Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
File:                     v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft (raw, json)
Hash identifier:          B92KWiwJCf2WQyscbMpvjnAOJ53syuNXxFLPID12FAA=
Subject key identifier:   66:59:36:DF:92:95:EE:5E:10:6F:6B:18:69:87:CE:D3:BC:C3:20:C3
Authority key identifier: BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11
Certificate issuer:       /CN=bfac12dab75d9c09f3120179373e995ae3917911
Certificate serial:       019768BBBE732D3D1E18163495F327030B11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
Manifest number:          0174
Signing time:             Fri 13 Jun 2025 10:00:23 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:23 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:23 +0000
Files and hashes:         1: jzM77P9xsYn5MAVakoO0HLR2EkI.roa (hash: h0SxsVCXMkdE1oBd8hWK7t+rP5KlnAbkMvVnkeRV7Cs=)
                          2: v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl (hash: RvgdoZVG9+nL/637ceRplZXfXuPBafIuIAfR6IL0k7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bb:be:73:2d:3d:1e:18:16:34:95:f3:27:03:0b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfac12dab75d9c09f3120179373e995ae3917911
        Validity
            Not Before: Jun 13 10:00:23 2025 GMT
            Not After : Jun 14 10:00:23 2025 GMT
        Subject: CN=665936df9295ee5e106f6b186987ced3bcc320c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fd:90:29:c5:4c:83:6a:5c:31:dd:6c:56:97:
                    b3:6a:1e:aa:00:1f:10:59:e5:af:1e:7c:65:2c:f4:
                    b3:88:32:68:b2:ad:fe:42:37:52:cd:dc:80:2a:9e:
                    a3:30:10:c3:d4:40:b7:aa:02:10:13:2a:a8:36:bc:
                    e6:a0:74:88:43:fb:77:98:0d:92:8f:ed:f2:de:e7:
                    f4:ea:1c:9a:2e:bc:86:8c:99:c6:ae:da:19:4f:58:
                    d4:aa:35:b4:cb:ec:f5:a7:29:7b:b7:19:81:d5:b0:
                    cc:e1:6d:44:33:92:c0:3e:19:ca:09:a4:3d:50:de:
                    8c:3a:f0:03:fb:4b:1a:41:de:ee:91:62:73:0b:93:
                    c5:00:d8:fd:f2:8c:ee:37:f2:2c:25:25:de:ef:5b:
                    c6:75:ef:7d:0c:40:95:eb:41:fe:ab:c9:60:8a:fb:
                    d7:73:14:2a:1a:ed:a3:16:9d:8b:96:0a:ba:38:e9:
                    55:30:b1:23:63:84:48:bb:59:dd:b0:47:78:91:6c:
                    cd:7f:e8:9e:47:94:8a:a3:fc:b4:97:35:b9:d5:58:
                    0e:dd:e6:89:a5:92:19:08:f9:0f:b7:77:a5:ae:1d:
                    9a:1a:5c:11:ed:09:23:91:0d:1c:73:7e:40:70:b1:
                    f6:d4:fa:7c:95:d8:a1:c8:7e:df:37:49:47:81:e2:
                    7f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:59:36:DF:92:95:EE:5E:10:6F:6B:18:69:87:CE:D3:BC:C3:20:C3
            X509v3 Authority Key Identifier:
                keyid:BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:55:63:c0:dc:70:09:aa:21:2d:37:5b:5e:ef:e2:1e:9f:23:
         41:05:62:1a:cf:88:64:b4:83:a2:92:4a:ef:13:de:df:d4:f3:
         f1:8f:73:6e:e3:11:e9:42:32:45:8c:5a:47:ac:37:42:a2:6e:
         67:e1:0e:2f:86:87:37:53:92:92:a0:4e:0a:70:a9:47:dc:3f:
         46:dc:b6:b3:d3:4c:98:3e:b7:1b:9c:42:6e:08:b9:00:ef:76:
         48:82:15:d7:59:12:00:22:4b:a5:17:96:28:cf:b9:a3:4f:e8:
         17:bf:c6:08:7e:6b:a8:d8:d5:bc:fb:fc:1d:8d:a6:41:c0:72:
         69:cd:ed:3a:cf:04:d8:c7:43:fb:46:ed:79:89:39:b5:b1:5d:
         f6:b0:3c:1d:a7:71:11:80:79:61:cd:ae:6c:a2:39:bf:76:7a:
         99:28:09:ba:28:dc:71:48:cb:f7:57:69:a8:69:19:6c:73:a6:
         83:f9:58:49:02:41:3e:a1:fc:52:18:cb:b7:27:bf:d5:af:ed:
         cb:19:3e:07:ae:f9:39:03:a7:13:94:5e:c0:94:f9:e1:b2:b9:
         2b:ba:73:ea:a9:7c:6b:5a:71:bc:a8:e6:37:24:36:76:74:85:
         2b:24:36:8d:24:86:20:65:17:e1:7c:55:ac:5a:13:d2:1d:2a:
         a7:33:5e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:07 2025 by rpki-client