Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft
File:                     czFVtC-vxzVab8gJx9nM9bL4zcI.mft (raw, json)
Hash identifier:          kCO5klcaTMBnrBKisQGowUovjI1f6kS+JVUr/Ye3S+A=
Subject key identifier:   92:E9:E7:A1:E5:D0:A8:B3:C2:C9:A3:B3:9E:D0:14:71:09:30:0C:47
Authority key identifier: 73:31:55:B4:2F:AF:C7:35:5A:6F:C8:09:C7:D9:CC:F5:B2:F8:CD:C2
Certificate issuer:       /CN=733155b42fafc7355a6fc809c7d9ccf5b2f8cdc2
Certificate serial:       01976BBD8124B01FD45ED0FBA3461FEE4D8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/czFVtC-vxzVab8gJx9nM9bL4zcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft
Manifest number:          04B6
Signing time:             Sat 14 Jun 2025 00:01:10 +0000
Manifest this update:     Sat 14 Jun 2025 00:01:10 +0000
Manifest next update:     Sun 15 Jun 2025 00:01:10 +0000
Files and hashes:         1: czFVtC-vxzVab8gJx9nM9bL4zcI.crl (hash: 1I/z5UdLMWpDnbM7CP1CeE8p4ka3jjcexXSLWenn3bQ=)
                          2: l0CnYB9TqdwdMbmMIDN6gmU04y4.roa (hash: uHgPuHlAwsjfMv6nb8pkc75mAM6+gk2FAGFMxkvLSjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/czFVtC-vxzVab8gJx9nM9bL4zcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:81:24:b0:1f:d4:5e:d0:fb:a3:46:1f:ee:4d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733155b42fafc7355a6fc809c7d9ccf5b2f8cdc2
        Validity
            Not Before: Jun 14 00:01:10 2025 GMT
            Not After : Jun 15 00:01:10 2025 GMT
        Subject: CN=92e9e7a1e5d0a8b3c2c9a3b39ed0147109300c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ea:e3:4d:d2:f7:1a:56:21:bd:4f:4a:13:e2:
                    06:15:9e:ab:19:a4:5d:37:4d:8b:b1:f9:03:ed:6f:
                    2c:5e:2c:38:bb:ed:77:0d:49:e9:b5:19:1f:d8:5e:
                    0b:70:73:b4:0f:43:f6:b2:c7:e3:f5:48:94:80:91:
                    6f:ed:b5:e9:7f:a4:27:b4:2e:dd:09:45:5e:92:fe:
                    65:e8:a9:38:97:9c:9b:86:32:07:a0:56:91:d6:18:
                    a3:9f:8a:c9:a4:f3:db:97:14:ac:6b:34:4f:8e:cd:
                    26:cf:5a:47:8b:eb:96:2a:5f:f6:fa:1b:ed:4d:fa:
                    43:8c:96:95:a0:6f:40:14:77:5e:5f:41:74:ee:6a:
                    bf:9b:d0:b4:f0:ad:96:05:d0:ee:15:c5:31:1f:99:
                    cf:fe:8a:4b:08:6d:45:0a:b8:17:5c:76:2a:62:81:
                    36:5c:3c:a2:ff:87:51:4f:43:65:86:df:b0:41:76:
                    4f:a9:fa:77:d6:7e:dc:aa:8b:b6:b1:98:4f:3e:5f:
                    cf:e4:37:cd:ca:19:2d:ff:c6:4a:f2:e1:5b:8c:4b:
                    7a:6a:6c:eb:23:af:22:80:fa:53:24:e1:17:0f:8b:
                    93:d6:b5:a2:81:f1:27:36:05:30:6a:29:b1:a0:a2:
                    b1:25:82:b8:81:bb:94:53:64:a5:6e:56:35:1e:1e:
                    eb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E9:E7:A1:E5:D0:A8:B3:C2:C9:A3:B3:9E:D0:14:71:09:30:0C:47
            X509v3 Authority Key Identifier:
                keyid:73:31:55:B4:2F:AF:C7:35:5A:6F:C8:09:C7:D9:CC:F5:B2:F8:CD:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czFVtC-vxzVab8gJx9nM9bL4zcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c7:e0:6c:8b:94:a4:db:96:88:bb:07:ca:e3:3f:e1:e3:76:
         6a:47:9e:2a:8a:d9:24:85:81:b3:5b:f9:b1:f1:f8:2a:0b:18:
         03:52:76:00:dd:02:a4:f6:5c:ec:fd:43:92:03:77:7f:09:cf:
         5e:36:74:96:43:c9:c1:f5:91:b8:5f:11:cf:d6:9a:83:57:fa:
         30:19:9c:8e:3c:83:1b:52:65:1c:0c:b3:b4:9c:f2:e0:38:de:
         01:14:d8:6e:0f:68:fd:8b:05:43:c5:94:8d:ae:0c:e8:14:11:
         41:df:c1:3b:37:2c:ee:f1:e4:f1:eb:98:22:6c:4e:f5:e9:98:
         a0:16:ac:20:e2:2d:29:71:c9:6e:ef:9c:75:01:54:e5:ad:15:
         ca:54:4c:37:22:cf:d3:ab:b6:e5:2e:0a:d6:79:4b:1d:d8:24:
         8e:d1:bd:78:4c:4e:dd:19:70:e5:86:88:c4:0c:58:51:22:a6:
         4c:bb:ad:dd:2b:fa:14:88:ce:3c:e8:93:c0:b0:7f:75:ec:bd:
         62:15:a3:a7:c6:e3:c9:8a:ec:92:dd:67:7f:d7:fe:8d:ba:98:
         c8:68:c5:5c:09:f7:23:da:8b:65:b1:3e:79:58:34:79:c5:b6:
         b9:2a:d2:db:96:f9:72:4e:48:46:47:c3:cc:12:b7:0e:ea:3b:
         70:0a:52:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:05:48 2025 by rpki-client