Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
File:                     Cs1OLATDntskKmcFG4tYEmNDbnk.mft (raw, json)
Hash identifier:          gK5UKWt6qHZe+kbzx/eHbDz/jlUOp9qVZvjluYSStMM=
Subject key identifier:   99:46:26:38:96:8A:47:2B:7E:72:E5:9A:C6:8C:8C:D9:68:A5:97:47
Authority key identifier: 0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
Certificate issuer:       /CN=0acd4e2c04c39edb242a67051b8b581263436e79
Certificate serial:       01976929B2A02C2323C08F7A99E2365B5F97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
Manifest number:          1111
Signing time:             Fri 13 Jun 2025 12:00:29 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:29 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:29 +0000
Files and hashes:         1: Cs1OLATDntskKmcFG4tYEmNDbnk.crl (hash: 2g2yRgHseF8mbSwAhl1ePil6f9vrwd7WEiocP4vbVYE=)
                          2: bbpg3V6ZZAXBeCd1yQ2Usxzc5uc.roa (hash: zEd/mqbUQwwKdBV4qgniA93ml7cpqC5pfS1X8ei6QF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:b2:a0:2c:23:23:c0:8f:7a:99:e2:36:5b:5f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0acd4e2c04c39edb242a67051b8b581263436e79
        Validity
            Not Before: Jun 13 12:00:29 2025 GMT
            Not After : Jun 14 12:00:29 2025 GMT
        Subject: CN=99462638968a472b7e72e59ac68c8cd968a59747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:30:fa:4f:8b:91:70:f9:eb:0d:cd:f0:fb:
                    c3:c2:1d:62:70:7e:11:db:79:bb:d0:d8:e8:81:67:
                    9d:18:5f:78:a6:a2:31:61:d8:69:31:b5:e0:cf:2e:
                    df:e5:40:e1:60:13:d5:7c:da:25:a8:8b:e3:d1:f5:
                    29:94:e7:f7:b8:e3:54:da:91:48:72:67:3e:9a:e5:
                    0a:f9:f1:4e:d2:a0:a4:0b:e0:48:68:cc:5e:91:b5:
                    87:38:a4:59:46:93:3e:5d:2d:a7:3e:fc:a9:ac:6c:
                    a2:7b:e6:cf:59:6d:53:5d:4f:ee:95:62:cf:5c:1c:
                    88:d4:1f:bc:9b:59:01:8d:d1:79:48:79:24:67:ea:
                    e9:0d:eb:43:48:c0:82:db:1c:e3:18:b9:0d:8e:e3:
                    48:c7:d4:e5:16:8a:54:9a:64:f9:15:82:2e:84:05:
                    28:73:47:42:62:0c:25:2d:d8:be:dc:17:33:12:52:
                    e6:dc:cb:35:ca:4c:eb:c7:ee:f8:ee:c7:72:3d:5e:
                    ab:81:32:5a:48:cd:02:74:cd:08:0e:09:f6:cf:f5:
                    b5:15:50:23:6e:5e:ee:f4:b5:21:de:7d:71:10:1c:
                    fd:e3:e7:95:39:77:9b:51:44:a8:16:90:30:8c:a7:
                    ae:f2:d0:20:0f:ef:bc:64:35:00:f5:cc:ab:f0:2a:
                    a1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:46:26:38:96:8A:47:2B:7E:72:E5:9A:C6:8C:8C:D9:68:A5:97:47
            X509v3 Authority Key Identifier:
                keyid:0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:01:2b:35:22:1c:38:ae:dd:ce:24:9d:8e:0f:b7:c7:f4:dc:
         db:8f:58:e7:03:94:80:2e:5d:ba:6b:ab:c0:ff:ad:1e:3a:41:
         42:b7:e1:7d:c4:c9:41:33:96:2f:c5:a2:85:be:f0:23:73:81:
         34:77:d1:f3:ce:eb:9d:59:50:4c:67:1c:4f:ab:e6:a1:2b:19:
         cb:e8:06:d3:71:d7:fe:e2:62:67:33:5d:bf:b1:73:7e:7f:79:
         a2:ec:c9:83:73:ee:e3:b7:31:31:5e:40:5b:da:38:4e:ac:9a:
         0b:99:00:ea:10:a7:bf:cc:96:87:89:d8:83:94:76:6f:4b:3d:
         0b:a9:9c:04:f5:34:bf:da:c8:99:3d:96:7d:ff:a5:7d:f6:55:
         8a:eb:57:c2:2c:47:e6:7e:48:0a:a8:c7:a4:16:d1:73:61:5e:
         c7:33:66:41:f6:6c:32:97:ce:ee:4c:c3:1c:13:ae:82:8b:ee:
         ab:d2:b1:d7:fb:77:1f:8a:25:09:81:72:f9:05:cb:af:d7:66:
         a3:bf:27:ea:0a:05:82:7d:1c:d3:75:74:03:38:45:a7:15:f9:
         cd:5a:cd:bb:b5:9b:dc:aa:98:6f:de:b5:71:1f:54:d9:78:15:
         66:36:9b:fb:c3:2a:31:17:31:6e:f6:02:9f:4e:cf:17:df:f0:
         99:9e:bb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:08:29 2025 by rpki-client