Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
File:                     mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft (raw, json)
Hash identifier:          YeILiipWBANBilH4ZpvqgS3cFO3RqknwwZShpCQV+OE=
Subject key identifier:   6A:7E:DD:DF:D8:17:C9:74:09:76:9E:BA:DB:19:E7:CD:30:12:90:AD
Authority key identifier: 98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
Certificate issuer:       /CN=985d472fa538204f1c23e8b6a758073b80cfc199
Certificate serial:       01977188A037D506AB3F3CEF63253A7E8F25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
Manifest number:          1163
Signing time:             Sun 15 Jun 2025 03:01:08 +0000
Manifest this update:     Sun 15 Jun 2025 03:01:08 +0000
Manifest next update:     Mon 16 Jun 2025 03:01:08 +0000
Files and hashes:         1: AzENH95bt8URAYkHoVsIpFCsCKo.roa (hash: AH2b85dRr2FxufgtlMVISLL90V2KJDLxN1PjWzu3Llc=)
                          2: mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl (hash: bLblytDSqkDaF5uJQVhKQ2UsZmOYlMiGF3FcQGqo4uY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 03:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:88:a0:37:d5:06:ab:3f:3c:ef:63:25:3a:7e:8f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985d472fa538204f1c23e8b6a758073b80cfc199
        Validity
            Not Before: Jun 15 03:01:08 2025 GMT
            Not After : Jun 16 03:01:08 2025 GMT
        Subject: CN=6a7edddfd817c97409769ebadb19e7cd301290ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:92:7f:a6:a8:b8:3d:17:78:38:ce:eb:0a:a3:
                    5e:ba:2c:2b:ff:1d:23:30:24:6e:a8:35:39:02:e8:
                    0f:92:70:62:a2:d5:54:af:90:87:b2:a5:15:1d:fc:
                    85:57:76:8c:e8:72:de:0b:12:4c:cf:d3:72:e4:2d:
                    16:3c:59:5c:fc:9b:4a:50:c1:b5:0b:71:51:31:1d:
                    ed:85:ae:d3:a4:25:df:57:bc:96:9c:45:40:a3:e0:
                    be:58:b3:d9:68:be:e5:69:07:f7:64:cb:f1:d0:9a:
                    98:38:0e:18:8d:dc:d9:e1:e7:23:fb:a4:5b:61:af:
                    3b:3b:d8:34:d4:ac:34:ad:2c:d1:9f:9b:ea:c1:60:
                    b0:10:19:79:93:db:af:af:65:a4:ab:9f:1c:81:d2:
                    bd:0d:73:68:40:41:42:86:c1:a1:b6:fc:a2:d3:c9:
                    ac:eb:30:37:a1:ad:ea:23:11:5a:e3:41:0c:02:c3:
                    c5:a7:e2:8c:c8:f5:2e:12:c2:5b:60:06:1c:8d:5b:
                    2c:e2:da:95:62:ee:2c:7b:1b:50:95:7b:7d:36:56:
                    d4:62:96:e8:f2:e9:cb:04:cc:5c:b1:58:9e:c7:8a:
                    83:00:ff:cb:7d:72:c1:ed:24:3c:6d:ec:d3:de:2a:
                    27:ec:11:2d:d2:0e:6c:34:3a:56:d1:3b:d9:b3:3d:
                    c0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7E:DD:DF:D8:17:C9:74:09:76:9E:BA:DB:19:E7:CD:30:12:90:AD
            X509v3 Authority Key Identifier:
                keyid:98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:9d:31:a4:e9:77:e3:14:2d:5c:04:b7:ca:f3:24:20:17:47:
         6a:bc:7e:34:e8:7a:2d:c7:6d:13:cd:cb:8e:2b:f9:ae:6f:7b:
         bb:81:77:c3:43:96:4d:a4:ce:85:7a:d1:f4:6c:42:f5:52:a5:
         64:32:c6:60:be:8a:ae:2e:7d:50:94:d0:8a:65:86:2b:c1:8e:
         e7:ac:f6:38:2b:35:2d:1f:f7:bd:fe:3b:ad:0e:b8:74:76:f2:
         8b:fb:e3:96:90:2b:f7:d0:bd:1a:58:81:0e:4a:4d:11:ed:8e:
         6f:e5:1d:cb:f5:30:37:34:30:66:77:db:87:b7:fc:66:0b:bc:
         04:be:92:b0:fa:62:2d:8a:39:94:a6:d8:67:06:64:c1:22:e8:
         ef:0c:fa:9f:bf:4f:83:28:8a:d2:5d:22:c4:fc:b1:ac:d8:74:
         0b:9e:e4:be:22:f6:51:7d:a1:e5:bb:28:1c:7d:f6:c6:ba:f3:
         ea:25:cf:f9:4c:13:c9:81:c3:90:f3:b2:04:3b:e4:12:27:05:
         22:fa:6f:c7:e8:12:8e:a6:93:80:07:ee:e7:8e:93:7e:e5:13:
         91:02:c7:eb:a5:52:65:b8:85:54:5e:8f:30:b6:29:da:35:c9:
         dd:0c:a8:68:b7:fa:93:c8:ee:f2:3d:aa:6c:c2:1a:7d:76:8a:
         3f:85:35:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:46:42 2025 by rpki-client