Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
File:                     am_dL9Qvq_hycglSRo0pY0xoydw.mft (raw, json)
Hash identifier:          Q/ztZ36FcjW3CUG/x4e5lDJJzr4pn1jwOgyuDz68EHo=
Subject key identifier:   14:C1:EF:97:00:62:DD:88:88:E0:C9:15:BF:B7:99:8D:68:00:EF:1B
Authority key identifier: 6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
Certificate issuer:       /CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Certificate serial:       01974C695CEEA613C558452E13D4552FD263
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
Manifest number:          08E1
Signing time:             Sat 07 Jun 2025 22:01:02 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:02 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:02 +0000
Files and hashes:         1: QZxCWcbwldfBbje2z7CU-dKZ2OQ.roa (hash: z3N51ZQ5F8Gr4zs53/jXBVGssP0tmVUaOonBzkRtl38=)
                          2: _od80ObLqomwGF2QQRW4qwheTZ4.roa (hash: CaYsbUoRWbmVInyGmVu/D6GkTzKF8+37wy3InRczmKA=)
                          3: am_dL9Qvq_hycglSRo0pY0xoydw.crl (hash: Aw9Ji4/yEUiI9gGvxsF8fIcQQqEq8p/vNmFEmLtRZcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:5c:ee:a6:13:c5:58:45:2e:13:d4:55:2f:d2:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
        Validity
            Not Before: Jun  7 22:01:02 2025 GMT
            Not After : Jun  8 22:01:02 2025 GMT
        Subject: CN=14c1ef970062dd8888e0c915bfb7998d6800ef1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:66:d7:35:b7:d9:5a:61:ac:4d:bb:28:02:16:
                    68:61:a4:1f:d8:71:9c:f9:37:af:e3:8b:b8:05:ff:
                    8a:ff:7c:e0:b5:01:6c:3b:b5:15:9e:0f:10:44:5a:
                    d5:7b:7b:0b:03:e9:2a:1f:5b:5f:14:7b:2c:10:d8:
                    e2:8e:76:e5:d4:74:3a:e7:86:11:03:52:38:cf:a2:
                    4c:68:69:e5:b0:57:47:3d:bd:7a:bf:b2:ff:6a:47:
                    74:c0:6c:9c:19:9b:4a:e9:85:17:ed:d5:ed:72:11:
                    b5:ed:67:08:28:d9:7d:fe:c0:95:fe:c6:e2:04:5c:
                    6a:62:44:cb:89:28:d6:cc:b3:cc:d6:5a:8c:00:0c:
                    26:c8:a8:07:d8:65:d7:f3:81:a7:ea:3d:9f:c1:6b:
                    31:33:74:6f:31:36:1a:95:92:f1:45:9d:a0:2a:a4:
                    c7:89:e2:1a:d4:2b:45:8c:10:35:21:2a:b6:15:c0:
                    14:2f:1f:b8:32:86:3d:f4:2b:9a:28:b9:86:aa:93:
                    45:f4:c2:fb:2d:41:22:3c:0d:7a:ea:1b:6d:90:5a:
                    b8:ef:48:ae:28:8d:c7:60:20:b5:bc:87:52:86:66:
                    d5:1f:cc:ee:4a:e9:1c:6a:aa:05:2e:ea:46:d9:61:
                    e5:da:b3:ea:56:94:49:d0:3e:f5:18:37:1b:76:2f:
                    7a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C1:EF:97:00:62:DD:88:88:E0:C9:15:BF:B7:99:8D:68:00:EF:1B
            X509v3 Authority Key Identifier:
                keyid:6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:79:54:75:80:6b:7a:9b:2e:68:89:bd:be:76:eb:f3:aa:92:
         66:14:e0:1e:07:2f:2e:cf:10:7a:66:f0:37:09:9b:d8:ef:a3:
         31:7d:a6:9e:6d:d3:92:23:e5:19:b1:87:3e:21:cc:7b:2a:ed:
         3a:14:8f:ce:de:72:1a:cb:3e:ce:83:a1:7b:26:95:d5:ba:b9:
         b4:e0:c2:28:b6:f7:e6:b9:7b:c6:ee:8c:2d:f7:a8:e2:ba:27:
         b0:83:c0:68:b1:53:4f:07:ac:56:37:6a:1d:03:03:44:f7:07:
         35:6b:5e:55:22:4f:c7:1d:e4:e0:11:d2:aa:73:ad:06:6f:05:
         b8:3d:82:10:ef:37:c1:75:f4:21:89:5d:e4:0c:0d:2b:d1:ca:
         f9:2e:06:9e:8f:d5:e5:7b:02:e8:5b:54:d8:ae:53:58:b3:da:
         f7:53:cd:9b:73:8c:ce:47:13:d3:c1:ab:09:89:fa:f0:74:c0:
         54:b1:61:04:7f:48:55:c4:a0:35:84:5a:c4:22:d1:5b:85:96:
         98:df:63:1b:83:fa:03:98:60:9b:d0:f0:a6:76:5e:3d:0f:52:
         4e:31:7c:fe:1a:03:ac:72:b4:d1:a2:2e:c3:38:5d:2b:2d:72:
         7a:87:4c:54:31:fd:e0:e1:f2:2d:e4:1a:8a:f8:4b:8e:87:09:
         e3:bb:c1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:57:08 2025 by rpki-client