Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft
File:                     C6vWgsGo_FA3rb9oFDrnf9APOKs.mft (raw, json)
Hash identifier:          rnvmYpkXFyOnVQ+3vPhFS9yJnd2sxVYU32GXw+PyUDg=
Subject key identifier:   6E:27:86:5B:08:F2:E3:52:26:EC:C8:90:49:5A:29:E2:64:3E:57:51
Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
Certificate issuer:       /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Certificate serial:       01976F631F09851B9FCC5876D7C9193EF4F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft
Manifest number:          0678
Signing time:             Sat 14 Jun 2025 17:00:56 +0000
Manifest this update:     Sat 14 Jun 2025 17:00:56 +0000
Manifest next update:     Sun 15 Jun 2025 17:00:56 +0000
Files and hashes:         1: 1-Smkp6h6clLOytvsZTW7IYXWdA0.roa (hash: ea3w2mh66EAHkh2gpMZxmUqrFjNif7rFJ3Ux5dT6P3Y=)
                          2: C6vWgsGo_FA3rb9oFDrnf9APOKs.crl (hash: c7y4tgshCv+eTxkDVqt5b9IBZnMwHnCQ14aFfmmS1Bo=)
                          3: bEDl4F0oErintdjUmPi3KwD4d5k.roa (hash: Sj0vj1Cb+cSjoHj9Gcm8jJEMPloRebSIxFZ4ot1qytE=)
                          4: fKSs4hH9Txh8Zlj65oG1tsFnMhc.roa (hash: spRUtws11ycMpOdqPxogpwVFrj1ssSP4E3wT9grjXjM=)
                          5: kl_1BZ9zz0p-OrHj-rvFCPqjzc8.roa (hash: Q8fDVCk74lV9QZSReJUdZzpV1u+rNruWQfm4y3jiGc8=)
                          6: pAEDN-h1-DUGqiGuMkWdVhlgowg.roa (hash: 3zGPa3AJjPYig0kDedAY3IsrPUE9H1fVHWA5Xf9h6RE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:63:1f:09:85:1b:9f:cc:58:76:d7:c9:19:3e:f4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
        Validity
            Not Before: Jun 14 17:00:56 2025 GMT
            Not After : Jun 15 17:00:56 2025 GMT
        Subject: CN=6e27865b08f2e35226ecc890495a29e2643e5751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ef:a7:88:89:a1:c8:d0:3a:eb:20:ff:ea:aa:
                    e0:41:0f:c1:66:2d:e3:a8:48:d8:fe:93:5e:13:e0:
                    8a:68:f7:e8:41:1f:7f:41:a0:12:74:e5:a2:55:f9:
                    09:e4:be:7c:08:c2:a9:de:37:17:49:58:58:23:2f:
                    29:91:6b:41:d2:47:04:02:9c:db:09:07:cd:13:bd:
                    a8:38:ca:b1:05:d7:43:54:10:a2:bb:0e:0e:85:d7:
                    82:21:4f:1a:b5:ba:0f:fb:3c:27:b1:b1:47:33:2d:
                    f5:0e:20:94:57:46:e5:5b:77:8c:54:d1:2e:e8:b4:
                    73:e6:6e:f5:69:1b:0e:39:cd:76:13:bd:a1:48:b1:
                    6b:a7:56:43:0e:81:b9:9b:40:79:12:9a:82:d3:c6:
                    41:a8:62:aa:8b:9e:12:c0:d0:09:bd:1d:1d:d9:45:
                    c8:ec:87:a4:ab:f0:f6:46:ea:6a:b5:69:fc:43:e9:
                    f5:87:2b:23:7a:a0:9e:96:69:86:e1:1e:fe:11:a8:
                    39:fa:ba:25:08:4f:bd:25:e7:38:32:c3:77:99:24:
                    41:3b:11:a3:29:fb:97:ce:1d:66:2b:dc:86:b8:a1:
                    67:98:2b:6c:9f:20:5a:66:d3:23:6c:f3:dd:de:f7:
                    76:0c:27:82:77:1b:f1:d4:16:28:9f:c4:3a:02:c3:
                    df:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:27:86:5B:08:F2:E3:52:26:EC:C8:90:49:5A:29:E2:64:3E:57:51
            X509v3 Authority Key Identifier:
                keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:d8:c4:b5:68:b6:84:6c:02:a1:97:5b:76:7e:bd:58:b2:16:
         4b:d1:e3:0a:24:3c:af:f0:37:3f:95:4a:69:9f:78:1c:e8:5b:
         92:7d:ab:20:a7:b9:a3:a9:4e:ea:a5:ce:49:d6:87:52:93:73:
         bb:e5:2d:d7:fd:c0:ac:77:a3:29:a7:a8:81:f6:87:03:cb:aa:
         de:e1:1c:c8:77:de:06:7c:a0:95:8a:7c:9c:f6:2a:99:a9:a5:
         59:03:65:04:ec:2d:ad:0b:14:bd:d5:fb:15:1b:6b:45:05:29:
         2e:f9:c6:51:12:89:3f:b8:fd:8a:0a:47:d9:6a:d3:97:96:db:
         65:bd:de:9b:86:2a:ed:d2:ca:96:f2:67:81:bc:62:d4:bb:8b:
         3e:2a:9d:7e:bb:77:ee:d5:e5:25:cf:21:b0:88:48:51:8e:81:
         a5:25:df:f1:95:97:fb:cf:23:cc:84:0e:73:d1:0f:f8:bf:0b:
         06:e1:c7:d6:aa:b9:c2:41:c2:89:be:56:0a:ea:60:27:56:71:
         52:16:36:b9:ab:7b:06:06:7f:6a:e2:0a:a3:40:5f:a3:9f:76:
         4b:0a:5e:46:54:e9:6d:4a:b8:ff:35:ef:9f:5f:03:e8:c9:44:
         df:df:7d:b1:8a:c4:ba:f7:a0:f8:ae:7e:4e:f2:2b:69:ee:41:
         cc:cf:55:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:32:32 2025 by rpki-client