Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
File:                     bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json)
Hash identifier:          LpSf77Ct+xrO+0CV2vZmAcEHcE32W0A1Y+lO8rRXP3c=
Subject key identifier:   73:38:05:2B:75:D5:21:72:F5:1B:96:3D:BF:9D:F1:5E:DC:2C:5A:36
Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
Certificate issuer:       /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Certificate serial:       01976DAB1CC2A8BE9D3DBFCD7607C8AB7EFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
Manifest number:          0B59
Signing time:             Sat 14 Jun 2025 09:00:19 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:19 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:19 +0000
Files and hashes:         1: U_3B74ujhAJrCWsRNX6BqqwgnVw.roa (hash: t7MohkwWoi0EopfC0Tnorl6v62Y4aRFAg2yz8Q6y9x8=)
                          2: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: 8zngsSNS4BefkP3V9RkpCAt0E4CismfDkM4TBQ/aKV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:1c:c2:a8:be:9d:3d:bf:cd:76:07:c8:ab:7e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
        Validity
            Not Before: Jun 14 09:00:19 2025 GMT
            Not After : Jun 15 09:00:19 2025 GMT
        Subject: CN=7338052b75d52172f51b963dbf9df15edc2c5a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:13:03:ad:cd:81:b6:80:68:65:5f:4d:c4:
                    88:44:81:b3:c3:0f:ab:df:0e:60:b6:b8:c4:69:91:
                    cd:64:1f:fd:89:49:05:13:69:ef:a9:73:4b:55:25:
                    48:4a:46:fb:b0:6e:bf:80:ed:63:5f:96:4f:0f:94:
                    41:cb:22:58:29:f8:0f:1c:44:1d:fe:4b:b8:c7:0c:
                    b1:3a:23:8d:d9:3b:79:e5:f8:62:3e:3a:43:57:48:
                    af:a3:05:57:94:13:25:07:b0:75:4e:35:d3:80:44:
                    56:82:d7:22:a3:fa:8c:a6:04:90:0b:86:72:02:49:
                    a0:fa:71:7c:e7:59:74:1f:d8:a8:79:63:b5:94:25:
                    1b:16:f3:f7:41:4e:07:11:39:c9:f1:e8:0d:62:a8:
                    2f:dd:86:37:63:f9:73:78:99:0f:1f:37:1c:05:90:
                    e7:a1:3d:b5:93:0b:15:96:bd:f4:e5:35:23:4c:80:
                    49:ac:3a:0a:ef:67:ea:8d:11:03:17:3d:e9:a1:b0:
                    bc:03:a2:10:4c:1e:bb:b2:cf:9a:ba:9f:aa:a5:77:
                    06:dc:66:f3:ca:59:01:f9:6a:79:58:f5:cb:b2:7c:
                    db:9a:e0:5a:f7:91:46:ed:1a:6f:06:8c:8f:63:10:
                    3c:be:5e:e6:38:b5:46:a9:76:89:41:38:60:05:28:
                    db:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:38:05:2B:75:D5:21:72:F5:1B:96:3D:BF:9D:F1:5E:DC:2C:5A:36
            X509v3 Authority Key Identifier:
                keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:cb:ec:a7:84:02:83:d1:3f:c5:46:af:37:67:a6:d6:6b:f0:
         3a:2c:46:1b:fe:67:1a:db:f6:35:aa:2e:dd:92:30:5b:46:74:
         cf:da:9a:6b:75:f7:71:ce:6e:9e:a6:01:b4:ab:e8:56:73:93:
         98:c5:ec:bb:37:b9:ab:bd:5f:7d:51:70:b7:7f:65:a1:ac:15:
         b5:5d:96:06:ff:bf:be:bc:35:70:f3:19:be:22:7e:35:9c:1b:
         b2:3a:2a:e2:0f:48:ed:71:61:4c:6b:41:c7:5b:bd:58:3b:24:
         ce:56:fc:8a:6f:f7:e4:62:7f:11:03:50:61:4e:04:5d:6d:f8:
         ed:c3:f9:a8:b8:37:55:46:5d:29:1c:40:9c:a0:a8:2d:3c:e1:
         fe:71:f2:97:eb:e0:10:34:65:f4:f0:aa:c5:2e:f1:09:56:5f:
         15:e4:7e:16:ed:6f:2e:46:17:40:01:83:9f:59:b2:c0:d7:dd:
         9e:a2:02:7a:86:6e:ef:3d:9e:74:f2:5c:da:eb:3c:93:01:d1:
         fc:15:c6:ae:f9:29:fb:f7:cb:aa:fc:09:77:20:a5:36:2d:59:
         b1:d2:53:83:d5:38:ca:db:4b:ed:bc:e4:98:6a:96:0a:77:e1:
         ef:0b:4a:36:37:04:5d:b7:16:67:50:51:0a:c2:f8:1f:49:0a:
         ac:23:46:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:00:39 2025 by rpki-client