Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
File:                     Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json)
Hash identifier:          wL9MRisseWbxoXiDBK3ocwnRZ+W6ybmRRnMmYxWCaUs=
Subject key identifier:   AA:81:0E:C0:7C:28:FA:3B:23:F8:08:A6:7D:EB:5A:D1:E0:A5:C1:A5
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Certificate issuer:       /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial:       0197711B2DA581EB14522344277BFC39FC39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
Manifest number:          15A6
Signing time:             Sun 15 Jun 2025 01:01:35 +0000
Manifest this update:     Sun 15 Jun 2025 01:01:35 +0000
Manifest next update:     Mon 16 Jun 2025 01:01:35 +0000
Files and hashes:         1: 1qKATTVt2l9Amr30ivUd4qpcDQ8.roa (hash: D9mOfQXdZlNktupQVZacZwiNwms/ptwHflaY7QzV5Xk=)
                          2: 54AIlsCbzgy0XCYwE0wdAC4kiqw.roa (hash: yJyuDkNiVUNUnxXEpeacfSUjn5at6QtcOaws+zppt2w=)
                          3: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: 2olwRKvXrFIML06Ekm8L2E2rP/b3Kzox0kzT3eQxlLI=)
                          4: I9n8PdlI12zk3ftrt5ZejA1FrCU.roa (hash: kf3O7lpj7s7VfmT2vuNx6GwPZjLLFUhTpSV85VBR1i4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1b:2d:a5:81:eb:14:52:23:44:27:7b:fc:39:fc:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
        Validity
            Not Before: Jun 15 01:01:35 2025 GMT
            Not After : Jun 16 01:01:35 2025 GMT
        Subject: CN=aa810ec07c28fa3b23f808a67deb5ad1e0a5c1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:99:c9:44:0c:8d:c1:38:99:d6:c3:06:fe:e7:
                    a2:86:b3:68:d9:c4:2d:fa:b9:e8:64:70:c1:47:35:
                    a5:92:79:57:1f:49:44:d7:27:5c:82:32:54:a5:80:
                    c1:74:a4:86:31:bd:5a:6e:cc:4e:36:c0:ba:c8:38:
                    68:ef:50:54:d6:f6:ea:1e:90:71:76:90:d7:3b:15:
                    9e:d5:4f:e9:81:37:b9:3d:18:42:c6:32:ff:1d:11:
                    30:48:f2:ab:3b:f5:7a:44:a6:bc:af:46:c6:5a:82:
                    0d:f3:b1:45:c5:b3:08:d5:01:e0:7f:94:1c:4c:f9:
                    41:7a:e2:8f:80:6d:03:59:9f:73:23:f4:1f:fc:f5:
                    4e:5e:1f:6d:b9:dd:50:3f:96:bc:38:c5:cf:94:3d:
                    22:72:bf:8f:99:e3:a4:17:52:92:ca:7c:e5:dd:e4:
                    cc:d4:5d:a9:e6:9c:1d:cc:fb:3c:e0:ce:19:84:bf:
                    7a:f4:5c:d8:06:0d:24:eb:31:e1:77:62:cf:cf:06:
                    1a:7a:8d:48:26:a0:9c:3b:12:42:86:7f:8c:a3:b7:
                    51:57:62:bf:7e:e9:61:84:89:fa:58:50:98:91:1d:
                    ef:33:e6:d6:00:86:da:24:f3:ac:ef:12:1c:12:26:
                    7f:83:df:4e:e3:e1:a0:34:ba:cc:2a:5d:9b:66:00:
                    df:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:81:0E:C0:7C:28:FA:3B:23:F8:08:A6:7D:EB:5A:D1:E0:A5:C1:A5
            X509v3 Authority Key Identifier:
                keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d2:b8:6f:2a:4b:fb:ea:0f:1c:1d:c5:1f:0c:18:13:74:b2:
         d4:0a:45:16:a5:af:60:ba:5b:5e:27:fd:e8:43:0f:5d:9e:dd:
         7a:83:d1:c1:37:e2:53:2e:3e:c7:93:83:ee:7b:b1:b9:6a:f5:
         82:22:89:69:26:3e:7e:35:3b:46:6d:ad:4f:af:61:ed:b1:da:
         5b:98:cd:82:18:a7:d2:01:1f:9a:56:c3:56:b0:d4:af:1f:a8:
         4c:4b:51:a8:bf:b1:92:50:12:d2:0b:98:c5:c8:43:71:8f:54:
         a7:78:7a:d8:14:87:13:ab:41:1f:32:e8:37:2e:dc:04:5b:54:
         b7:d2:89:64:66:4b:78:c5:52:65:2b:da:dc:b7:70:39:5b:ff:
         cc:cb:9f:aa:6e:fe:9f:95:f1:b2:c9:55:84:27:44:c5:6a:e2:
         1b:93:c3:06:f9:66:48:97:0e:9c:48:95:aa:98:d5:86:62:9c:
         8c:c3:33:31:3e:35:4e:d1:2e:22:2f:14:ce:64:0b:7d:4f:85:
         dd:34:30:13:46:08:25:2d:37:55:2b:e8:09:14:a7:4b:16:eb:
         23:f8:68:36:f6:b6:19:08:7e:e5:56:2d:d3:b0:63:ba:6f:b9:
         bf:25:bb:f1:b6:51:c6:81:9a:cd:8e:ce:2f:29:c4:ab:2d:3d:
         0c:3c:bc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:33:53 2025 by rpki-client