Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
File:                     kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft (raw, json)
Hash identifier:          5tn2muDVnl90oFCYmKXQIWmPbYAa2ijcGD1IRJbOAyc=
Subject key identifier:   ED:43:F7:8F:E9:A9:01:98:BF:98:2D:5D:08:81:27:54:FE:67:75:05
Authority key identifier: 90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
Certificate issuer:       /CN=909b5788960bd179056848ec956fd611d4cf8094
Certificate serial:       01977A5481994E01826CF97CF44FCBEA3779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
Manifest number:          13DB
Signing time:             Mon 16 Jun 2025 20:00:47 +0000
Manifest this update:     Mon 16 Jun 2025 20:00:47 +0000
Manifest next update:     Tue 17 Jun 2025 20:00:47 +0000
Files and hashes:         1: kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl (hash: WKV0wWOYQbdPB32fq8snBrJw3jLufYgUYe170qoFr6I=)
                          2: pOvhTWtU4kelyPZ1fpMoPO101II.roa (hash: WJ4/oAtZUHsxbOhd3cJHFGOETOXNUNiMfn725elzUrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 20:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:54:81:99:4e:01:82:6c:f9:7c:f4:4f:cb:ea:37:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909b5788960bd179056848ec956fd611d4cf8094
        Validity
            Not Before: Jun 16 20:00:47 2025 GMT
            Not After : Jun 17 20:00:47 2025 GMT
        Subject: CN=ed43f78fe9a90198bf982d5d08812754fe677505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f5:df:78:c2:1b:a0:10:d2:af:5a:cb:ab:5e:
                    91:cd:44:8b:6d:d0:a7:cb:8c:d6:80:50:a6:cc:19:
                    64:3d:6d:36:41:4d:87:2e:5a:b6:80:e7:e6:2a:85:
                    c0:c0:f7:45:bb:cc:46:20:d7:f6:34:e6:96:6c:f6:
                    36:13:59:e1:bd:b1:e6:20:a5:78:a9:8c:e2:7d:a0:
                    8e:f0:18:a7:4c:8e:1d:ed:50:9b:51:a3:ae:ca:87:
                    38:50:42:2b:84:81:de:b1:a6:55:cb:15:de:38:98:
                    b2:ca:3b:24:d8:6e:1e:8a:df:d3:9d:f3:07:4c:20:
                    5e:be:20:7c:aa:55:fd:35:07:73:40:b7:13:bc:f7:
                    15:da:ff:5d:7e:7c:02:9f:0c:b1:d9:da:27:64:90:
                    0f:c6:84:5a:ba:c8:31:83:07:f1:0d:1f:9c:8a:c5:
                    76:ce:45:28:d8:3f:f4:36:a1:1f:49:17:de:cb:b4:
                    5d:3a:40:26:a6:f0:46:c0:56:1c:01:20:bd:f7:da:
                    22:03:7a:a5:e6:a2:6a:7a:65:92:d3:2a:1c:71:38:
                    d4:22:f0:e2:9e:61:f2:03:25:cd:e6:2c:b0:25:82:
                    85:ff:c3:bd:a8:cf:93:ed:c5:4c:2c:9c:94:f6:4f:
                    49:36:54:59:bb:12:b5:50:b6:1a:02:b0:33:6f:0b:
                    70:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:43:F7:8F:E9:A9:01:98:BF:98:2D:5D:08:81:27:54:FE:67:75:05
            X509v3 Authority Key Identifier:
                keyid:90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:da:24:26:2e:69:e5:e8:e5:25:73:6f:40:4b:b7:0e:64:3f:
         61:2b:14:3c:54:36:a4:d3:3e:a3:64:c4:ce:bb:3e:20:7f:bc:
         4e:ab:bd:95:b9:77:53:74:75:23:f1:47:be:06:60:f1:32:87:
         12:e5:93:0a:3a:7a:1c:a6:77:2b:4d:b5:12:29:e2:5c:77:af:
         7e:bb:17:28:0e:bd:78:2e:3f:9b:9e:7b:f7:15:03:e0:5c:ed:
         c5:7e:8a:9c:fa:43:fd:31:91:a7:7f:bf:b9:ab:b6:c9:68:4f:
         3e:a7:e1:e8:35:09:49:ba:bc:45:eb:f9:01:63:2e:55:8b:bc:
         7b:fa:5c:16:79:98:98:98:1c:28:f5:04:7b:16:32:86:5d:54:
         c6:6e:0c:96:21:3d:73:ca:66:4d:e2:f8:98:46:b4:7b:29:2b:
         f5:f3:42:9b:53:ad:3a:c0:55:19:e3:16:c4:73:0a:ce:3f:cb:
         9e:e8:0d:47:0f:46:1b:ac:65:67:86:83:a6:0c:4e:c9:9d:23:
         63:dc:f5:5d:db:78:a0:cd:cb:cc:fb:02:76:85:6e:fb:d5:8a:
         46:ed:2b:4e:f7:09:c0:16:23:6c:1b:e0:99:bc:50:67:5d:37:
         72:31:31:08:0a:6f:f6:f1:bf:1d:a5:08:2d:b0:9b:6a:5d:ea:
         d9:df:e4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:19:21 2025 by rpki-client