Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
File:                     v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft (raw, json)
Hash identifier:          76lPL5smOsk0Ai3/LEYhisOC2hMGiXG55yocT0REd7A=
Subject key identifier:   0F:23:6F:28:13:8B:90:82:0F:9E:73:B5:32:38:54:1E:5D:FE:F6:7D
Authority key identifier: BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
Certificate issuer:       /CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Certificate serial:       019776E52836BB94337D8B63604F9C927381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
Manifest number:          1227
Signing time:             Mon 16 Jun 2025 04:00:18 +0000
Manifest this update:     Mon 16 Jun 2025 04:00:18 +0000
Manifest next update:     Tue 17 Jun 2025 04:00:18 +0000
Files and hashes:         1: CwTJXDuwwtXY5lds5AcNMw4m4MM.roa (hash: pkjwfyNy3tBr0gdIHHue6NuT85XueEkqyX3eSoK30mk=)
                          2: v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl (hash: SbGCwQCGGEWRkLiLYf8And/8SI9Fe7kgGq85aQjXoNk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 04:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:e5:28:36:bb:94:33:7d:8b:63:60:4f:9c:92:73:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
        Validity
            Not Before: Jun 16 04:00:18 2025 GMT
            Not After : Jun 17 04:00:18 2025 GMT
        Subject: CN=0f236f28138b90820f9e73b53238541e5dfef67d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6a:5f:3c:77:0e:07:be:2a:df:db:b6:cf:79:
                    35:89:e2:48:73:95:3b:fd:37:f3:5c:c6:64:3d:30:
                    1e:88:24:7c:8c:a9:f9:dc:c6:fa:42:15:9b:48:ed:
                    cc:7b:d1:a9:07:ce:63:c1:1f:23:04:d1:5b:2f:8f:
                    75:b9:a6:36:09:54:b9:9c:19:67:07:36:ca:94:05:
                    08:e2:0a:df:97:0c:ca:19:58:e9:72:03:3c:b2:9d:
                    b4:eb:61:5a:f2:bc:1b:cf:0c:0d:25:a9:80:a9:a3:
                    ba:7a:02:15:59:85:54:cf:63:02:ab:5d:cf:ed:dc:
                    ef:5c:96:9a:f5:e2:c1:74:2a:fc:9b:5e:5e:e2:1a:
                    64:94:18:50:1e:bf:22:4e:4c:19:b6:1f:de:8a:3f:
                    35:55:b8:10:ec:cd:01:5d:69:9f:54:15:f7:fd:e1:
                    c9:92:72:3d:ef:7f:f7:80:3e:1f:06:aa:55:8b:ff:
                    db:3c:14:e9:b5:a1:dc:06:f3:c4:b1:18:2c:c7:4a:
                    f5:cb:f8:ff:20:b2:69:9e:82:dc:30:71:c2:29:03:
                    5e:9e:68:87:41:d7:88:89:40:a9:4c:a7:3b:16:f7:
                    48:6a:3c:4b:2e:f2:de:f8:f8:20:4a:7b:20:0b:36:
                    d4:97:bd:a8:32:63:6f:27:12:c4:38:ae:2e:38:c3:
                    6a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:23:6F:28:13:8B:90:82:0F:9E:73:B5:32:38:54:1E:5D:FE:F6:7D
            X509v3 Authority Key Identifier:
                keyid:BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:61:38:75:e6:97:a3:4d:e3:88:c6:b7:1d:15:66:ca:e4:0e:
         68:ec:60:61:7f:70:67:ae:63:88:07:a0:a1:3f:1c:61:6f:83:
         d1:7b:ce:41:c9:2b:4a:31:01:8e:9d:96:54:8d:85:8c:7c:c6:
         a3:ff:30:c5:38:1e:96:28:29:f5:01:dd:c7:a3:80:a3:c4:53:
         a3:ac:f8:ff:26:a5:ab:44:d9:33:d9:0b:29:74:16:63:a3:a4:
         9b:86:e8:38:3c:38:6c:e8:4b:be:d5:8a:87:7f:3f:46:d3:fc:
         bc:46:f8:ea:71:c3:e6:6e:db:78:8f:69:39:87:de:64:d6:a0:
         ce:0a:72:ea:ef:20:ad:3b:f8:0a:79:5a:01:d3:a5:07:20:d8:
         b6:3e:23:7e:b5:92:79:34:57:08:72:0e:d4:b9:f9:ca:f8:32:
         9a:e0:fc:cb:f0:7a:97:58:b6:46:41:c5:1c:13:26:82:1f:29:
         5d:99:a8:92:8e:ee:75:88:20:65:c2:63:ec:e8:17:8e:09:86:
         d0:94:54:61:13:9f:da:1a:00:52:23:2d:2e:81:ab:fd:ff:3c:
         cd:ff:86:d1:9b:89:76:7d:49:b5:24:fe:8f:3d:e7:f0:d9:c2:
         50:cb:91:30:22:84:e5:57:4f:ca:d5:3b:3c:59:87:3f:cf:7b:
         fc:b7:1f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:29:25 2025 by rpki-client