Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
File:                     C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft (raw, json)
Hash identifier:          FJCkWBN4Io29U8XfbK68JZtFytjOSdO5iPjnT6ey9Zc=
Subject key identifier:   9A:23:CF:74:31:4A:26:0D:C7:DF:27:10:7C:C5:3B:5A:47:C3:61:E3
Authority key identifier: 0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
Certificate issuer:       /CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Certificate serial:       01976885421A8EDFBF459FD194161C6E5511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
Manifest number:          155D
Signing time:             Fri 13 Jun 2025 09:00:53 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:53 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:53 +0000
Files and hashes:         1: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl (hash: wh0sz7ATGrqZWSdHZzSZw9hEeBK10NSa8VVJyaS7bMY=)
                          2: f_yh7-7v7LI3DnSdnUSk00iuL5g.roa (hash: WRI0Xz6/VCX9n+DPCS4hBmIPi2foRqOlNvNKjpUOgU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 09:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:85:42:1a:8e:df:bf:45:9f:d1:94:16:1c:6e:55:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
        Validity
            Not Before: Jun 13 09:00:53 2025 GMT
            Not After : Jun 14 09:00:53 2025 GMT
        Subject: CN=9a23cf74314a260dc7df27107cc53b5a47c361e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:20:7c:f7:3b:7d:f8:ab:1e:24:85:c1:84:
                    b1:3e:30:b8:2d:b8:51:2d:20:90:be:b6:20:20:25:
                    3e:cb:01:61:dd:c5:ff:96:04:90:1d:49:ea:05:10:
                    4b:87:75:a0:a6:99:43:2d:79:95:36:2b:7e:bc:98:
                    a4:de:df:94:a0:72:97:89:8d:a2:93:f9:15:e5:3a:
                    d3:0b:f3:a8:48:af:5c:50:4a:ec:ae:93:c0:e7:db:
                    26:14:a2:4a:90:a3:f5:9b:86:b6:fd:41:40:30:db:
                    a5:97:f3:c0:9d:38:47:49:b4:9e:0b:82:f1:69:ed:
                    05:83:4a:b2:b5:4e:a7:6e:3d:8d:bb:8d:45:cd:42:
                    9e:85:12:06:d2:e7:bc:67:11:cf:ff:c7:c8:1d:ea:
                    f8:63:8e:8b:b6:f6:48:c1:af:7e:4c:ff:ae:75:ce:
                    1e:eb:7b:3b:2b:9c:07:5b:9e:a5:49:64:7e:1f:94:
                    c2:16:87:4f:09:6d:f7:30:5d:ac:56:43:4e:fa:8a:
                    0d:3c:21:95:26:be:1f:08:95:75:10:25:7c:fc:21:
                    b0:93:51:3f:7b:20:88:1d:01:71:0b:27:7f:9c:43:
                    73:ac:9a:4a:53:03:c7:c0:6b:9d:8b:27:4a:7d:95:
                    b4:8a:60:f7:3d:7a:19:dc:31:9e:9c:2f:7a:3c:af:
                    e4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:23:CF:74:31:4A:26:0D:C7:DF:27:10:7C:C5:3B:5A:47:C3:61:E3
            X509v3 Authority Key Identifier:
                keyid:0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:09:2f:26:ca:76:fa:bf:19:43:25:2d:23:81:9d:a4:61:34:
         6a:c4:d3:d9:fb:d2:37:3b:e6:e8:d0:af:42:7a:7d:84:5d:51:
         c0:f2:e3:62:33:ec:ae:72:46:16:90:e4:47:f9:6d:aa:56:13:
         45:50:49:dc:b0:fd:10:33:9c:c6:fe:60:88:64:9a:c5:03:22:
         36:1a:2d:e4:59:63:d4:a3:e5:38:0c:17:34:bb:b2:42:7d:96:
         6d:59:17:20:56:4b:5e:26:ce:fb:25:a5:4e:63:5a:69:32:e1:
         ca:6d:fe:cb:3e:e0:07:d4:8c:c3:3e:e5:45:17:d8:1f:fb:89:
         60:da:4a:5a:de:89:83:e7:a3:16:4c:f7:6d:1f:fc:77:af:08:
         27:3a:fe:08:7b:2c:42:ab:c9:90:02:c7:9e:78:f8:db:54:98:
         bf:e0:3d:fd:21:4b:ca:63:86:5e:1c:03:40:fc:6d:e7:20:3a:
         2c:54:5a:d2:69:09:d5:4e:01:0f:b3:24:3e:80:b7:ca:a1:39:
         16:2c:68:66:ef:48:cb:f9:7d:c1:50:f3:cc:e2:93:ae:7c:35:
         df:04:2b:c0:9f:1c:b0:70:c0:c3:e9:3c:17:ad:da:23:a5:39:
         aa:70:8b:72:c3:f4:38:bb:8f:75:02:c4:a8:ab:3d:45:28:d1:
         78:fa:02:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:21 2025 by rpki-client