Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
File:                     mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft (raw, json)
Hash identifier:          OvQeBrUwOVHBdpjpzJ5DA1fLN2Jy/BRzqO69oCdoxqg=
Subject key identifier:   4C:8B:D7:18:F0:05:E6:A8:36:D3:41:F8:CC:57:B8:65:A6:82:C2:DF
Authority key identifier: 99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
Certificate issuer:       /CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Certificate serial:       0197789D1E6FCFF5E326CFF0C66126A32A88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
Manifest number:          02C4
Signing time:             Mon 16 Jun 2025 12:00:52 +0000
Manifest this update:     Mon 16 Jun 2025 12:00:52 +0000
Manifest next update:     Tue 17 Jun 2025 12:00:52 +0000
Files and hashes:         1: mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl (hash: ykes6Mo5d4ZpoYaA3IoL08rHzUUbYrsukxsFFNvqKmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:9d:1e:6f:cf:f5:e3:26:cf:f0:c6:61:26:a3:2a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
        Validity
            Not Before: Jun 16 12:00:52 2025 GMT
            Not After : Jun 17 12:00:52 2025 GMT
        Subject: CN=4c8bd718f005e6a836d341f8cc57b865a682c2df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:56:35:dc:5c:b7:e0:c4:f6:57:b3:ef:7f:1b:
                    a9:4a:7e:1e:0f:3e:a2:8a:38:07:33:39:0d:3f:d3:
                    43:91:60:6c:31:52:bd:1e:cb:10:e2:02:c1:a4:95:
                    47:fa:a7:09:06:51:54:8f:d1:0a:1f:34:b0:cf:11:
                    68:99:ac:5d:e6:a3:c5:a8:6a:34:8c:30:dc:4a:24:
                    b2:be:bb:ee:d3:5c:56:bf:f1:c7:da:d2:25:0c:0a:
                    50:d4:71:dd:d3:18:6c:31:2a:95:bb:d8:2f:96:00:
                    12:3d:45:0d:d7:9f:ef:3c:65:b0:32:1c:7c:8f:a9:
                    8b:9a:9b:da:ba:c5:23:67:39:7a:a4:9d:ff:1c:97:
                    de:f8:73:87:0e:91:6b:07:6d:ab:69:a7:d9:da:46:
                    45:30:79:36:40:57:f1:8b:b7:73:79:c1:b1:b1:89:
                    fd:d5:9c:b2:df:fb:02:23:c3:0c:48:98:59:96:7d:
                    88:17:ae:7f:a3:59:50:4c:aa:b1:df:31:36:50:d0:
                    6d:77:f5:6d:a2:94:07:ba:ca:f5:91:fb:e1:af:f4:
                    43:c7:5a:f1:a4:94:92:fa:39:8a:77:70:50:da:38:
                    e3:2f:15:dc:9f:18:93:c7:f5:36:2e:0d:aa:f8:22:
                    81:6e:f7:c4:0f:11:0a:9e:e9:2b:04:db:4b:8a:43:
                    29:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8B:D7:18:F0:05:E6:A8:36:D3:41:F8:CC:57:B8:65:A6:82:C2:DF
            X509v3 Authority Key Identifier:
                keyid:99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ac:8f:56:7b:ff:a0:57:9d:70:30:20:48:61:c2:6b:4c:1b:
         8e:6a:85:b3:70:45:79:52:bf:c4:e5:77:a8:8c:52:95:52:63:
         4c:74:79:f1:85:de:c7:4b:5b:de:f0:be:4a:ad:8f:17:0e:b0:
         8f:52:af:3d:a1:78:85:3b:70:c0:22:32:bb:78:2e:5e:31:a3:
         02:4e:07:b5:73:7b:7c:e0:c9:8c:53:91:41:47:6d:77:2d:5d:
         3a:8f:8e:6c:e6:04:7c:88:3a:eb:2a:07:fc:e6:f4:29:1a:e0:
         9e:a0:cb:e6:46:8f:97:fe:c8:b0:5d:7e:4e:a6:2e:a5:2e:da:
         69:00:54:fb:46:28:af:d2:f5:eb:00:4e:9f:d7:b3:fb:00:f8:
         27:3d:34:78:e4:51:51:3c:77:63:84:88:78:c4:6d:35:ee:d1:
         98:9e:34:a7:27:7a:47:53:2e:dd:0c:f2:72:3b:8f:9c:2b:30:
         47:f1:dc:1d:69:84:a0:8a:dd:68:62:48:bb:38:21:dc:ec:16:
         89:31:f8:4e:b8:46:c1:be:d4:0e:c3:73:8e:6b:e4:25:1a:71:
         be:fe:36:b9:ad:a6:f8:d2:21:25:eb:e0:e4:1e:ee:c8:e5:57:
         87:e7:fb:0c:85:cb:81:ca:4e:70:6c:5b:c0:c8:39:07:b6:d4:
         40:43:fa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:00:13 2025 by rpki-client