Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
File:                     rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft (raw, json)
Hash identifier:          Ld6rELPKMDcCLNBs4f3ohMegms55LjYflhFzyf7XjdU=
Subject key identifier:   76:3E:CF:9D:BA:5D:72:DB:21:48:63:83:54:02:35:D0:C7:92:67:D5
Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
Certificate issuer:       /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Certificate serial:       01976D06ECBD776B18E0CAFED737AB659C35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 06:00:59 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:59 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:59 +0000
Files and hashes:         1: 04xKoR3HixjwEV_dOrG3hKpzMP4.roa (hash: XSQ1jLSVKuR/7tbazdYV2Fv1OeY0/BCC+/gGVvZRwVw=)
                          2: rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl (hash: LjeXSXbSEctzyxxpnBUGcQ2E4TpmUCC7VPv64lBY0xA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:ec:bd:77:6b:18:e0:ca:fe:d7:37:ab:65:9c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
        Validity
            Not Before: Jun 14 06:00:59 2025 GMT
            Not After : Jun 15 06:00:59 2025 GMT
        Subject: CN=763ecf9dba5d72db21486383540235d0c79267d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:74:20:c7:1d:e2:2b:13:b0:a6:11:e1:1f:14:
                    7b:d8:c5:d1:1b:b1:07:ff:74:51:f3:72:b1:ea:0c:
                    84:54:3f:82:cf:21:29:75:ac:f4:41:d7:c1:07:2a:
                    e3:79:39:55:2e:ba:28:74:81:b5:ae:d6:fa:ab:80:
                    77:12:60:e5:22:27:1b:a0:d7:82:9a:42:88:56:5b:
                    4e:0a:ff:f7:17:63:4e:3f:49:dd:a0:18:b5:ec:87:
                    7f:5d:ba:ce:a2:0c:29:99:d1:80:4e:22:fa:fe:c0:
                    97:cf:cf:8e:f5:69:a8:8e:71:ca:d5:25:87:96:41:
                    26:01:cc:94:42:4c:71:40:45:20:08:0c:f8:f9:c8:
                    0b:4d:4e:93:3a:5c:18:56:6e:ac:b3:43:55:9c:16:
                    34:26:20:e6:82:03:ec:5f:84:37:f9:7c:58:66:1f:
                    f4:92:6b:84:95:8b:87:e3:27:03:4b:4f:fd:6b:e8:
                    6b:94:8f:1a:07:0d:9d:c8:31:eb:63:af:79:22:70:
                    8f:6d:4b:7b:5b:65:d7:c1:ea:ce:2a:f8:0e:75:93:
                    9c:d2:48:cb:3d:7c:80:58:be:e9:cb:19:c5:2b:d8:
                    71:a1:78:6a:15:cf:96:98:1b:04:82:54:a9:58:29:
                    8f:5e:7f:da:93:8e:c2:ce:ac:2a:c9:ae:46:12:1d:
                    70:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3E:CF:9D:BA:5D:72:DB:21:48:63:83:54:02:35:D0:C7:92:67:D5
            X509v3 Authority Key Identifier:
                keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:28:65:b8:08:af:17:1f:1f:c5:1d:12:42:ce:4b:bb:22:ba:
         2e:8a:59:61:60:9b:19:7a:82:d3:2a:76:d0:ff:7c:6d:7a:14:
         6e:b0:6e:a3:64:f7:6b:d8:ba:5d:cd:67:8a:d8:db:1c:e3:23:
         e5:b3:15:be:20:cb:1e:f6:95:0b:ec:61:d8:5a:a3:23:8a:70:
         79:12:d3:89:f4:0e:9a:0d:65:92:b4:39:72:e5:c8:c0:6f:89:
         83:47:c3:12:7f:68:ea:44:bc:bd:96:0a:0f:b7:3e:43:00:a9:
         40:ee:49:bf:e8:52:12:8e:01:e1:a2:3c:a7:70:3d:bb:cd:3b:
         d6:c8:85:a1:a4:d6:91:f5:98:b3:19:32:6d:34:db:b8:0e:f5:
         d6:8d:3c:6f:b2:47:88:53:5b:56:41:93:ae:c4:65:cc:a3:55:
         e1:ca:67:d8:f9:a2:0d:9f:e5:da:56:06:93:45:5a:4c:ce:4f:
         ef:48:ea:7c:66:8e:2e:c4:43:49:37:1e:27:bb:ef:a2:02:5c:
         de:3b:d4:06:cd:34:03:3b:03:6e:ec:cf:ef:d5:e8:72:c6:9f:
         4e:68:66:52:41:fa:17:82:77:78:ae:51:17:ce:a2:10:c2:77:
         32:36:29:25:3e:f7:e7:6d:e8:1b:93:76:a8:6c:17:f8:0a:08:
         a4:27:90:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:17:49 2025 by rpki-client