Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
File:                     CWmio5Y1t5dHbx8WM66PJ78ztTM.mft (raw, json)
Hash identifier:          isAUCQqpcBU2lTGIbqQtdAbqc72qGSmrJAWEZfCEpCw=
Subject key identifier:   B5:E3:5D:D9:B4:21:13:C9:49:8A:1B:30:2C:3E:9B:0B:3D:E6:2C:18
Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
Certificate issuer:       /CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Certificate serial:       019782448A39C8E2F173DEAC62D1D42AAC9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
Manifest number:          06F6
Signing time:             Wed 18 Jun 2025 09:00:19 +0000
Manifest this update:     Wed 18 Jun 2025 09:00:19 +0000
Manifest next update:     Thu 19 Jun 2025 09:00:19 +0000
Files and hashes:         1: CWmio5Y1t5dHbx8WM66PJ78ztTM.crl (hash: qPlJ80LuPIPpCC01mRJZUUdmQ19YGXeHjbAEStFXO8Q=)
                          2: IQXTtVHze1IXoXyJqdh9nwPWeHs.roa (hash: siOcI04XjEZl0t1nX+KyiRbWYR5EN6LmCvslwid92wA=)
                          3: NsSedmTQW8OnTTsqv3X8CBZy-xU.roa (hash: WFkKh3bAC4MDDNtqyFfpo7GUVyreugPfu/r7LcM/fN4=)
                          4: TeB088r0q83Xt0BxDsUFRJ09n_w.roa (hash: G48KXbKrX68pg0VWA7DNE58/xU413WQGSqX5xHVo4rY=)
                          5: eZ1oRKw2ZmvD0_NWa-kdmh2g-eo.roa (hash: 2jAE9EFeYAI0mBmHLdLHHE90HLI9cIG+7iKSbXwklN4=)
                          6: l5LQQJ1hscP11M9PGOZJoYipJjA.roa (hash: 1Qefj38Zjj0ROOLLrKtBW86/Osz3b9lr4tBY77Lptdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:44:8a:39:c8:e2:f1:73:de:ac:62:d1:d4:2a:ac:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533
        Validity
            Not Before: Jun 18 09:00:19 2025 GMT
            Not After : Jun 19 09:00:19 2025 GMT
        Subject: CN=b5e35dd9b42113c9498a1b302c3e9b0b3de62c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:d5:be:37:23:9b:9e:da:3f:88:1b:78:90:
                    1f:71:cf:0c:94:4b:fc:99:51:c7:0e:be:cd:6e:53:
                    d0:95:21:4c:8d:9f:69:4d:58:7c:4a:7a:f4:dd:f0:
                    be:57:ee:09:61:f2:c9:00:a1:30:dd:99:de:c1:c7:
                    1c:cc:c9:30:84:0d:0f:3b:a6:79:22:27:31:ef:b5:
                    08:95:c3:6e:40:d7:2a:5e:67:a5:88:28:29:2c:b2:
                    27:6f:ab:97:f8:23:98:01:3f:4a:0f:02:32:7b:67:
                    91:f7:cb:73:6f:01:84:1e:e7:37:20:89:7e:56:af:
                    66:2e:23:a3:5b:41:cc:1b:59:17:e8:6b:d2:7c:c4:
                    c2:06:3a:37:3f:ca:1a:5c:92:bf:65:be:cc:be:82:
                    90:3b:97:6f:41:6e:6b:81:0f:ab:25:d2:e5:82:e8:
                    28:d9:56:4a:a7:91:d0:ad:25:5b:6b:bd:58:c9:95:
                    21:3b:f1:29:15:70:2c:db:eb:7e:7e:6b:5b:05:53:
                    4d:9b:0b:c1:7f:50:a3:78:ff:95:d0:cf:0d:cf:48:
                    71:0b:8a:dd:58:35:f4:30:9c:5a:b7:bf:a6:92:b2:
                    7d:9e:07:40:5e:0d:8e:cd:7b:36:20:85:59:91:af:
                    36:7c:e5:87:1a:a6:6d:03:3c:bf:5e:4d:14:9b:f7:
                    be:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E3:5D:D9:B4:21:13:C9:49:8A:1B:30:2C:3E:9B:0B:3D:E6:2C:18
            X509v3 Authority Key Identifier:
                keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d7:95:2d:bc:67:ac:8a:2a:63:45:93:60:0c:68:69:6f:7c:
         bf:d9:0a:65:2d:4a:e4:a2:16:d8:94:e9:12:2f:de:c2:d0:f1:
         d5:63:1c:14:7f:1a:b8:49:7a:bc:d3:2c:98:9a:74:80:d5:4f:
         c7:2a:60:e5:60:89:6a:84:1f:a7:88:97:ca:53:83:c4:65:3c:
         cb:c5:ab:1d:17:af:87:5e:53:5d:0e:4e:36:d4:fc:8d:c4:48:
         d0:95:e6:29:de:12:05:97:03:36:0a:1f:4d:53:9a:8e:fc:24:
         42:db:07:9a:8c:a7:81:2f:b8:a8:ba:cc:15:13:82:25:25:d8:
         04:31:58:8f:80:1f:d8:f3:d4:d4:94:ad:e9:e9:36:d4:dd:be:
         a0:65:64:75:5d:4c:e1:ac:dc:ff:19:ae:6a:e0:a1:42:33:3f:
         5d:22:84:68:45:c5:10:a0:d1:90:42:b9:42:be:40:a8:75:94:
         49:c4:a8:2a:9b:ee:97:a9:be:0e:62:51:d1:76:b0:a8:ba:84:
         23:a0:12:d4:8c:51:20:d0:e7:1b:67:d5:cd:93:07:98:90:96:
         82:03:ce:23:d9:6c:17:75:81:9c:15:70:eb:ee:96:94:84:e8:
         1d:89:4c:0c:c6:3b:48:60:12:b0:c4:22:11:7c:0a:a9:f0:e1:
         65:d9:60:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 14:44:55 2025 by rpki-client