Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File:                     bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier:          MNmHWNoXbDC/z5pQjfrW0IM4s4/xJiHjy6cJ1rVVedQ=
Subject key identifier:   D1:FA:17:B6:89:35:6F:92:77:01:13:2A:90:18:12:E7:76:31:F5:F3
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer:       /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial:       019777C0FA6480A3F6542667FAF80A68415B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number:          1379
Signing time:             Mon 16 Jun 2025 08:00:25 +0000
Manifest this update:     Mon 16 Jun 2025 08:00:25 +0000
Manifest next update:     Tue 17 Jun 2025 08:00:25 +0000
Files and hashes:         1: 4fkynkxl95431dIe-ABsA7v5RCg.roa (hash: EGfFvZoQzCGUyDaxbnd+O3QTAMwiWmSgrk3gdk+vKlc=)
                          2: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: 8/Y0qt8ECHLGwzc4ZMEbZQXh9nx+SWjG82Y3GgiD+ks=)
                          3: lgA3OzlgN5mO-phBlXIn8VKgG_E.roa (hash: FrDJm2Vh5IZpvHu6Ip1jtuiPOr7jqRjxluv8XgGr48o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:c0:fa:64:80:a3:f6:54:26:67:fa:f8:0a:68:41:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
        Validity
            Not Before: Jun 16 08:00:25 2025 GMT
            Not After : Jun 17 08:00:25 2025 GMT
        Subject: CN=d1fa17b689356f927701132a901812e77631f5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:af:a9:32:07:8f:51:bd:8c:79:d5:d9:4a:
                    04:c4:c5:e1:1a:b5:c4:63:7c:7e:6e:3d:5f:13:7d:
                    45:e7:67:fd:43:c4:1a:52:4f:86:2b:49:87:b3:5b:
                    3c:59:37:4c:11:15:8e:0d:53:af:c0:7f:73:1d:5a:
                    87:c8:d5:d3:1c:05:a9:9e:e1:d1:a9:d1:38:67:3e:
                    bc:8e:7e:14:be:33:b4:5c:74:0c:d0:91:d6:08:a9:
                    e6:2b:be:3c:38:07:c9:70:f9:36:cd:bc:dd:fb:32:
                    17:17:f5:1b:3b:6b:7e:d4:c1:5d:09:1d:84:09:7a:
                    6d:bc:60:c6:98:08:97:78:7e:2c:87:6b:8d:8c:ce:
                    b6:9d:b3:a0:98:37:90:eb:05:f7:24:20:1b:08:d8:
                    5d:c4:16:45:a3:f2:ff:6e:bc:b5:91:27:1a:ac:60:
                    10:69:54:f2:e7:d9:40:ea:01:1b:c8:0b:a9:2a:ba:
                    68:f2:17:72:e3:d6:98:e9:0e:39:fb:14:be:97:4b:
                    cd:50:e5:b3:8e:31:50:36:8d:b0:c5:fc:19:24:21:
                    8d:ab:cd:0b:d6:f3:02:ae:f1:89:c0:4c:14:31:12:
                    12:ce:64:b0:a2:dc:33:fc:6f:c0:e8:87:93:87:05:
                    21:a2:de:8c:84:28:cb:2e:f7:b3:7b:3c:12:37:e5:
                    0e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FA:17:B6:89:35:6F:92:77:01:13:2A:90:18:12:E7:76:31:F5:F3
            X509v3 Authority Key Identifier:
                keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ba:4c:e6:9c:d1:81:2a:fd:ae:da:27:84:a3:26:77:d3:42:
         bb:d5:2a:ce:36:0a:8f:72:1e:e9:61:22:c2:03:99:43:0a:2b:
         2f:4e:9c:2e:95:e5:5c:b4:c3:8c:24:47:1d:e5:73:bd:38:2e:
         c2:0a:b1:a5:25:66:ac:a9:49:25:37:ba:0f:0c:3d:a9:69:03:
         69:39:6e:50:a2:0c:75:30:bb:09:95:50:4a:8e:a2:8c:09:84:
         9c:f8:59:36:30:ab:72:ec:34:e5:67:78:91:c0:5f:b5:cc:8b:
         fe:a7:04:95:c7:6b:30:8b:b2:be:19:25:a4:b5:4d:80:6b:91:
         ff:fb:a3:ec:80:62:8f:f0:2e:26:c2:92:00:8e:f2:cb:ac:ed:
         57:ff:61:58:92:e6:ff:d3:68:27:94:41:0a:6b:1f:80:94:1f:
         81:3f:27:30:c1:76:de:f4:09:09:db:9f:23:b6:66:f7:26:9e:
         47:0c:2c:bc:ab:d4:8c:28:0c:e6:40:c8:9b:83:c2:ac:fa:af:
         eb:42:a8:4d:12:f1:5b:c9:2a:8c:53:b0:ab:a2:57:84:de:df:
         5c:25:53:a1:5c:71:f9:4b:60:ea:07:17:34:84:15:e2:e0:81:
         14:f9:dd:a6:cf:2c:27:05:20:9a:bf:97:c3:1d:51:b7:99:da:
         a9:13:72:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:32:05 2025 by rpki-client