Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
File:                     kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft (raw, json)
Hash identifier:          5lwDE+Aw4kDaTxy9mcr7oTNOttm/BvsMi2d9pmdCFNg=
Subject key identifier:   64:66:82:5F:07:E1:75:54:C7:C2:95:55:42:72:49:1E:68:24:C2:1C
Authority key identifier: 91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
Certificate issuer:       /CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Certificate serial:       01976A73544AFE55174E237D30EDCCEC2D6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
Manifest number:          1110
Signing time:             Fri 13 Jun 2025 18:00:32 +0000
Manifest this update:     Fri 13 Jun 2025 18:00:32 +0000
Manifest next update:     Sat 14 Jun 2025 18:00:32 +0000
Files and hashes:         1: 7onO-XhdJCc_IRQIQVCJn8u-1wE.roa (hash: sTU2wUb7RHNn6n+c6UyiV4vOHD7amsQkLEZ6q5B98dM=)
                          2: kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl (hash: O8IZniWDokmwwBY4ACfQ36/5h0oKiT+ysEPUjCudBWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:73:54:4a:fe:55:17:4e:23:7d:30:ed:cc:ec:2d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
        Validity
            Not Before: Jun 13 18:00:32 2025 GMT
            Not After : Jun 14 18:00:32 2025 GMT
        Subject: CN=6466825f07e17554c7c295554272491e6824c21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f6:a7:47:52:20:0a:ac:17:39:1b:f7:ce:82:
                    ea:ff:c7:d1:70:dd:b2:a6:70:f4:a4:a3:1a:0b:c7:
                    50:88:e2:60:77:0f:13:0f:a2:b8:f7:15:d1:e1:02:
                    4a:8b:cc:38:12:51:84:5d:db:5c:45:89:b6:cb:ab:
                    07:3f:b5:10:f3:53:c0:a8:da:1c:41:3a:bd:1d:d0:
                    da:c8:32:3b:ac:8c:ea:e3:1e:1c:ea:73:8b:de:86:
                    3c:2a:47:23:6b:c6:e6:54:f3:44:c4:8d:9a:2c:a3:
                    3b:2a:e2:e7:93:6a:f4:22:7e:cb:27:87:db:5d:2b:
                    6c:86:aa:bc:d8:33:95:4d:75:d2:c0:97:c7:98:c1:
                    ac:ff:02:e5:6c:13:a3:84:ea:b8:81:d6:17:ae:65:
                    5b:e2:25:1a:99:96:0b:6c:64:d7:6f:26:18:ef:e7:
                    f2:05:c7:9a:42:14:c7:e7:ab:3c:21:a9:0d:56:07:
                    2a:9c:cc:20:f2:48:36:81:9e:48:25:50:1e:b0:19:
                    03:6b:be:e5:5a:f4:52:18:d0:37:75:1f:7b:64:2d:
                    59:bf:30:74:99:69:7d:e0:ff:5a:6e:88:cd:4e:09:
                    48:02:1d:d5:2c:80:d5:3d:17:f8:1f:a3:dc:4d:9d:
                    c0:8e:58:4b:05:1d:af:19:c2:99:e0:5e:ae:21:65:
                    58:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:66:82:5F:07:E1:75:54:C7:C2:95:55:42:72:49:1E:68:24:C2:1C
            X509v3 Authority Key Identifier:
                keyid:91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:3d:f5:98:39:0b:9b:1e:de:cf:c9:15:a6:5d:ba:26:e2:81:
         8b:3a:c7:af:dc:22:ba:77:cd:23:de:c2:1f:95:54:5a:fe:6c:
         6b:b4:1e:2f:e9:48:f1:35:75:c3:fb:0d:33:7b:02:22:bf:85:
         cc:cb:15:f4:a8:02:ea:45:a2:41:eb:02:18:59:2c:2a:f8:7e:
         5e:1c:2b:61:19:58:bf:e6:f7:8c:b5:13:b6:7d:e2:f1:b3:ce:
         2f:d6:4f:1f:36:47:52:5d:5d:fd:8a:02:55:22:35:0e:6b:c8:
         4e:51:76:78:0f:e9:62:4d:df:b6:95:9e:74:0e:0b:89:29:38:
         ce:a3:b4:8f:25:40:fb:26:04:89:18:c5:48:68:19:8e:dc:47:
         d8:3b:94:a0:3f:d0:11:82:74:c8:5b:f0:25:4e:19:e2:17:ce:
         e2:a8:b6:d1:6c:9d:7b:f4:ca:73:ff:1e:c4:3c:c0:b0:b4:bf:
         c6:b0:2f:6d:5f:4a:f8:7a:86:54:2e:ad:75:ca:22:42:15:78:
         36:9b:9a:e5:db:c9:96:ca:f3:fc:72:f7:a6:89:49:e1:3c:6e:
         5e:ee:4a:e7:82:7f:e3:8d:9f:7a:eb:69:fe:b8:ca:be:a0:63:
         f6:d4:e3:6d:12:88:83:7e:14:aa:50:7f:46:ab:18:80:85:16:
         a6:02:56:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:39:52 2025 by rpki-client