Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
File:                     B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft (raw, json)
Hash identifier:          UGZ4U6UCg5NXiLmag5eZpeWvDOjuymp3N9fgzv0O7vY=
Subject key identifier:   A8:67:F3:8A:63:BD:BB:E7:1C:F1:49:5B:81:D5:4B:70:70:EB:2F:4B
Authority key identifier: 07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9
Certificate issuer:       /CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
Certificate serial:       0197499EE8EEDB226D71B9C4465E571B7FF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
Manifest number:          04C5
Signing time:             Sat 07 Jun 2025 09:00:40 +0000
Manifest this update:     Sat 07 Jun 2025 09:00:40 +0000
Manifest next update:     Sun 08 Jun 2025 09:00:40 +0000
Files and hashes:         1: B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl (hash: SkCW6+SO9QofHsqmHW3+FN338URljODVKk1/ZCW8JV8=)
                          2: ul-xO-5mZZApWQIPteBxrXhy3Gg.roa (hash: Xgcb4gBJ+LBlJQi0BqbRaMDSR7lxsJ55H3PWqex5WBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9e:e8:ee:db:22:6d:71:b9:c4:46:5e:57:1b:7f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
        Validity
            Not Before: Jun  7 09:00:40 2025 GMT
            Not After : Jun  8 09:00:40 2025 GMT
        Subject: CN=a867f38a63bdbbe71cf1495b81d54b7070eb2f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:a8:e9:a0:e7:32:dc:0e:a2:39:c2:f8:75:
                    c3:10:10:2c:94:a5:95:3f:01:8a:ae:fd:4a:e4:80:
                    47:2a:0c:04:59:99:c4:c3:e4:28:88:aa:51:6a:b6:
                    db:ba:0a:7e:77:c3:a3:f3:08:78:b8:73:26:4c:e5:
                    f4:00:8f:06:cb:71:10:cd:35:cc:f4:c0:c9:eb:2f:
                    2f:d4:87:ae:b8:67:f2:f9:0a:59:3b:df:09:79:ed:
                    d2:7a:e5:58:e6:b9:15:1f:e3:dd:a5:7a:79:dd:21:
                    31:e4:5b:bc:a0:83:54:1d:75:7d:e4:70:f5:94:7d:
                    ce:0f:83:cb:0f:06:b5:19:4e:0c:f3:e7:36:70:83:
                    8b:99:cd:16:ad:9c:db:61:e7:1d:52:76:a4:42:fb:
                    b1:36:81:48:c5:14:7b:cf:14:60:aa:19:7b:96:44:
                    c9:7b:60:aa:4e:ba:17:90:e2:e6:ab:07:c4:b0:e7:
                    4e:91:4e:cc:75:02:e6:d2:ea:81:db:14:86:23:58:
                    95:08:e8:14:a1:da:8f:72:85:b5:49:c6:f8:4f:b5:
                    19:f6:3b:34:6e:48:77:1a:18:92:8b:94:53:25:da:
                    b5:d2:a4:cb:87:54:d0:3b:96:47:5b:b5:cc:be:8b:
                    41:3b:b8:bf:f8:4e:b1:c8:e0:f8:ae:12:44:a5:04:
                    9b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:67:F3:8A:63:BD:BB:E7:1C:F1:49:5B:81:D5:4B:70:70:EB:2F:4B
            X509v3 Authority Key Identifier:
                keyid:07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:ea:23:cd:76:4d:a6:74:88:7a:9b:7f:31:c4:33:25:14:3b:
         5d:f5:e2:45:19:bf:b7:ea:9f:b6:ae:a1:b8:d0:2f:e2:71:b5:
         e7:47:12:4b:c0:77:d7:76:51:28:13:da:a5:39:8b:d6:e6:ea:
         e5:f3:2c:6d:c2:2b:ff:3c:5e:62:6c:30:d2:95:dc:14:18:53:
         24:43:a0:c8:a2:6a:ec:61:18:fe:4c:f4:9f:a2:fa:52:5b:38:
         ac:79:df:24:e5:5c:5c:59:9f:d8:6a:02:73:15:f8:27:96:26:
         ec:ab:7a:a7:c1:0a:32:78:0f:a8:dc:b7:bf:a2:16:80:29:57:
         9f:23:32:26:bb:72:a0:09:68:0f:3a:45:72:af:4b:b8:94:75:
         5e:56:6f:a9:42:d1:2b:66:c9:94:b3:56:27:2f:5b:ad:17:81:
         9d:6e:90:57:bc:0b:e3:bb:eb:10:b2:b0:64:ef:c0:bd:15:ba:
         c5:a4:e2:76:01:df:93:59:37:05:b4:96:5c:ef:1b:5c:e4:66:
         6a:8b:1e:f1:31:01:d1:9c:c8:d5:af:4f:c0:31:0a:c7:74:e6:
         6d:5e:69:8a:74:f3:66:58:91:72:e7:99:70:8a:c0:4e:d6:24:
         3a:bd:06:01:b0:49:58:f8:8a:4e:d3:87:e7:af:07:f0:c6:0f:
         05:e3:d6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:18 2025 by rpki-client