Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
File:                     34-WHG77t_nOdCF7HV27VOmBxvI.mft (raw, json)
Hash identifier:          /hIU50rx9vRAxDhnPi4on1vE1E3ITRszoqSqfLWMH+I=
Subject key identifier:   04:2A:92:F4:C5:8B:85:44:C0:9A:E0:D9:AF:32:5A:4E:76:32:6E:96
Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
Certificate issuer:       /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Certificate serial:       01974A43634FF4D9B1FC80BD9784A190DA4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
Manifest number:          1386
Signing time:             Sat 07 Jun 2025 12:00:19 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:19 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:19 +0000
Files and hashes:         1: 1-v8iJMG7kLw-Yc0NKyQwCiTKUnA.roa (hash: 48U7KANlM4mdm3YNX/H5iviEyFzNYK943ewQoT71/5Q=)
                          2: 34-WHG77t_nOdCF7HV27VOmBxvI.crl (hash: 4rRyOs9LXWA/Xtz69ufGhratGMBhWbiNULVddlCOAgQ=)
                          3: GSGxmFMOldMDBn5u7DfvJzXbYCo.roa (hash: un2PEVowSPZIo87TGOOK/KPKdTl+4fijd3wEZf387m4=)
                          4: dbsBfIyjlvnJeHFT9yt_2dWfazQ.roa (hash: bQniy8nZ8a6zJ0Od+7AKUQSXFo7deYGH7yzxQPJEcPg=)
                          5: gMAN3v03uAddPu9H4UyvEE9OaL4.roa (hash: wpVmJrhPOGtID7FbjO+SJT/k3IVxP28J+1YCanP25FQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:63:4f:f4:d9:b1:fc:80:bd:97:84:a1:90:da:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
        Validity
            Not Before: Jun  7 12:00:19 2025 GMT
            Not After : Jun  8 12:00:19 2025 GMT
        Subject: CN=042a92f4c58b8544c09ae0d9af325a4e76326e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5b:e0:c9:6d:b9:01:e6:45:fb:3b:69:4f:24:
                    6c:e2:9d:9c:83:ee:eb:1e:75:d6:a9:f7:b1:4a:f1:
                    24:96:b6:a6:1f:37:db:e8:69:de:19:51:57:2a:98:
                    5d:4c:00:2d:a5:8c:b7:90:c1:b8:b1:44:8d:07:c4:
                    cf:ec:54:cc:bb:ff:d8:82:5e:48:c4:6f:ab:68:9a:
                    58:fb:52:f2:ef:46:ad:77:3e:92:6a:c7:4c:6e:8e:
                    b0:f1:eb:be:ea:5b:ad:1b:74:c4:3d:96:7b:a3:2b:
                    d5:e5:9c:82:f4:f5:c2:6e:71:47:af:9a:2e:4a:25:
                    38:5a:e4:dc:98:33:2f:e5:54:5b:4b:4c:4e:85:de:
                    3c:fa:15:5b:09:43:ca:7c:bb:e6:2a:76:f2:28:4e:
                    3d:d3:7a:2d:fb:58:4c:74:fe:86:e5:3f:31:df:28:
                    41:98:c7:a6:24:eb:99:6d:8a:8e:b9:d8:4f:73:25:
                    0e:98:71:9d:a7:27:35:5d:30:31:8b:de:b0:0b:e8:
                    4e:7e:d1:de:c7:b6:96:e6:ce:64:53:9a:81:ed:94:
                    61:9e:8a:e0:d4:c0:49:96:5d:37:5c:84:48:be:1e:
                    17:09:6c:a9:eb:0f:c7:c2:4c:a7:5a:9b:5f:5c:de:
                    29:6c:fd:d9:46:cb:9f:44:8c:70:33:25:de:56:6e:
                    07:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2A:92:F4:C5:8B:85:44:C0:9A:E0:D9:AF:32:5A:4E:76:32:6E:96
            X509v3 Authority Key Identifier:
                keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:12:e0:22:0e:81:90:c1:11:23:d2:53:03:fd:c9:56:fd:08:
         99:99:bc:14:fc:87:ec:e8:e6:81:6b:b1:4c:e0:52:93:76:9b:
         2d:e8:99:f0:36:eb:e9:9d:40:22:3e:c1:d5:12:30:da:62:52:
         90:86:ac:f2:7f:cf:e4:2f:8d:98:bb:82:f7:5a:cc:b6:1d:26:
         42:f9:1e:a2:5c:b5:ce:31:df:7d:eb:fe:c8:aa:a6:63:a1:af:
         3c:a0:f3:f9:08:e6:1f:e4:77:78:ca:20:e5:e6:a6:dc:38:93:
         ca:cd:0e:2d:9d:06:d5:3e:97:b8:e8:70:b0:a2:34:0f:12:9c:
         b4:67:1f:e9:b9:f4:6e:99:4c:4d:45:3a:aa:97:bf:58:ea:b4:
         ef:a8:0d:48:f3:71:39:8d:28:03:91:a5:0a:2e:f8:e4:2d:72:
         39:b7:59:4e:c2:39:9f:13:01:03:b8:02:81:68:d9:e3:04:05:
         74:2e:f8:6f:48:e2:9e:9a:f0:53:18:9b:9f:3a:d5:ce:16:6e:
         36:c4:a2:62:b0:9b:37:a8:24:74:a0:34:c2:ce:f5:10:2a:70:
         ea:b2:c4:9b:28:f1:c2:3b:47:ac:ea:fd:d6:30:c3:69:0c:94:
         3d:55:e0:f2:93:44:0e:90:4a:4e:d1:b3:22:d8:f7:ed:c4:b2:
         e3:72:ea:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:54:14 2025 by rpki-client