Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File:                     CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier:          elKRUNIB0iEQewfhockpEVDYJDx223XFClSPVg6o7tY=
Subject key identifier:   C2:01:9A:07:CB:31:CA:A8:0F:B3:39:A0:7B:B5:FD:7F:B1:C2:99:BF
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer:       /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial:       019774F71F4AEB54DBE48BA4E234CD56DA77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number:          1281
Signing time:             Sun 15 Jun 2025 19:00:41 +0000
Manifest this update:     Sun 15 Jun 2025 19:00:41 +0000
Manifest next update:     Mon 16 Jun 2025 19:00:41 +0000
Files and hashes:         1: 9g2oNKMWPHaY3ypyN3GFZxzPfs4.roa (hash: 8RtD/0fyq33fqE6JUFidi2A+LQMWPIgnaxTCC9bjGS0=)
                          2: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: ADcMddkTi2dix06cI9tfFaTWzisbf5iQxFWaCqyhTgk=)
                          3: HtV3FEKPYRYDY8G-1hRWsnLwlC0.roa (hash: Fe1/XdGKNSuTPZCZpZdJHVC5upZbn8MH26YO1cQpOgY=)
                          4: MK8eqrMP3j5ymuZ4qk999b-iSkQ.roa (hash: nNhLpGCxsknDRkcaORpA6GPvezr0Frk5rCO7fQ7CtRw=)
                          5: R8GgH67MzGYrmtUBlZ44LYdM_44.roa (hash: eNGVD5qiBokWARwlEPYWPW2sMCzs8hQrScOks2RkSK0=)
                          6: Ybcq71LggwVgyEjZGj3f3dEpdkk.roa (hash: f0t7i7gDS9zIIPu03BEE6WGbhFMn5Zbnq+bqTPfH+j8=)
                          7: bKr8UWW3-RF_D0B7S4TpF3ssvtc.roa (hash: kYFW2by3SyFaWc3VlVXDw0SIgIp3P05RN26zndjXy/k=)
                          8: mtdclY8O-xs5gcnHoOhafDFUgKI.roa (hash: rbz7XQGehDM4qlCCC493lW8PFTdkUVLafneGpzVymQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:f7:1f:4a:eb:54:db:e4:8b:a4:e2:34:cd:56:da:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
        Validity
            Not Before: Jun 15 19:00:41 2025 GMT
            Not After : Jun 16 19:00:41 2025 GMT
        Subject: CN=c2019a07cb31caa80fb339a07bb5fd7fb1c299bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2d:44:33:45:89:57:b8:2e:ca:5d:78:62:c8:
                    2d:d2:e2:92:24:65:43:1d:84:e4:9d:3e:55:4d:69:
                    50:db:68:cf:a6:34:a3:42:6d:4a:8b:9c:5c:51:5a:
                    a2:54:05:60:ee:75:3f:3b:9a:68:d4:b6:87:4d:1a:
                    f9:d5:b0:16:37:d5:08:61:cb:76:d5:3e:35:2a:5b:
                    6d:6b:0d:73:0f:11:3c:31:44:78:54:b5:3f:80:4a:
                    7c:82:34:5a:a6:63:12:8f:c7:be:07:56:63:94:27:
                    a8:9b:ca:c6:20:f3:13:76:0a:1f:d7:70:a6:99:06:
                    37:53:a9:e2:58:21:d5:30:d3:55:ad:99:6d:da:28:
                    b8:5c:fb:9d:a1:06:b7:0e:3c:12:57:af:c1:f1:37:
                    e6:2b:c5:db:d4:51:7a:d8:cd:16:de:21:49:04:b4:
                    dc:7b:e7:8e:c7:b0:a6:5f:4c:e1:4a:a2:1c:c9:e5:
                    ce:34:e6:b3:e6:bb:01:c9:c1:55:d5:c0:79:5d:d6:
                    22:4b:b0:8b:92:f0:5c:6e:a6:c5:7c:a5:26:ae:5b:
                    a3:e7:8f:37:47:ae:f5:8a:0f:3a:39:8d:4b:70:2d:
                    76:76:ef:05:08:e5:00:27:90:7b:3d:03:68:ed:31:
                    94:a3:ad:c5:b7:e1:ed:13:1f:71:7e:8b:59:47:74:
                    bd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:01:9A:07:CB:31:CA:A8:0F:B3:39:A0:7B:B5:FD:7F:B1:C2:99:BF
            X509v3 Authority Key Identifier:
                keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:13:60:93:0c:e3:f0:26:52:ae:d0:fe:67:81:08:ca:7b:d3:
         82:47:97:58:88:be:f6:62:ed:89:35:56:0a:3b:d7:52:0f:81:
         e9:7c:27:af:41:4a:7d:5a:02:fb:b3:75:4d:ef:64:86:e7:8f:
         af:58:e4:f9:c3:eb:09:42:69:df:c0:a7:49:59:49:81:f6:75:
         da:59:12:54:5e:85:01:6d:c3:be:a0:8a:86:3a:b4:17:ff:07:
         2e:22:13:06:83:04:5d:66:08:97:01:7d:bc:67:14:f3:b5:4f:
         28:0d:a3:7e:33:d5:3d:f7:c1:46:8b:94:61:3c:cf:6d:c9:44:
         10:6b:54:64:64:84:a0:bb:76:9c:f1:49:39:6e:98:ef:62:38:
         22:1a:05:98:97:49:06:80:34:06:00:67:3d:e1:e4:05:40:85:
         2c:ad:ad:c3:74:24:b0:25:b0:26:90:3e:18:38:37:b2:6c:5a:
         87:99:a9:2f:b2:a2:79:68:47:3c:8a:d5:4d:6f:e1:42:67:7c:
         cc:6d:4a:ce:e5:eb:f2:b2:89:2c:5b:39:08:c9:d2:20:11:61:
         cd:fc:85:89:6a:a2:d3:c3:2d:f6:d1:7f:f7:f3:44:e4:d0:e9:
         5a:7c:43:f3:1e:c5:f0:32:4a:92:56:7c:ce:fc:be:72:a8:09:
         e8:df:7d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:55:22 2025 by rpki-client