Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
File:                     B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json)
Hash identifier:          VuikTp9Bck5mcud9JQWghNbngAraAooWQlOhoAjAhW8=
Subject key identifier:   C7:24:AD:A2:92:25:D3:94:4D:97:63:C8:30:88:A9:31:69:FE:07:0C
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Certificate issuer:       /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial:       01976C6238E347217783555F8869C69C4AE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
Manifest number:          06E9
Signing time:             Sat 14 Jun 2025 03:01:05 +0000
Manifest this update:     Sat 14 Jun 2025 03:01:05 +0000
Manifest next update:     Sun 15 Jun 2025 03:01:05 +0000
Files and hashes:         1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: XzwWVB0HNGCJmSyy7koDg/qSNrAFzTlbDLA0BB3ohc4=)
                          2: F_iiYpuJZsPXyVk42h-DOsF_bWI.roa (hash: dpN0U4f3O8Pd8GkBmRoC06G+AozmpMzmGpJELa79vM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:38:e3:47:21:77:83:55:5f:88:69:c6:9c:4a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
        Validity
            Not Before: Jun 14 03:01:05 2025 GMT
            Not After : Jun 15 03:01:05 2025 GMT
        Subject: CN=c724ada29225d3944d9763c83088a93169fe070c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ff:11:f1:59:31:27:90:a4:ac:45:ed:79:7e:
                    9a:11:f4:b9:2d:88:f7:6b:25:c4:fe:de:c8:76:ee:
                    19:ec:b0:f6:1d:05:3f:34:93:f6:a7:1c:2d:0f:7a:
                    1a:8a:f3:e6:88:4c:3d:e0:33:52:ab:db:f4:98:da:
                    e3:e8:fe:a7:1e:ac:97:59:9e:1a:4e:9a:1c:63:8b:
                    86:3c:53:f0:36:7f:9a:dc:81:ab:56:30:4b:69:2e:
                    17:22:b3:3e:bd:02:f1:ef:43:90:b6:c1:f6:17:be:
                    41:6f:53:23:79:b3:bc:99:0b:72:04:03:ac:1d:40:
                    38:30:3d:06:4f:f7:8d:ed:5b:1e:94:63:cd:f1:58:
                    ac:dd:08:f3:60:ec:54:9b:1a:e4:d8:35:d7:f4:4d:
                    f8:c2:c5:05:cb:d9:8d:38:72:71:69:90:1d:e2:b8:
                    8f:41:e0:d8:e8:7a:dd:0e:39:a3:f2:5b:75:9a:8b:
                    ff:d0:15:e3:41:c8:08:3c:65:3f:4a:2d:a5:a8:29:
                    f3:86:a1:ca:68:3d:a0:20:24:10:61:94:16:fe:9d:
                    dd:e2:dd:41:7f:62:32:27:60:a1:e7:ae:48:6e:c5:
                    79:77:0a:ec:57:37:b0:f8:71:2b:9c:55:84:97:ef:
                    80:5c:63:b6:9d:ef:d4:ff:ad:f4:c0:9d:f5:b0:dc:
                    b3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:24:AD:A2:92:25:D3:94:4D:97:63:C8:30:88:A9:31:69:FE:07:0C
            X509v3 Authority Key Identifier:
                keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:98:b5:d9:5e:f7:11:29:c7:0d:b7:7a:39:2a:19:3c:f6:f5:
         2a:7a:66:31:c4:af:9d:63:0b:43:4d:94:a5:15:05:a3:02:39:
         b5:e6:51:09:95:07:2d:70:42:c9:33:77:17:cd:44:15:ea:1f:
         10:da:e4:52:83:34:e4:23:80:76:6c:e9:7b:88:bb:30:28:e4:
         cf:2c:d7:f6:86:be:df:a2:61:18:4d:a1:f3:77:17:b7:bf:d4:
         3b:db:80:77:47:96:6d:fd:82:e1:69:f9:95:75:97:d2:35:43:
         44:bd:63:03:ce:dc:c9:09:c3:c0:36:10:77:49:53:98:8b:11:
         04:e3:a8:74:4a:03:1d:05:ff:4a:4f:3d:f4:6f:dc:f8:81:15:
         5b:f9:e7:8d:5d:2e:df:6d:16:c8:0d:ee:ab:d7:ac:aa:72:6d:
         53:dc:96:fd:36:34:ef:c3:83:47:1a:0e:14:44:b2:7e:6b:8b:
         be:70:7a:29:99:e3:1f:f5:20:aa:3d:ac:4e:69:e4:87:1c:85:
         63:ae:73:b7:10:ff:c7:7f:52:b0:62:1f:92:d1:4d:53:bc:48:
         e6:ae:7b:00:83:f6:aa:53:99:1d:ca:80:45:58:44:ab:17:65:
         e0:f9:36:c0:07:99:12:55:1d:5a:5a:01:af:30:0c:65:6e:45:
         b9:8f:b9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:42:40 2025 by rpki-client