Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
File:                     TOCCAEkieEhNbIj1OGuns5aWy5Y.mft (raw, json)
Hash identifier:          FCa3RQGtAalhjOfKQuAqlNB51XDUUQ9EwiKRt/QKxKA=
Subject key identifier:   69:97:4E:EA:17:57:BC:3F:20:54:62:E4:72:2D:3A:BD:3D:B9:6D:E6
Authority key identifier: 4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96
Certificate issuer:       /CN=4ce08200492278484d6c88f5386ba7b39696cb96
Certificate serial:       01977F0CE4065958DB0D9FC028A992D94F44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
Manifest number:          0C6B
Signing time:             Tue 17 Jun 2025 18:00:40 +0000
Manifest this update:     Tue 17 Jun 2025 18:00:40 +0000
Manifest next update:     Wed 18 Jun 2025 18:00:40 +0000
Files and hashes:         1: TOCCAEkieEhNbIj1OGuns5aWy5Y.crl (hash: LpgQBJl/ntUdTdn/bzc3LVcI1utZBicXd+aAncj94VE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 18:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:0c:e4:06:59:58:db:0d:9f:c0:28:a9:92:d9:4f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ce08200492278484d6c88f5386ba7b39696cb96
        Validity
            Not Before: Jun 17 18:00:40 2025 GMT
            Not After : Jun 18 18:00:40 2025 GMT
        Subject: CN=69974eea1757bc3f205462e4722d3abd3db96de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:19:dd:3b:9b:a8:86:b4:44:8b:22:c3:8b:c9:
                    d1:b6:0e:ff:36:a9:84:39:aa:f1:f2:f4:3e:5d:bb:
                    2d:02:c1:5b:2f:04:e2:7d:e7:6c:f0:76:e0:03:de:
                    2f:8a:09:20:b3:1e:65:15:60:71:2a:b8:ea:6e:ac:
                    1e:ee:ee:b9:99:14:ee:55:95:36:9e:a5:91:2e:7a:
                    ac:7a:b0:ad:69:dc:d7:35:fe:4e:3a:57:43:5e:74:
                    7a:20:44:70:08:f9:d2:f9:37:31:68:f3:f7:5e:0e:
                    2b:2f:8a:36:50:cd:62:b4:b1:ab:2e:08:39:cb:d7:
                    e2:36:f5:31:d2:20:8f:f4:1a:f2:c1:dd:b2:97:b2:
                    77:6c:25:4e:e8:b8:e6:ec:e3:b5:0e:dd:82:37:82:
                    fa:66:bd:9d:7f:3a:ff:4f:57:fd:c5:34:94:fe:ab:
                    cf:fa:dc:45:19:70:61:e4:09:73:9d:58:21:4e:15:
                    03:19:24:96:37:5d:f1:d5:bd:25:09:9b:d7:46:29:
                    e0:d3:66:6b:ec:68:c1:e2:af:1c:ef:c6:c9:bf:8f:
                    c1:cc:de:cd:64:62:b1:7d:73:08:99:20:93:56:c0:
                    08:95:fd:49:48:8e:f2:aa:45:8b:bb:23:6d:01:e7:
                    5a:12:0d:6e:e3:96:02:48:25:27:36:b5:89:08:30:
                    4f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:97:4E:EA:17:57:BC:3F:20:54:62:E4:72:2D:3A:BD:3D:B9:6D:E6
            X509v3 Authority Key Identifier:
                keyid:4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:a5:16:0b:4b:01:5f:cb:32:4b:60:33:ad:5b:3e:ff:92:df:
         5a:1e:37:35:a9:74:d3:32:17:5a:b8:c4:08:c1:1f:3d:69:48:
         35:44:f6:88:a2:46:96:f3:fc:9a:0d:e2:a6:42:c2:28:1e:1e:
         9c:80:28:63:be:81:fc:e7:65:2c:fe:13:7e:de:33:0c:0c:72:
         52:65:b5:bd:26:3d:51:ee:dc:f9:e0:f1:c7:eb:7b:dd:4b:fd:
         17:fb:f8:ae:60:b2:e3:1e:da:74:d8:c1:08:7a:73:bd:b4:cd:
         f2:0c:20:f7:98:70:6b:2e:7f:c3:01:5d:6f:ad:32:f8:e9:83:
         58:09:a6:e7:d9:2f:16:b1:cf:1d:57:be:79:53:8c:cf:4c:44:
         fd:13:d9:d4:02:a7:d9:02:dd:d2:ff:de:4b:6a:9f:65:18:39:
         ed:9a:2f:34:ca:7c:e7:6e:57:98:9b:c9:df:d5:63:1d:1e:f3:
         5f:76:13:86:bd:ae:07:6e:6e:bd:6a:9a:5a:14:84:76:e6:c4:
         16:4c:f7:69:2b:81:0b:0a:41:c7:c6:58:93:db:5f:10:1c:a5:
         62:e1:0e:b3:d0:bb:e1:a7:81:60:9d:5e:0f:d2:7f:92:e1:ac:
         7d:cf:7a:4d:d5:9d:18:2b:0c:eb:b7:89:6d:21:10:37:6e:a4:
         48:15:9c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:46:34 2025 by rpki-client