08:A1:37:9F:18:32:C5:B3:90:D0:DB:F0
            X509v3 Authority Key Identifier:
                keyid:99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:9b:69:87:19:39:04:1d:66:3d:85:8d:95:78:39:0b:0d:48:
         d6:a9:74:54:25:41:94:a0:37:44:30:bb:2b:d0:e4:4c:6c:4b:
         16:70:7e:85:5e:b0:79:c2:75:ba:2b:9d:d2:46:ba:89:8b:fe:
         29:8a:5b:43:0f:8a:22:da:c1:47:ca:75:ef:77:4f:ca:9b:19:
         4c:71:85:f9:9a:de:6f:10:94:9b:b0:03:00:c1:6b:dc:04:04:
         36:9e:41:cb:76:61:73:a0:d9:2b:0e:52:a3:0f:ce:78:45:1b:
         cd:9a:ef:65:35:a3:69:98:48:c4:ab:1b:5f:44:bb:bf:22:ae:
         d9:02:36:ba:54:1e:f4:bd:ee:e3:1d:33:aa:8c:b8:28:e5:d5:
         f5:31:b0:28:e6:15:af:00:51:f4:f5:08:60:06:f3:2d:29:33:
         df:66:0f:60:9a:62:e4:d5:83:0e:02:a5:51:20:27:bd:f8:20:
         2c:02:c7:04:00:82:b0:be:94:6d:41:9d:d5:b7:ed:16:50:80:
         45:db:2c:1f:24:39:3a:82:d3:7c:df:dd:33:cb:e4:18:c7:f9:
         bd:be:6c:6c:57:36:e1:54:ed:ef:ee:91:00:25:55:d1:2d:c9:
         1f:d9:3c:d7:93:72:bb:19:58:35:26:2a:67:00:a4:35:a5:8c:
         c2:73:c3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:21:05 2025 by rpki-client