Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
File:                     C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json)
Hash identifier:          EQGi0PPxZONTI1Xod3TJXmhPrOpAxGi/I3GHzXXYpfo=
Subject key identifier:   5C:ED:1F:F9:80:E2:13:57:E4:8F:F6:8A:BF:04:64:F2:EF:B2:AD:CB
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Certificate issuer:       /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial:       01977BD4FA7A751D61809DE06F8325F7C417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
Manifest number:          0D2C
Signing time:             Tue 17 Jun 2025 03:00:43 +0000
Manifest this update:     Tue 17 Jun 2025 03:00:43 +0000
Manifest next update:     Wed 18 Jun 2025 03:00:43 +0000
Files and hashes:         1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: 5J6sMcsdCKWlzaiOIJD43gMmMajUOQRGTHk9vet1108=)
                          2: c5yD0OO2hJCHbzdGNR8uwMLkI7Q.roa (hash: 6J584Pfcm2xEEOIgm8HDbt6jhB1m8yFiIXBl5VE/wrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 03:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7b:d4:fa:7a:75:1d:61:80:9d:e0:6f:83:25:f7:c4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
        Validity
            Not Before: Jun 17 03:00:43 2025 GMT
            Not After : Jun 18 03:00:43 2025 GMT
        Subject: CN=5ced1ff980e21357e48ff68abf0464f2efb2adcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:de:4c:bf:13:34:69:b7:5c:2f:d7:d0:a9:25:
                    05:f9:c7:b1:e2:6d:40:e8:ab:73:a5:67:ca:da:bd:
                    51:07:93:cc:ec:58:41:98:c7:d8:dd:e7:9c:0b:4d:
                    53:d1:32:6a:0e:1d:cc:8d:ab:81:f9:d4:93:e1:79:
                    a5:60:93:68:c5:3d:c8:1f:34:0b:dd:c7:93:d5:7c:
                    60:98:70:e2:0d:52:56:3b:3e:ae:f6:f0:49:db:ac:
                    6d:ef:3f:ef:4b:80:cd:e1:67:4b:68:30:d2:b6:71:
                    62:db:00:de:2b:f4:5d:a7:16:22:97:42:a1:8f:30:
                    c0:e8:8b:eb:bf:27:4e:0f:8e:16:e4:4a:29:d9:05:
                    84:e8:d4:c4:c5:23:42:83:17:37:a2:51:df:8b:ea:
                    12:38:aa:af:61:73:69:14:82:30:94:b6:fa:b9:ee:
                    b6:7e:29:7b:3f:df:16:bc:07:2a:fa:15:52:88:cb:
                    8f:17:52:ff:c4:a9:54:59:f1:df:00:5a:ef:d2:32:
                    3b:d3:24:db:2c:99:bf:a5:ac:a9:84:58:98:d4:9a:
                    40:70:c3:7c:d8:ad:22:08:f6:88:9e:21:98:ef:cc:
                    3d:b6:fb:52:6a:c4:7b:c1:87:a2:ea:74:80:16:ae:
                    b8:87:be:c4:4d:3d:65:78:71:9e:51:46:9b:18:61:
                    18:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:ED:1F:F9:80:E2:13:57:E4:8F:F6:8A:BF:04:64:F2:EF:B2:AD:CB
            X509v3 Authority Key Identifier:
                keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:7c:81:21:04:bf:f2:fb:4b:1f:13:48:4e:01:09:22:8e:77:
         ac:8e:6d:fb:33:f4:a8:bc:a3:7a:5c:c1:17:1c:ff:bf:7b:d5:
         b3:83:27:05:65:fb:06:20:a1:9d:ee:db:80:99:51:10:65:83:
         d9:20:a1:63:57:04:98:21:8b:3d:64:ca:83:6b:80:87:fc:9a:
         e2:a6:04:55:1f:ad:75:66:ba:d6:eb:47:9a:98:b7:a7:86:76:
         c0:70:4a:bb:d9:ce:38:49:b3:6d:a6:68:d1:75:46:57:4b:36:
         5e:cc:b6:5e:3c:02:b1:43:99:4e:e5:ee:b2:7e:cf:7a:ae:77:
         bf:07:e9:bd:47:4f:99:dc:5c:09:e7:56:3c:ff:31:1d:d0:44:
         b1:f7:09:92:15:54:e2:52:79:3c:f5:96:20:46:da:e8:31:96:
         93:86:b8:d1:28:08:0d:78:85:56:9d:77:d7:47:33:e1:e3:c1:
         e9:be:7c:af:5a:b9:e0:34:f7:a7:84:10:74:45:94:cd:eb:4e:
         72:c4:49:3e:f1:74:6e:a5:9c:bc:a3:b8:18:70:b7:17:36:53:
         2a:b6:22:23:3f:38:0b:a2:db:db:a7:b6:49:80:34:b2:70:3b:
         c2:ba:1e:ed:78:43:7d:fb:f8:99:6a:6c:20:27:74:15:48:56:
         82:62:8c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:24:22 2025 by rpki-client