Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
File:                     36JPgpi-GMimnxgSjwZOcAPh090.mft (raw, json)
Hash identifier:          r862eips4gyK7z3+817R8Gj4O6ZBkhfXKzPFlY+7C6g=
Subject key identifier:   1F:75:DA:A1:B4:02:3C:DB:80:13:82:43:19:63:3B:B8:8A:7E:D2:00
Authority key identifier: DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
Certificate issuer:       /CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
Certificate serial:       019768BBD1992B1E742547023EDA10475FB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
Manifest number:          0C82
Signing time:             Fri 13 Jun 2025 10:00:28 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:28 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:28 +0000
Files and hashes:         1: 36JPgpi-GMimnxgSjwZOcAPh090.crl (hash: kGnWmXweQIkX7o/iHm1AzgGNwhMBODxAWNqp9gq3s1M=)
                          2: Ng0Z_Y8YOqJU-aJwUaovvEl0tDk.roa (hash: hZn0EBlBpjbO2T+dcLbeLS+VLWtfhrO+ME9lcig54Mc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bb:d1:99:2b:1e:74:25:47:02:3e:da:10:47:5f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
        Validity
            Not Before: Jun 13 10:00:28 2025 GMT
            Not After : Jun 14 10:00:28 2025 GMT
        Subject: CN=1f75daa1b4023cdb8013824319633bb88a7ed200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a3:c5:c4:21:28:3d:b4:a5:70:75:2f:28:f8:
                    82:21:b3:11:ae:67:49:0d:26:bf:aa:f3:a2:45:95:
                    b7:21:54:36:00:5f:55:60:d4:d8:66:ca:23:63:57:
                    d4:8b:13:09:54:c7:2e:88:d8:6c:96:35:e6:39:a8:
                    f9:b0:11:b9:5f:28:82:5f:18:ee:c3:f7:f2:38:2c:
                    a2:61:43:8a:ab:10:8e:88:e5:31:d7:d9:0c:84:54:
                    19:70:10:9b:5d:63:3f:bc:14:19:19:f5:7d:90:fc:
                    bc:f2:50:6e:cb:7d:67:24:10:3a:1e:d5:a9:d2:5d:
                    d5:7e:cd:e7:80:9e:34:df:f1:e6:a3:ca:13:95:0d:
                    c7:77:c4:54:16:46:f8:8d:d1:fb:00:15:15:0c:d8:
                    31:27:0e:43:ac:30:f4:37:60:b9:07:b6:43:e7:38:
                    2f:c7:4e:4f:d7:55:b8:78:7c:a1:5d:c7:64:4c:e6:
                    b5:70:f2:52:ed:ee:4e:67:37:df:98:96:5c:6c:68:
                    03:b1:cf:4b:8d:42:cc:6f:b1:b2:b6:2f:ef:33:a6:
                    54:04:17:d8:46:25:cc:4e:42:38:9e:ab:31:b5:a2:
                    5a:a7:e7:3d:ab:35:0b:67:08:7d:4d:c0:6b:86:a7:
                    6f:1a:cb:77:ac:d1:1c:bb:e5:5b:c7:20:10:33:5a:
                    03:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:75:DA:A1:B4:02:3C:DB:80:13:82:43:19:63:3B:B8:8A:7E:D2:00
            X509v3 Authority Key Identifier:
                keyid:DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:44:12:ce:f9:8e:bb:85:fd:fa:b5:5d:b4:a6:c3:84:23:0a:
         c4:b1:11:93:87:0c:ea:19:03:f6:5a:46:e6:d7:68:6e:e8:34:
         4d:cb:08:4b:fc:15:de:73:10:27:bf:45:26:b3:fc:dc:85:1c:
         b4:6e:99:58:84:54:a1:c9:49:1a:a2:71:bc:59:8d:d8:be:e9:
         11:4a:20:28:70:e3:e9:ad:84:c0:96:95:5c:84:c6:fd:a5:d0:
         2c:3c:6a:39:d6:dd:56:aa:93:5d:d7:64:39:7a:22:ad:6d:22:
         80:2b:0c:63:4e:2e:92:b4:12:ee:c1:fb:1c:83:88:c4:0c:0e:
         d9:27:a5:80:0c:bd:96:54:83:a3:96:55:fd:5b:82:48:59:7c:
         31:06:57:68:9f:12:7a:3f:f1:a1:2e:5c:25:8f:1f:4b:30:5e:
         69:7b:47:ed:09:e7:fc:2b:1e:b2:d0:c5:b2:70:61:65:f3:8c:
         e9:ff:b6:a0:00:f1:d2:e3:b0:9b:c9:04:8c:d5:7d:c2:54:5c:
         90:5a:4b:8f:46:eb:21:19:41:93:57:57:50:39:44:4d:45:05:
         34:3c:de:00:1e:0b:82:fd:77:1f:93:11:c6:2c:5f:b6:86:79:
         cd:cf:1f:4f:37:02:ae:62:1f:8c:ba:35:e0:12:fa:d1:52:e5:
         57:1d:22:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:46 2025 by rpki-client