Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
File:                     1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft (raw, json)
Hash identifier:          /hbo4Z3qZ3IJ46Wq5gnp07tFGWwqbOquCTiQeQRWX9s=
Subject key identifier:   14:0F:80:C2:48:DA:EA:F7:F6:93:A6:61:37:E2:25:B4:00:5B:1C:5C
Authority key identifier: F8:06:EC:9C:F1:DE:AB:F9:D6:CD:5F:88:91:BB:82:D5:6F:91:D6:78
Certificate issuer:       /CN=f806ec9cf1deabf9d6cd5f8891bb82d56f91d678
Certificate serial:       01976F2C4C3A3005A20C1346EEB04FE766AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
Manifest number:          12D3
Signing time:             Sat 14 Jun 2025 16:01:03 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:03 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:03 +0000
Files and hashes:         1: 1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl (hash: ke6lCpynE/a8Yol/2CYmHx4nHCAFKoslHMqUEY3uTeM=)
                          2: 4WNYU3DPTpnOXIdy-DcRolCswoU.roa (hash: lJMeZdxIdcMT6oAlo0ZhGiaOSgJa2FyIZlyPkCXNXeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:4c:3a:30:05:a2:0c:13:46:ee:b0:4f:e7:66:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f806ec9cf1deabf9d6cd5f8891bb82d56f91d678
        Validity
            Not Before: Jun 14 16:01:03 2025 GMT
            Not After : Jun 15 16:01:03 2025 GMT
        Subject: CN=140f80c248daeaf7f693a66137e225b4005b1c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:66:19:69:09:61:9b:00:0b:d5:6f:49:1b:c3:
                    ef:be:b2:d7:94:1f:33:5b:c8:4b:7d:28:e4:51:59:
                    b4:59:05:32:7a:a1:7d:cb:fd:32:9e:0f:31:e1:c2:
                    15:75:9e:a7:24:ee:8d:46:cb:9d:64:6d:37:50:a8:
                    86:b3:4d:f6:69:c3:92:ee:78:58:53:cf:5e:14:f3:
                    92:3c:d7:71:f9:4b:38:a0:21:09:f9:8e:62:94:00:
                    1e:88:12:24:d3:33:7b:fb:a3:b2:08:32:30:4e:90:
                    e8:7a:1b:37:bd:89:75:d3:56:99:0b:2e:8d:d9:e1:
                    d2:e7:14:b1:36:e4:0e:d8:2c:af:b6:2b:82:d9:5a:
                    fe:2f:08:5f:90:78:ce:91:fb:a4:27:6c:44:a2:37:
                    9d:5a:b9:9a:b5:a3:08:ee:a4:39:be:b9:50:2d:e4:
                    7c:1b:bd:2b:85:0b:3c:f5:3e:de:20:2d:18:7e:c3:
                    0a:a6:58:a2:33:a1:99:c8:7b:b3:10:41:bf:5f:bd:
                    a8:29:f6:0a:c7:ed:09:83:ee:4a:41:54:5f:73:5d:
                    d0:36:c7:b7:ec:47:a1:0c:23:5c:c0:60:2c:2e:61:
                    f9:20:5d:2c:4f:5b:57:d4:55:cd:e2:5a:1b:44:7c:
                    1a:97:a7:e0:f6:b8:08:29:44:25:6e:bf:de:e0:84:
                    3f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0F:80:C2:48:DA:EA:F7:F6:93:A6:61:37:E2:25:B4:00:5B:1C:5C
            X509v3 Authority Key Identifier:
                keyid:F8:06:EC:9C:F1:DE:AB:F9:D6:CD:5F:88:91:BB:82:D5:6F:91:D6:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e7:e0:46:6f:e7:e1:ae:99:31:f2:f4:a8:62:9e:5f:f8:8a:
         86:85:1e:68:f8:06:d9:ac:65:a6:57:ff:81:5e:6d:8b:ae:e8:
         ae:c1:7a:b9:6f:c6:38:3e:6e:12:76:91:1d:21:09:b3:c4:ca:
         20:71:87:83:6d:62:d4:d5:cb:ca:ba:0b:2b:13:4e:ed:82:45:
         a6:91:c6:db:ab:9c:b0:70:9c:ae:c7:ac:7b:40:9c:c6:b7:a7:
         e0:80:66:d4:af:e1:10:79:de:02:a8:b2:39:54:6d:81:36:0d:
         a8:7e:e1:7d:4f:70:66:ce:83:22:2f:d4:f2:5a:e1:86:94:6e:
         b3:3b:e3:b9:89:83:df:c4:7d:b0:84:01:4a:0b:7a:8d:76:0c:
         d6:dc:b5:e5:dc:58:2a:73:fc:db:d6:66:f6:c2:12:44:c9:8a:
         a2:b5:99:2c:7e:b9:4f:fb:2d:b2:85:f2:13:71:8c:e4:c2:21:
         09:9c:8b:91:6b:47:b7:cb:e4:f7:05:6a:4d:e2:c1:f1:91:61:
         23:b1:db:66:7c:52:44:78:d3:63:dd:89:0d:3f:44:92:c4:e6:
         d5:5f:a8:da:ee:66:6b:09:72:c1:86:16:fd:03:cd:9b:39:ce:
         0f:25:79:0e:15:d9:c5:85:f1:11:01:9b:a0:13:15:39:92:e0:
         e6:47:91:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:21:59 2025 by rpki-client