Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
File:                     C86QcAXcPrBHC8PbRpCNoQkXuEo.mft (raw, json)
Hash identifier:          LYnlyzUN/1fd9rXVIJNpmTS/wYK3yEl9Kc8SzzUGP0Q=
Subject key identifier:   F4:07:33:0F:4A:AA:3D:F4:48:49:DA:5E:32:5D:EE:B6:F7:57:DE:B8
Authority key identifier: 0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
Certificate issuer:       /CN=0bce907005dc3eb0470bc3db46908da10917b84a
Certificate serial:       01977C79963F3633B991560B3B27BA62C99F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
Manifest number:          0F46
Signing time:             Tue 17 Jun 2025 06:00:32 +0000
Manifest this update:     Tue 17 Jun 2025 06:00:32 +0000
Manifest next update:     Wed 18 Jun 2025 06:00:32 +0000
Files and hashes:         1: C86QcAXcPrBHC8PbRpCNoQkXuEo.crl (hash: RF1lxyUNrqS0blRKtIhf67h1vLXsao084GOPk5mZ4Oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 23:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7c:79:96:3f:36:33:b9:91:56:0b:3b:27:ba:62:c9:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bce907005dc3eb0470bc3db46908da10917b84a
        Validity
            Not Before: Jun 17 06:00:32 2025 GMT
            Not After : Jun 18 06:00:32 2025 GMT
        Subject: CN=f407330f4aaa3df44849da5e325deeb6f757deb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:51:4a:e3:2c:7d:c2:00:31:95:32:40:e7:03:
                    d5:1b:55:ad:74:b8:82:28:f1:6d:86:9f:00:ab:83:
                    fa:11:5e:79:9e:b2:61:80:91:ec:fa:32:87:f2:4e:
                    35:ad:ec:b3:74:cd:11:09:5e:9b:d6:c0:44:3f:35:
                    17:ae:3b:28:bf:48:80:0e:f3:f2:b3:cd:d7:14:34:
                    0c:0c:04:99:d5:4c:e7:8b:14:93:6e:c4:65:4d:4a:
                    28:30:6f:a9:ec:27:ce:d6:e2:95:2c:56:0a:6a:c7:
                    60:97:31:4f:dd:32:18:d5:28:98:8c:b6:56:0c:cb:
                    4a:07:10:99:41:f5:2f:57:40:0e:db:1a:6e:92:30:
                    08:15:a5:c7:08:a0:f8:f9:20:23:81:1a:32:fc:46:
                    7c:c6:43:93:e1:dd:e0:bf:c2:88:d7:91:fb:5e:88:
                    0d:83:76:25:76:1f:20:ef:31:35:62:ef:dc:ee:21:
                    54:16:d5:53:ee:29:20:87:ad:38:4c:16:dc:a4:78:
                    28:e9:e0:4c:58:4a:a5:24:99:48:5c:5e:e4:8f:7c:
                    fd:02:ee:6b:54:57:35:7c:71:64:9f:4e:b2:53:bb:
                    8f:01:d7:a5:36:16:0b:5c:6a:79:7d:e1:18:4e:ea:
                    85:09:98:6e:26:ea:96:44:42:6d:07:71:0a:8c:7e:
                    32:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:07:33:0F:4A:AA:3D:F4:48:49:DA:5E:32:5D:EE:B6:F7:57:DE:B8
            X509v3 Authority Key Identifier:
                keyid:0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:20:f5:55:45:ad:b3:24:82:c1:35:87:cc:a7:54:3a:b2:d2:
         a9:28:f1:ab:bc:af:b2:84:9d:d0:e5:a4:a1:9d:81:c6:a0:08:
         c4:c0:d4:68:7d:49:5a:df:2a:61:9c:d4:a4:5b:c1:76:a4:af:
         4d:b5:02:1e:34:1d:70:e5:13:ad:ad:6e:c0:c8:c8:2f:44:a0:
         4f:01:f5:20:82:93:c5:12:69:d7:59:91:9d:51:0f:b8:cf:b3:
         e0:30:7c:83:a4:fb:c6:53:00:a5:86:39:15:de:98:b9:80:0b:
         8e:e3:d3:88:74:19:35:ba:cd:01:9d:a8:3d:9e:a7:8d:fe:33:
         d2:f2:47:6b:e9:b2:f7:1d:2e:02:bc:9e:bd:d2:6f:7a:c1:35:
         48:e8:4e:1e:ad:19:27:de:2a:77:4c:ce:f4:4d:31:9e:00:40:
         3d:1f:4f:f0:1d:79:22:f6:a0:d9:03:e7:b0:07:be:a8:b8:ba:
         a8:41:67:b9:99:f2:b1:47:66:d5:be:9d:cb:db:e1:b0:6e:b1:
         7d:3f:ab:25:9d:c4:31:4b:f1:b1:0c:3e:1a:78:f4:e3:b1:71:
         33:b4:0d:6f:e8:44:82:8d:15:ee:1f:c0:60:35:dc:a9:ce:3e:
         11:c0:e8:f8:7d:00:9b:10:57:7f:9b:9d:ae:b5:d9:51:c6:1d:
         7d:a1:d8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 09:12:02 2025 by rpki-client