Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
File:                     k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft (raw, json)
Hash identifier:          8avopKLpdn2amm+lqFLuyGXBfFLIOFDMCWNI4CmelOQ=
Subject key identifier:   D0:70:C8:96:F3:96:7D:70:0F:B2:23:E4:AF:DC:76:B9:4A:92:6E:89
Authority key identifier: 93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
Certificate issuer:       /CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Certificate serial:       019768BBEC8A94501AADF64AE61EA4963CFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
Manifest number:          04C4
Signing time:             Fri 13 Jun 2025 10:00:35 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:35 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:35 +0000
Files and hashes:         1: eXKi70pVOkSciah0yxPymcceP7o.roa (hash: /QwJ8MrFkVplCOmNYJ6qPcPj5JI/tOF/FJ4aI1f1YYQ=)
                          2: k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl (hash: RbsZ6g6hjFSqHwc5QgbiUqB3AFMElKzV5JswgI9tU/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bb:ec:8a:94:50:1a:ad:f6:4a:e6:1e:a4:96:3c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
        Validity
            Not Before: Jun 13 10:00:35 2025 GMT
            Not After : Jun 14 10:00:35 2025 GMT
        Subject: CN=d070c896f3967d700fb223e4afdc76b94a926e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:0d:cc:06:dd:f5:2e:06:9a:b0:d8:b1:52:73:
                    91:4a:e5:e2:5a:3f:c2:ca:a4:62:ca:24:ab:ba:56:
                    9e:2a:15:9b:10:a1:ba:96:d9:37:46:6e:e6:9d:4c:
                    0e:30:d7:84:a5:08:e0:cf:e8:99:f7:0c:2d:49:b4:
                    bf:27:1c:2d:df:60:95:30:62:0f:45:f1:c3:3f:6a:
                    6d:18:7f:45:34:e7:d5:cb:bc:e8:92:21:67:45:71:
                    ce:71:1f:e7:da:a9:4b:88:57:68:36:cf:0f:65:a7:
                    39:fd:cb:a7:e1:b8:29:cc:7b:af:46:0e:3a:17:f9:
                    41:c7:96:7f:8e:fb:05:5e:9a:b1:1f:e5:5e:4e:e3:
                    c0:57:46:f3:82:7f:be:81:74:e7:5e:ed:6f:e4:02:
                    15:34:c4:a0:0b:3c:a1:0e:38:5e:d0:93:47:de:d9:
                    9b:e5:17:97:99:9a:2b:c3:bf:e5:dd:ab:a1:3b:13:
                    70:3d:05:e0:87:49:63:17:c1:be:74:a7:3c:8e:b5:
                    16:6c:32:62:f9:c5:fe:d1:85:39:96:0a:fb:75:d3:
                    82:53:da:5c:91:8f:f7:62:52:84:9b:37:46:d2:62:
                    f6:06:95:96:4e:e4:7c:76:02:75:cd:0a:2b:47:95:
                    78:7b:50:c0:37:72:11:22:f8:c6:46:62:db:8e:e8:
                    c7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:70:C8:96:F3:96:7D:70:0F:B2:23:E4:AF:DC:76:B9:4A:92:6E:89
            X509v3 Authority Key Identifier:
                keyid:93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:11:d7:34:80:44:33:07:7e:69:07:29:cc:80:52:65:f8:0c:
         a7:0e:27:96:99:f8:fe:38:67:05:be:0a:d1:10:cf:c5:4c:f7:
         07:c0:cc:be:aa:8d:b7:d9:4f:de:b6:97:84:7a:86:95:39:bc:
         45:ef:80:96:1f:9f:65:ec:96:d5:f7:b8:9b:2a:6f:9f:4a:ba:
         d9:36:a5:ba:18:b6:57:1f:17:d5:2e:b9:0e:11:42:e4:ef:b0:
         34:9d:16:6c:fd:21:da:85:31:24:16:f3:0a:5f:0b:ea:20:50:
         22:ef:8b:55:b3:95:99:51:7e:69:6a:db:12:6a:3c:d4:83:37:
         20:97:16:54:ee:42:ea:7a:bc:09:7f:db:1d:7c:5e:32:fe:eb:
         37:ea:a3:6d:7a:ec:17:d8:97:af:73:41:68:b3:75:ee:a8:d3:
         ae:c1:6d:22:2e:17:1a:d2:e0:6a:87:eb:04:07:fc:8f:b9:38:
         61:19:bb:a5:4c:42:98:57:a3:ac:c3:1a:42:5b:ac:8f:a0:62:
         fc:84:4a:4b:85:6f:6e:05:d4:6c:01:52:7a:80:aa:ab:ee:49:
         23:ff:de:96:ca:2c:40:88:68:b9:66:26:79:87:8d:88:6b:c5:
         04:7f:ca:33:d6:5d:c8:ab:9a:d0:6c:5f:34:cc:76:ad:ca:09:
         a2:39:2b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:27 2025 by rpki-client