Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
File:                     COKNBckBhf5-Yq8c7iXIg7b-IjY.mft (raw, json)
Hash identifier:          mLjURGglu+gv003cBAMDDgDvnsb382WbaJpsaliGQjs=
Subject key identifier:   1C:19:0B:EB:6E:E6:FC:23:0D:A5:2E:E2:5F:80:10:ED:EA:AC:2F:9E
Authority key identifier: 08:E2:8D:05:C9:01:85:FE:7E:62:AF:1C:EE:25:C8:83:B6:FE:22:36
Certificate issuer:       /CN=08e28d05c90185fe7e62af1cee25c883b6fe2236
Certificate serial:       019768BC3A6F19F3FB47CC9E81E414A9B6AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
Manifest number:          04E8
Signing time:             Fri 13 Jun 2025 10:00:55 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:55 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:55 +0000
Files and hashes:         1: COKNBckBhf5-Yq8c7iXIg7b-IjY.crl (hash: ARTbVCj03pDIRrey7cQIe6r4B6lBWIpWB1TktPjX0xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bc:3a:6f:19:f3:fb:47:cc:9e:81:e4:14:a9:b6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e28d05c90185fe7e62af1cee25c883b6fe2236
        Validity
            Not Before: Jun 13 10:00:55 2025 GMT
            Not After : Jun 14 10:00:55 2025 GMT
        Subject: CN=1c190beb6ee6fc230da52ee25f8010edeaac2f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3b:33:31:5d:2e:85:4c:77:9f:f1:b5:e4:24:
                    c8:16:ff:b8:8e:a4:ba:79:7a:f8:64:4d:94:4d:71:
                    83:ce:7e:2c:63:54:5a:be:01:34:52:ef:69:6f:88:
                    e1:41:15:90:e3:b4:ea:3d:26:48:d2:cd:d7:b7:49:
                    cc:b8:3d:17:3a:6c:c6:80:a2:40:ce:0b:fc:b0:d5:
                    2a:a8:7b:bd:ee:f0:01:e9:1b:93:fb:0e:19:20:89:
                    c7:73:a3:c6:e7:73:d0:5d:56:06:a4:85:e2:3b:17:
                    71:59:0f:32:ac:f7:dc:1b:1e:41:54:93:4c:b6:2c:
                    91:d0:17:e6:f8:d3:fe:0b:a0:36:85:24:26:d3:51:
                    dc:98:0e:d6:ec:7b:63:83:cc:4d:07:e7:22:6c:b2:
                    35:2f:85:81:91:1a:5b:34:df:57:a3:16:53:b7:51:
                    cf:b7:bc:4f:50:e5:38:3a:a2:ee:41:63:9d:f8:1c:
                    79:fc:cf:fd:1d:20:0a:0e:da:4b:2d:0c:7b:ad:3f:
                    7e:b6:fa:c6:ce:a2:21:91:30:bb:6c:d0:ba:ff:bb:
                    48:b0:d8:5a:c6:05:60:92:ef:c3:2d:e4:11:9f:f8:
                    39:36:8e:08:5a:48:2f:e4:18:b6:43:c7:0e:cb:76:
                    93:f8:e9:7d:ce:89:cf:f6:68:fb:5f:79:0f:29:8b:
                    1d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:19:0B:EB:6E:E6:FC:23:0D:A5:2E:E2:5F:80:10:ED:EA:AC:2F:9E
            X509v3 Authority Key Identifier:
                keyid:08:E2:8D:05:C9:01:85:FE:7E:62:AF:1C:EE:25:C8:83:B6:FE:22:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:54:d5:96:24:92:94:ec:58:63:96:e4:94:76:0f:c2:a3:c8:
         78:d4:24:0c:5e:50:ae:46:09:ad:fe:b6:f1:b9:05:68:9b:b3:
         62:dd:90:1e:e5:3f:a8:8f:2e:3e:90:29:88:2c:5f:cc:90:eb:
         8e:de:49:19:5b:c9:e5:97:45:c9:d7:52:a3:7a:64:e1:00:ec:
         d7:60:cd:e3:04:fb:3a:a3:ad:60:8c:b0:be:c4:0c:ea:bb:63:
         ce:1b:2f:44:fc:e0:9c:15:34:e3:ba:67:60:3c:3f:e9:48:8b:
         44:1a:1d:48:3c:e2:08:c8:37:2f:b0:12:02:47:c0:13:a9:46:
         dd:7d:86:c2:82:10:9f:45:39:67:01:13:01:c0:30:47:c4:aa:
         e1:09:6f:34:a6:77:92:ab:ad:e4:89:80:1f:90:8c:c1:7d:9c:
         ea:05:a9:3c:05:0e:4b:ca:1b:aa:4e:f1:65:b0:49:82:be:dd:
         b4:61:a5:d3:dd:48:7b:43:38:d5:f6:96:0c:6e:9a:05:a6:c9:
         0a:62:41:8f:02:b6:2d:7d:0a:8d:25:29:8d:39:41:9c:27:2c:
         ff:91:3b:6c:0d:9b:e8:6e:e6:96:2a:c7:c4:53:c5:64:52:45:
         69:e9:f7:32:84:52:11:de:8f:73:39:c6:06:ab:44:57:29:d9:
         5c:32:ac:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:49 2025 by rpki-client