Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File:                     4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier:          36AMi7c3AcOho0nMW1Ha0+XUwbJBq8OWvU1J1/ADD0o=
Subject key identifier:   FE:0C:FD:69:63:44:88:C8:0B:8D:3C:41:C6:96:C8:E0:89:60:3E:30
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer:       /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial:       01976C61D7162031ECCB6EDD3C2FB19C0861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number:          0AE6
Signing time:             Sat 14 Jun 2025 03:00:40 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:40 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:40 +0000
Files and hashes:         1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: nexMRupS/FTvAMK2T8Eek7mV37v0CtTHoPL4/DHV4uo=)
                          2: PBq5zLGD_CUeX0SfhuWUFrucnGw.roa (hash: rPbgNnUy1CwR89NF9bSl2HtGtuQRXqqe8MrxpHJ/Dco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:61:d7:16:20:31:ec:cb:6e:dd:3c:2f:b1:9c:08:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
        Validity
            Not Before: Jun 14 03:00:40 2025 GMT
            Not After : Jun 15 03:00:40 2025 GMT
        Subject: CN=fe0cfd69634488c80b8d3c41c696c8e089603e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:32:e9:cb:87:94:89:d4:33:8e:41:aa:80:c0:
                    51:08:4d:ce:f8:fd:ce:7d:88:85:47:04:76:fd:4a:
                    05:77:1d:5b:51:a9:7f:58:b3:fa:23:06:a9:03:ac:
                    9c:38:09:87:c1:81:9b:c1:8f:ce:0b:e1:f3:57:10:
                    09:fc:27:e2:70:6a:45:a0:df:3e:db:12:8d:ec:e7:
                    da:8b:f6:70:9e:e7:d7:b0:21:ed:4f:ce:b7:b4:1a:
                    e0:ec:5a:ce:99:08:16:a8:f4:20:f2:71:6c:49:90:
                    23:38:38:3f:6f:dd:5b:5f:4f:70:f0:0f:85:3a:7e:
                    37:1d:05:ec:35:3c:01:02:8f:dc:6f:2f:07:86:5e:
                    1b:3b:d7:1f:0a:b0:6d:6b:3e:91:4e:82:68:1d:31:
                    05:be:ef:68:fa:0f:f5:d5:ee:95:f6:1a:c9:0c:36:
                    39:a5:6e:fc:2c:5e:d2:b9:fd:3f:e0:a9:22:a8:5b:
                    17:da:3d:76:8a:56:dd:ee:54:7f:d8:c4:ff:17:bc:
                    f2:24:8e:d2:a6:47:5d:99:75:1f:5d:5e:41:c0:94:
                    7c:f9:a8:ce:29:6a:84:df:98:56:26:45:51:dc:9b:
                    e8:dc:0a:97:79:e9:8a:3a:c4:5e:a1:58:c9:b4:22:
                    ba:7f:47:95:5d:75:da:91:6a:9e:7b:a2:ff:56:2b:
                    3d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0C:FD:69:63:44:88:C8:0B:8D:3C:41:C6:96:C8:E0:89:60:3E:30
            X509v3 Authority Key Identifier:
                keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:4c:84:a8:95:dd:55:c3:a8:15:c4:0d:c8:1c:a6:70:30:ef:
         87:ef:40:a5:59:34:8a:31:9a:94:5c:3f:b9:b5:49:4a:e0:58:
         29:00:7d:64:b0:24:4f:57:bd:0b:d5:a0:78:64:6d:f8:88:95:
         fc:fc:46:25:d0:bb:93:01:bd:0b:3f:cf:54:57:1d:63:45:4c:
         57:3d:4d:35:35:7a:c3:fc:50:fe:0b:53:42:1c:79:40:aa:4c:
         39:62:07:8e:71:80:d4:ef:a9:50:a7:64:f8:1c:58:05:84:af:
         61:ce:ab:e2:1c:e8:cc:70:45:96:41:45:44:62:b7:52:a1:ff:
         a0:7c:9a:d0:88:5e:87:bb:be:6c:a4:1e:09:f7:c5:78:3a:7b:
         36:05:e4:b4:ba:29:cc:c7:ea:79:8a:db:fa:58:4d:65:30:f6:
         b7:86:22:35:20:8e:c8:ae:e1:27:74:92:96:83:ff:1f:c0:bd:
         7e:e6:31:47:b3:83:c5:4b:5d:d0:44:fc:12:1a:d4:04:67:40:
         3c:f6:e7:0e:94:09:72:0f:4a:17:b1:ff:36:dd:5e:d8:56:18:
         31:a1:90:5f:f4:e0:03:26:ce:a7:29:2d:d7:f2:18:80:89:08:
         1e:42:c7:e8:44:cd:da:e3:95:45:8b:ad:ca:29:90:ec:da:0d:
         82:7e:95:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:34:44 2025 by rpki-client