Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
File:                     XL6eQwJOzGksM1OYuy2WcRaqwtk.mft (raw, json)
Hash identifier:          dtJDjDVVPu2jvPa+m49kdu5Jkwnzhv0w6wNCORIv10w=
Subject key identifier:   14:C6:5F:AA:9B:AF:B4:42:18:D7:17:8E:DF:B4:8A:7F:CA:4B:50:CB
Authority key identifier: 5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
Certificate issuer:       /CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Certificate serial:       01976C2B663514636757E9E4C5221E9905A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
Manifest number:          0B40
Signing time:             Sat 14 Jun 2025 02:01:12 +0000
Manifest this update:     Sat 14 Jun 2025 02:01:12 +0000
Manifest next update:     Sun 15 Jun 2025 02:01:12 +0000
Files and hashes:         1: XL6eQwJOzGksM1OYuy2WcRaqwtk.crl (hash: 30jzNx/X2RPUeZBVnIvkVyt5sX7ue2tNcBl438m0LY4=)
                          2: fR8nd7Ui5M0TTCClOFZarT85ISQ.roa (hash: +LwloUzxUq85xV+wKMtA7KHt9ERuAgEUO4GtKVQXsDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:66:35:14:63:67:57:e9:e4:c5:22:1e:99:05:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
        Validity
            Not Before: Jun 14 02:01:12 2025 GMT
            Not After : Jun 15 02:01:12 2025 GMT
        Subject: CN=14c65faa9bafb44218d7178edfb48a7fca4b50cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b2:1f:8a:5b:fa:c5:2e:0f:bf:f2:85:9c:19:
                    e3:2f:96:f3:f3:1f:42:2c:d3:b8:7a:08:1a:b6:42:
                    5d:81:6b:eb:91:40:ea:12:5a:e6:9d:b5:93:be:48:
                    f4:9f:f4:f3:16:63:c0:d5:80:3e:0e:33:4b:6c:94:
                    0a:3a:24:21:3f:5a:86:9e:10:f9:a2:ed:86:e7:2d:
                    29:d9:af:71:15:78:39:4b:3e:f4:af:29:7b:76:4d:
                    a3:ee:3a:57:df:e7:b7:00:51:50:78:e2:2e:90:a4:
                    a5:25:93:b8:ac:a7:64:99:1f:06:d9:8a:f9:d4:2d:
                    1c:a2:dd:74:bf:5a:3b:17:61:71:4a:f0:10:4b:eb:
                    58:64:08:8f:8e:69:cf:cd:40:37:be:e8:c0:e0:18:
                    b5:2f:a6:e6:98:c2:c3:93:93:08:86:7c:2e:ae:8d:
                    d2:28:55:6a:11:6a:47:f9:70:55:26:12:98:d4:2a:
                    19:a5:30:3f:91:57:4f:75:9a:75:6e:bf:5a:69:35:
                    5e:ce:97:6a:d3:82:d2:1b:7e:05:d1:dc:2e:e4:50:
                    0c:f8:6a:a7:60:a1:3d:da:8a:89:72:a1:8e:de:a0:
                    16:75:30:93:4e:96:12:a2:39:7c:17:46:8b:c3:6e:
                    2f:c1:b6:dd:b7:45:f5:f0:46:f4:87:97:70:46:75:
                    5c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C6:5F:AA:9B:AF:B4:42:18:D7:17:8E:DF:B4:8A:7F:CA:4B:50:CB
            X509v3 Authority Key Identifier:
                keyid:5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e3:b3:31:82:ef:98:0a:b6:34:09:e0:11:58:6a:10:2c:4d:
         52:ac:42:33:4a:01:8a:7b:79:3f:df:15:e4:de:5d:48:54:74:
         69:51:bf:d8:12:68:09:4b:bc:c5:9c:4d:e1:99:fe:ce:5d:fb:
         ad:6d:a3:4f:ae:f5:16:7e:b6:ec:9e:a9:0d:6e:f1:a4:9e:d6:
         ef:9c:83:56:45:be:33:aa:95:c3:86:c6:61:a4:2f:97:5f:ff:
         9e:ac:bc:5c:b0:36:f2:0a:16:49:c2:db:68:c6:64:8e:87:6e:
         d7:65:37:60:7b:08:f7:9f:c3:e3:a0:4b:f7:8d:21:f7:97:1a:
         61:86:af:1c:49:54:87:32:84:e7:d1:a5:a3:63:f4:89:ef:c4:
         6f:c9:1d:b9:61:88:6d:fa:7f:99:cb:d1:59:f5:42:c9:d2:06:
         ab:cd:70:36:44:6b:a4:8c:be:bf:b7:3a:b7:4b:ef:86:93:df:
         1d:95:d2:da:1a:ca:b7:5d:24:ae:ae:de:61:b2:80:ca:a9:bd:
         22:64:12:8c:40:6b:5f:db:73:be:d3:4a:c1:fb:8b:e9:29:b5:
         af:83:e3:57:f2:c6:f6:5b:0a:b9:7e:ca:49:9c:54:ca:9c:60:
         97:69:ae:b8:71:dd:ff:b1:aa:f7:f7:35:32:ac:c9:9c:99:be:
         09:48:09:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:11:46 2025 by rpki-client