Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
File:                     Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft (raw, json)
Hash identifier:          RAUHS5BdSwJuWIAcqB8AIJF/ExYxypX4aKBOjsmm4VI=
Subject key identifier:   1C:10:A5:F9:5D:4B:F3:86:11:AF:05:99:8F:0D:BE:5D:1C:CD:B1:4B
Authority key identifier: 0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A
Certificate issuer:       /CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
Certificate serial:       019776AE96169C114ACD8D39A4B1A7ED9961
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
Manifest number:          0A28
Signing time:             Mon 16 Jun 2025 03:00:42 +0000
Manifest this update:     Mon 16 Jun 2025 03:00:42 +0000
Manifest next update:     Tue 17 Jun 2025 03:00:42 +0000
Files and hashes:         1: Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl (hash: l4Rg19fXj8khDqcuHmbUqukcd+8A6P30zgPgjoJJ05E=)
                          2: bscorJtE41igLaTAQbtgAQqBxz0.roa (hash: sGg8Ckzp0oPzFQ9Hy7BsC5B5QG6ZfSY1AxKv6j6SlLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:ae:96:16:9c:11:4a:cd:8d:39:a4:b1:a7:ed:99:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
        Validity
            Not Before: Jun 16 03:00:42 2025 GMT
            Not After : Jun 17 03:00:42 2025 GMT
        Subject: CN=1c10a5f95d4bf38611af05998f0dbe5d1ccdb14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a7:9f:1c:26:09:25:b6:9c:ce:73:c1:67:64:
                    de:13:b5:4f:31:7c:c5:3e:9a:09:a5:95:f8:55:1e:
                    7f:c1:be:1f:df:d3:d6:b2:2d:f3:e5:75:4d:7d:0a:
                    f6:2a:7c:41:51:13:a0:1c:52:d6:b3:75:79:11:22:
                    0b:14:26:a4:a2:08:9b:ef:51:6e:aa:de:a4:4a:40:
                    8a:1a:8e:47:a4:49:b1:24:79:1d:f6:75:44:b5:1c:
                    8b:07:ac:58:5d:c7:32:6c:21:e4:9f:ab:8e:19:28:
                    f5:33:46:47:0f:2a:8c:20:50:e3:86:46:1a:22:58:
                    ae:b0:67:fa:76:1d:ae:dd:4f:93:89:53:96:f5:aa:
                    f3:d4:2f:ac:50:d8:c1:01:c0:55:d7:52:c2:eb:71:
                    b5:e1:63:66:0e:d9:09:75:1b:49:9a:e5:81:2c:5e:
                    57:9a:59:75:16:f4:a4:65:2a:59:d9:d0:22:7d:1f:
                    bb:6b:bc:93:f1:51:0f:70:97:97:dd:ee:57:fa:95:
                    da:92:71:1f:ea:ea:f9:1f:67:bd:47:2c:51:1b:0f:
                    93:da:a5:e2:a8:b2:1b:bb:a2:bc:74:e3:2c:24:e1:
                    9c:5c:f0:e8:11:aa:bd:f5:43:f5:3e:3e:44:5f:f0:
                    55:a6:10:bd:d1:ac:31:89:74:4e:ac:a5:ab:dc:9b:
                    92:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:10:A5:F9:5D:4B:F3:86:11:AF:05:99:8F:0D:BE:5D:1C:CD:B1:4B
            X509v3 Authority Key Identifier:
                keyid:0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:dd:47:de:77:45:d1:f3:c8:ff:2f:a0:09:74:08:d5:c9:05:
         1f:f4:4e:83:f0:4d:f6:72:aa:8d:d6:a2:f8:d2:8f:e8:2a:eb:
         4b:c5:77:ce:ec:d8:34:d6:75:68:73:6d:3c:e6:35:5d:24:b8:
         22:99:d9:26:59:53:32:10:13:e6:86:d5:c5:7a:ba:22:e1:f9:
         07:10:4e:80:c4:54:a0:99:d0:c8:d7:52:ef:e5:8e:e7:d5:4c:
         55:c7:11:93:15:24:56:61:83:bc:27:1d:7c:d6:cd:8e:fc:6c:
         32:c2:e2:ed:fe:ad:d2:28:42:35:00:d1:f0:72:74:b3:4f:99:
         db:60:98:f4:41:57:0a:c9:04:c3:bc:68:a1:01:b9:34:6f:f6:
         0d:c5:aa:a0:a2:fe:7e:cf:42:c8:11:56:a0:97:67:2a:09:6a:
         7c:90:8d:cc:f7:26:ca:9f:c1:61:4b:3e:a8:6c:5b:fb:06:de:
         1f:78:66:40:bc:b0:88:c0:52:2e:7f:0b:b5:20:77:f1:fd:a8:
         c6:98:9e:00:18:66:67:44:16:59:b8:e1:62:09:8c:26:08:f0:
         4a:2a:f8:6e:81:e0:44:de:22:3b:eb:17:09:1f:c6:a8:cd:1a:
         a7:bc:95:b8:25:1c:3a:ac:9d:44:fd:16:09:4a:60:d4:64:cf:
         e7:d5:cc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:20:35 2025 by rpki-client