Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
File:                     kPwsEuoXAhuorOBiGJfwhW2sJVk.mft (raw, json)
Hash identifier:          r7dcOQveeFI/qOWoGo9gOHYrBXzV7KWYElKRwlPZV4k=
Subject key identifier:   76:65:0E:7D:EA:FE:D3:42:27:28:97:80:49:99:49:3F:10:78:A2:3F
Authority key identifier: 90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
Certificate issuer:       /CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Certificate serial:       01974A7AC0D6DA7FBB1A7072E5E9830760F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
Manifest number:          04F7
Signing time:             Sat 07 Jun 2025 13:00:48 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:48 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:48 +0000
Files and hashes:         1: 1UaL0XGyomh-a1T0dddj6cyPZOw.roa (hash: rWkejV4n3vRWEBULaZLAottNh8bz5UFXPG009n2D40A=)
                          2: TJKRQbRuvDSDZyucPaqU760l18U.roa (hash: gKuY1GA/NcHekZckeHEZ/7H1szBu0AiOQJ9VIhFkajs=)
                          3: kPwsEuoXAhuorOBiGJfwhW2sJVk.crl (hash: Mq8tbTzRo782bR4zRRTL4C3I4fTfqRO/FKJMtfidH/w=)
                          4: mWYkGMEMrO_nHDH4dqasaNk-p_c.roa (hash: OCHhjAiwakmpsRoIjxkgKbh8p1tQzGvkxI9kPgktEoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:c0:d6:da:7f:bb:1a:70:72:e5:e9:83:07:60:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90fc2c12ea17021ba8ace0621897f0856dac2559
        Validity
            Not Before: Jun  7 13:00:48 2025 GMT
            Not After : Jun  8 13:00:48 2025 GMT
        Subject: CN=76650e7deafed342272897804999493f1078a23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:10:e6:a1:e0:f9:72:16:0f:8e:31:35:84:df:
                    d9:11:c8:6a:b0:c3:10:24:c5:d0:1c:bd:80:ac:3b:
                    98:3b:c1:13:72:0a:18:0a:66:74:50:f4:e5:f1:3c:
                    10:38:9f:36:cf:dc:77:23:64:c2:f8:ad:aa:c5:ab:
                    54:f3:a7:53:25:b7:fa:ec:d0:a5:b7:3b:5d:d6:79:
                    8b:56:b9:6d:06:b6:d5:c8:fe:8c:f3:77:2d:c9:47:
                    41:54:7e:da:41:3a:99:4d:39:be:eb:1b:29:dc:09:
                    6f:76:a1:fd:c3:1b:93:be:1e:88:25:e2:d6:95:e1:
                    8d:20:53:b6:6a:b5:0e:aa:2d:62:ea:0c:f1:18:91:
                    6d:74:b2:f3:0f:5d:11:dc:aa:d3:5c:2a:93:91:b9:
                    9e:d6:f9:14:55:8d:e4:99:bf:d5:52:85:32:41:2f:
                    54:fe:6e:f7:24:f4:c9:96:f6:bf:a3:3e:2d:5e:03:
                    ea:fc:22:91:a2:e7:34:a6:4c:24:5e:e3:02:93:3c:
                    1e:cf:c2:09:11:6e:d7:98:74:9d:ba:07:ac:b2:46:
                    0a:e7:23:f3:ef:11:2e:5f:a5:d9:8a:28:c4:72:b9:
                    de:fc:3c:7f:cc:8f:5e:6d:22:ff:b0:b3:04:83:ad:
                    be:4f:7f:b6:f3:c3:29:19:8b:f4:5c:75:57:f2:1b:
                    35:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:65:0E:7D:EA:FE:D3:42:27:28:97:80:49:99:49:3F:10:78:A2:3F
            X509v3 Authority Key Identifier:
                keyid:90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:51:f6:0c:5e:0b:03:ed:e4:5d:cf:ee:89:63:52:59:a4:d0:
         a5:9b:f2:05:2d:0b:e6:72:79:2b:4c:43:d1:86:5d:30:2b:09:
         a4:ea:52:70:06:e3:c9:6a:4c:82:be:c3:14:81:0b:93:5d:8d:
         db:8d:17:fc:e2:51:b3:30:5d:79:0c:0a:36:98:bf:3d:4b:62:
         9a:a8:2f:30:b4:ed:72:a4:e2:4d:eb:81:02:25:de:1e:10:db:
         9e:da:c7:f1:23:3e:4f:07:a8:30:e6:2f:cc:e1:ab:18:ff:df:
         a6:f4:30:8e:92:93:4a:58:fb:90:5c:a8:ed:b1:5f:78:40:6d:
         c4:3a:aa:27:e8:69:ed:03:cf:6b:bd:00:7f:de:fb:98:30:bf:
         a2:85:2f:0f:ac:f0:a1:8c:99:43:4d:a7:0f:b6:ac:bb:61:96:
         de:07:7d:ea:14:13:d0:ba:a0:6c:7e:a7:50:d4:84:0b:cd:77:
         74:9d:81:2d:b8:7e:03:53:de:a7:36:70:aa:80:1c:91:2c:26:
         56:6b:88:45:c3:3e:15:66:2a:aa:e7:24:21:ce:82:a2:7c:38:
         94:cb:a5:6a:2e:9c:d3:fc:77:04:29:67:fa:12:23:98:30:82:
         9e:13:a0:8e:66:ca:58:a0:20:37:0a:71:2d:84:54:ba:49:a7:
         43:50:64:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:37:15 2025 by rpki-client