Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
File:                     aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft (raw, json)
Hash identifier:          tfHfXx7WTOPnmyM3MOXVfXQeafYYcyTJmgXZEja+VYU=
Subject key identifier:   6A:D5:75:9E:C1:52:11:E1:EC:A3:53:30:90:85:11:70:C6:33:21:91
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Certificate issuer:       /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial:       01974E206EAB3D9D96398E78011216808A04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
Manifest number:          0922
Signing time:             Sun 08 Jun 2025 06:00:37 +0000
Manifest this update:     Sun 08 Jun 2025 06:00:37 +0000
Manifest next update:     Mon 09 Jun 2025 06:00:37 +0000
Files and hashes:         1: ZT9B9tNXRU8FWuertgPw13h16Xk.roa (hash: 6Xo+gMjKVgARvSeIM+HakBpfnwiy5S2ZtZ1dnsf1HiU=)
                          2: ZVB7yIgz9pbPQTBVpsrwqV3ZnEg.roa (hash: dwMw2ItUKiHNfMn5bYBAvjaKKEHGXJR9EQ9x+7hM0I8=)
                          3: aRuOOCtx1PMNdVvt2nHGmKDJs3M.roa (hash: 8bEOeURzXGquWtq1D4IuWCkHSIndbbhR7t89VUeuAh4=)
                          4: aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl (hash: SvgM/VDTuv/JoRXpNmGxVwW6pvB70tNkhOxCBiE1+no=)
                          5: zrAv2jNHtLlSlJsjxQ_ry6_XRDo.roa (hash: xntvWCwvdBtpyZsW2377VZBl7bSJB3okyecwJktY+Gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:20:6e:ab:3d:9d:96:39:8e:78:01:12:16:80:8a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
        Validity
            Not Before: Jun  8 06:00:37 2025 GMT
            Not After : Jun  9 06:00:37 2025 GMT
        Subject: CN=6ad5759ec15211e1eca3533090851170c6332191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a6:37:be:9f:d1:25:c1:c1:da:1f:8f:70:1c:
                    80:af:fc:01:91:ca:10:b6:c8:a8:a7:51:51:65:de:
                    ca:3f:d2:5a:58:f4:9e:fc:9d:44:64:55:56:c3:fe:
                    83:5c:1e:f7:1f:09:79:a5:5e:97:76:ae:e1:9c:a5:
                    61:79:48:cd:17:55:a8:9d:cf:c0:46:0b:ee:50:14:
                    ce:c6:3d:65:1b:f3:1e:79:95:e5:35:ae:14:5a:53:
                    bf:44:54:89:ae:71:b0:a0:42:04:70:f6:07:e5:ee:
                    c1:27:cd:8d:31:c5:19:bb:16:f0:a1:3c:d7:75:b3:
                    10:d3:90:1b:4b:9b:96:25:4a:74:ed:46:20:62:34:
                    3b:27:06:d6:43:c3:cf:1f:7e:00:bd:2e:bb:d5:a8:
                    da:74:8c:be:ea:eb:f4:36:0c:f4:d7:e6:7f:3e:88:
                    f6:3c:6e:b4:fc:1a:a4:0c:b3:4b:bb:5f:62:c2:b5:
                    a0:ca:d7:58:29:68:01:58:6c:f8:e6:d0:89:b7:ee:
                    ff:6e:81:0a:9c:a0:b6:95:6d:cf:8d:77:33:43:c4:
                    f3:6d:06:32:15:aa:a6:20:ca:06:7a:2b:b0:9f:76:
                    0c:54:c9:e9:29:aa:32:d7:07:90:11:c4:e7:8d:11:
                    54:92:3c:65:7b:15:23:09:27:9c:99:99:ae:a4:3c:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D5:75:9E:C1:52:11:E1:EC:A3:53:30:90:85:11:70:C6:33:21:91
            X509v3 Authority Key Identifier:
                keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:af:95:a7:00:c2:27:09:3e:7f:fe:7b:c4:48:d0:de:e1:d6:
         3c:2a:81:2f:ef:f5:6e:fe:d4:29:ab:c0:70:b7:d5:ba:eb:74:
         f9:03:51:6e:78:9d:2c:61:fa:31:fd:f4:fd:22:8f:16:e2:e9:
         0f:45:0f:ea:21:91:77:8b:4c:28:79:20:17:a7:93:bb:69:80:
         13:47:07:30:27:74:66:bf:fd:1e:51:ca:59:60:bb:68:6b:70:
         b3:14:91:af:d6:ca:b9:8b:a1:e4:d5:99:61:e5:59:35:67:29:
         1d:a3:b2:30:23:94:21:2d:90:73:fc:86:ce:0b:e6:06:7b:9b:
         65:e6:69:43:f5:59:b0:8d:4b:72:f1:3f:8a:b9:fd:e4:48:a2:
         f9:44:f7:ee:84:10:e4:bb:5d:e1:88:c4:aa:84:9d:4d:66:f5:
         84:72:cf:b9:4d:f0:f0:47:0b:0e:86:00:40:56:67:50:a9:0f:
         1b:43:f1:19:fc:a6:74:bc:cf:17:ac:f9:0a:8c:51:36:a0:4e:
         1b:3d:0a:82:62:43:a2:e6:da:06:9e:e2:57:ba:04:8c:49:13:
         06:44:93:e1:d7:f2:8e:5b:72:b0:2e:43:21:49:95:c6:ff:97:
         bb:d9:c2:12:50:13:b5:d3:45:8b:39:6c:20:4b:52:2c:ab:53:
         09:fb:5d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:31:43 2025 by rpki-client