Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
File:                     C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft (raw, json)
Hash identifier:          bA5apgNEjWcrlLaUg74O8O1OBB733Y+4beXu63zYEqA=
Subject key identifier:   6E:E7:D3:58:2B:8B:B7:63:6B:C9:43:29:3B:7D:BA:D3:46:78:BD:32
Authority key identifier: 0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
Certificate issuer:       /CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Certificate serial:       01977F0D5E6F8528931AD5972F7B76869431
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
Manifest number:          05C6
Signing time:             Tue 17 Jun 2025 18:01:11 +0000
Manifest this update:     Tue 17 Jun 2025 18:01:11 +0000
Manifest next update:     Wed 18 Jun 2025 18:01:11 +0000
Files and hashes:         1: C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl (hash: TJjBNa3dH5+vo/rmaIrhqUSScVjwUTHC6LNFpYr1gUE=)
                          2: dy6V06G8CC2FK34EGVuxtzegKH4.roa (hash: gPhDzrN8RIm6TShQaGb5YzX92bCG0Thu0kMn08thu4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 13:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:0d:5e:6f:85:28:93:1a:d5:97:2f:7b:76:86:94:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
        Validity
            Not Before: Jun 17 18:01:11 2025 GMT
            Not After : Jun 18 18:01:11 2025 GMT
        Subject: CN=6ee7d3582b8bb7636bc943293b7dbad34678bd32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dc:a9:6d:94:c2:b4:d1:86:69:95:2b:69:c6:
                    07:f9:b2:e0:ae:54:8c:08:25:51:cb:c1:f5:ec:59:
                    69:27:0e:e9:4c:ff:7f:f8:8d:6e:2f:6f:4d:66:f2:
                    1e:e4:e1:03:c9:2d:ed:eb:4e:64:ae:51:6a:58:f9:
                    6f:1e:65:81:fc:32:64:93:e2:5d:ba:9a:86:b5:a7:
                    9d:6d:42:58:4c:b9:5b:75:cf:46:b3:fd:ce:2f:43:
                    df:1e:58:da:2e:c8:59:0b:04:9c:b8:5e:32:bd:cf:
                    4b:38:7d:18:7c:60:30:cf:02:a6:9c:55:bb:92:54:
                    55:20:cc:96:0c:f3:70:1d:57:fc:71:2e:bc:f9:f9:
                    bb:b7:73:14:fa:e1:df:ad:5c:79:18:59:31:a7:00:
                    e1:d2:c1:90:1e:2a:77:79:d7:1e:f5:4c:de:39:ff:
                    42:85:a2:34:eb:a0:5a:27:62:e6:95:1b:70:f3:5f:
                    30:80:49:f8:c5:4f:63:c0:07:e2:08:37:38:e1:5f:
                    03:1f:62:13:46:72:d2:d8:32:35:5a:54:01:6b:e7:
                    8b:80:f9:da:48:80:0f:7a:90:e8:22:e8:3b:66:fb:
                    72:b4:48:b7:94:4b:c2:53:5f:23:ac:ec:7d:cf:7d:
                    f1:bd:5c:b5:a3:04:d9:a6:86:d6:1d:4a:30:8c:df:
                    8a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E7:D3:58:2B:8B:B7:63:6B:C9:43:29:3B:7D:BA:D3:46:78:BD:32
            X509v3 Authority Key Identifier:
                keyid:0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:31:e0:53:f7:78:ac:7a:5c:64:c9:de:63:e1:66:40:78:91:
         49:8b:c8:68:e5:ca:75:7c:73:3a:bb:d6:d1:21:c9:02:f3:cf:
         6d:1a:c8:ba:bb:dd:d6:01:c6:67:8f:59:91:bf:98:b9:ef:79:
         88:6a:eb:79:55:a4:a8:9f:ca:a6:c2:ac:32:e1:c5:f0:62:9e:
         2e:d9:90:66:52:99:59:5f:77:32:19:3a:a7:1c:f7:ba:db:08:
         60:b1:84:92:28:6f:e6:41:4a:12:6a:0d:34:fb:94:f7:25:5e:
         ac:37:59:63:d3:d5:8e:33:5b:00:4a:a5:e4:65:72:ff:88:fc:
         9e:dd:49:31:ea:dd:04:e6:21:ae:96:d1:cf:ab:9c:f7:96:f9:
         ca:37:5f:66:c3:81:2d:df:e5:ab:41:d7:10:20:9f:28:42:b6:
         97:93:c2:91:f6:c4:df:7f:95:d5:af:1f:13:97:2b:c0:f2:32:
         df:3e:b0:de:fa:2d:85:f6:39:ba:51:f6:0d:2c:60:c1:0e:d8:
         bd:d6:3f:ba:da:ea:7d:01:12:01:38:47:d6:09:e1:f8:56:fe:
         15:6f:93:d2:33:c1:08:9a:78:e4:b4:53:c8:ff:ca:b1:12:d9:
         60:58:fc:82:fb:b2:1b:0f:b6:18:c5:e3:20:07:71:b4:11:5d:
         23:15:05:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 22:05:06 2025 by rpki-client