Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
File:                     1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft (raw, json)
Hash identifier:          G3Ys5f6YH3bLnE1iCQs1Ofgbo8OPXiXFLT8+I83Ff1I=
Subject key identifier:   BA:BD:15:E6:F4:13:8C:FA:41:37:97:CA:FE:71:C9:30:57:33:F5:65
Authority key identifier: D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
Certificate issuer:       /CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Certificate serial:       01976E199E7737730744ABFE55E79A15E2E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
Manifest number:          0CD6
Signing time:             Sat 14 Jun 2025 11:01:02 +0000
Manifest this update:     Sat 14 Jun 2025 11:01:02 +0000
Manifest next update:     Sun 15 Jun 2025 11:01:02 +0000
Files and hashes:         1: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl (hash: HYuDYt/hOzK4hV0NmFT2CpO43zkb+1MLAZR2iwhRNf8=)
                          2: DJNwK4d1O-0W4wKdXnOfs7vSo0I.roa (hash: 4ioCgLyFFC/qkKUBjTLDnN9rjQ3ov2Q43NX+vQC3BfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:19:9e:77:37:73:07:44:ab:fe:55:e7:9a:15:e2:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
        Validity
            Not Before: Jun 14 11:01:02 2025 GMT
            Not After : Jun 15 11:01:02 2025 GMT
        Subject: CN=babd15e6f4138cfa413797cafe71c9305733f565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0e:93:3e:db:f6:05:4d:40:f9:ca:92:03:45:
                    ec:1f:ef:ab:41:47:64:75:6a:5d:90:97:e1:e2:15:
                    be:cc:97:a6:e0:16:37:a8:6e:c5:7b:d8:d0:54:81:
                    8f:4b:98:f1:45:3d:a3:3c:0f:b1:ee:f0:5e:74:b1:
                    f2:eb:cd:58:ba:e4:fe:ab:c2:38:c1:35:b8:39:ad:
                    b5:11:b5:cb:e3:a0:2f:fe:c0:a6:ca:2a:3a:2d:e3:
                    ab:b1:0d:14:97:43:73:28:39:ba:c3:db:ae:a4:b7:
                    f8:84:bf:f3:92:a4:fd:c3:ff:19:89:af:cb:b6:f6:
                    83:73:d3:93:cd:ce:84:b5:48:a4:ae:2f:85:8b:8e:
                    88:ab:8c:e4:a1:73:0d:64:02:f2:c5:3e:0d:86:12:
                    49:68:f3:86:ad:90:e9:6a:07:13:ff:4f:b0:ef:50:
                    a8:9b:e5:9b:1d:27:29:b7:de:ac:a5:30:c0:c7:d2:
                    30:8a:15:c1:fd:10:d7:86:36:2b:9f:09:5c:1a:8b:
                    2d:6f:fa:76:06:6e:80:41:47:12:3f:34:50:24:f9:
                    54:96:61:74:01:53:fe:e2:a1:10:84:ff:cb:e2:dc:
                    f9:08:c5:92:45:6b:f2:d0:30:b2:65:1e:98:72:c6:
                    f4:c7:54:43:f8:be:2a:b1:df:3f:e0:60:10:5b:74:
                    94:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BD:15:E6:F4:13:8C:FA:41:37:97:CA:FE:71:C9:30:57:33:F5:65
            X509v3 Authority Key Identifier:
                keyid:D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:26:aa:2b:da:7c:12:2c:2b:5e:49:c0:3b:cf:6b:dd:77:b9:
         27:34:ac:24:de:6f:6f:cf:82:d7:12:15:e9:f6:d8:87:64:b5:
         66:d2:7c:4e:cf:a3:ca:98:e2:15:f5:93:e2:6e:05:6a:08:e8:
         aa:dc:00:86:71:02:d9:95:b6:d5:9c:c3:06:9e:a8:ec:5e:ea:
         71:31:64:63:1f:29:54:30:b9:ae:f2:d7:9c:96:58:6f:c9:94:
         ec:89:98:55:07:d5:f3:43:dd:8d:82:92:6c:ea:a8:36:9f:a7:
         38:ec:93:cf:1c:fe:32:fb:80:65:4c:dc:18:33:2d:40:ef:0f:
         b4:97:df:23:e2:52:65:12:67:ae:c8:1d:b9:06:fd:71:ba:79:
         b6:df:92:f0:e4:85:7c:f4:c0:7c:07:da:84:d3:ab:31:55:56:
         53:96:d5:a4:68:da:3d:58:84:7c:f5:4b:d4:4b:69:a3:93:c1:
         45:e2:e0:d5:78:9c:f2:6b:e2:f2:55:6f:6c:74:af:76:93:13:
         86:c4:65:08:7f:25:26:7d:e7:d8:44:8d:80:aa:c7:49:b3:a6:
         f9:f8:0a:f2:78:3f:93:5e:a9:c5:a6:82:4b:52:d2:bc:5c:fe:
         ad:6f:f5:da:7b:e6:94:fc:de:6b:fa:26:d2:ea:cc:a1:8e:5c:
         d3:23:40:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:51:24 2025 by rpki-client