Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
File:                     Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft (raw, json)
Hash identifier:          jQzu6tK/fKlVKXpU5KTi83xHVMU6Gn7RgVa8mqDe/7g=
Subject key identifier:   82:1A:47:C6:24:45:AB:BD:61:6D:6C:77:76:4E:16:49:58:B8:5E:C5
Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Certificate issuer:       /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Certificate serial:       019748FA22A805BC0BF1CE375B3A62010B15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
Manifest number:          12B5
Signing time:             Sat 07 Jun 2025 06:00:41 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:41 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:41 +0000
Files and hashes:         1: 2WXmLCsyw8fMc90USjqmpJq_P0k.roa (hash: X6trTAm4sd1BCoRMyM8T/lu1+HYVfbsSp9+0QPBx8Ps=)
                          2: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl (hash: 4G6YrNXp384WWJ1MdEHiHfqTisoU9YFidzNLtwK2rGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:22:a8:05:bc:0b:f1:ce:37:5b:3a:62:01:0b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
        Validity
            Not Before: Jun  7 06:00:41 2025 GMT
            Not After : Jun  8 06:00:41 2025 GMT
        Subject: CN=821a47c62445abbd616d6c77764e164958b85ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:71:e2:08:3e:99:f5:bf:bd:3c:cc:ad:d7:74:
                    6d:49:27:9b:54:f3:de:61:17:ea:74:ef:8d:14:ba:
                    0d:2c:06:13:ce:ac:42:80:83:63:b0:c8:96:c2:25:
                    17:75:5a:e1:60:7b:ad:85:b3:de:ea:dc:81:e2:cd:
                    95:ef:1c:07:07:03:3c:2d:b5:0d:47:8b:00:b3:9e:
                    94:6f:e1:56:ca:41:0d:83:dc:fc:a5:d4:6f:cf:50:
                    5a:b4:ee:e2:65:10:e0:aa:0b:86:b2:44:1f:f5:12:
                    b8:0f:65:9b:bd:aa:f0:e9:2d:0a:cb:fb:5a:2f:27:
                    49:5f:52:54:4f:4a:c2:de:01:0c:4c:dd:c5:b3:7a:
                    62:65:f7:8f:0a:71:e6:b9:57:4d:eb:85:44:a4:60:
                    4f:32:06:f4:49:96:5a:2a:67:31:3b:bb:a5:ed:a3:
                    b3:b1:df:58:91:4b:f4:0c:34:eb:ab:39:ce:64:d3:
                    b2:ff:c8:60:e8:84:24:e5:d1:27:97:4c:99:31:c4:
                    13:43:62:d4:d5:4c:a1:ad:b9:c8:5d:c7:13:bc:2b:
                    3e:a1:05:3b:9b:0a:57:1d:59:fc:d4:68:39:29:0b:
                    b1:ee:60:a4:56:fc:6c:02:4e:67:24:d5:30:b9:96:
                    22:8b:18:d9:79:4d:89:81:a8:36:e4:a9:33:7c:49:
                    df:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1A:47:C6:24:45:AB:BD:61:6D:6C:77:76:4E:16:49:58:B8:5E:C5
            X509v3 Authority Key Identifier:
                keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:76:69:01:95:6e:1f:91:8c:3f:16:c1:b0:33:63:c9:09:76:
         4a:33:4b:c1:1a:55:63:fa:ed:98:b0:81:e2:2e:b7:47:22:e7:
         7a:ac:1d:16:0b:83:cc:85:87:4d:4f:96:18:34:26:36:82:01:
         19:f1:0d:3f:14:bd:9a:37:d8:8c:2a:f1:99:2e:23:b9:b2:f9:
         bf:e2:30:64:0c:67:ea:53:97:c3:d8:f2:59:ef:a4:a1:37:52:
         2e:b3:d8:ad:51:d1:b8:e6:ae:32:4f:07:4e:67:b3:8f:7b:32:
         2d:47:77:6f:a3:a1:b5:4a:19:54:6e:63:87:b3:ef:e1:c0:48:
         0a:16:f2:d6:73:35:84:da:50:9a:37:ad:bf:6c:d7:eb:c5:4d:
         74:13:85:26:5f:d1:4e:1e:32:0e:ba:6b:89:00:63:1e:d2:fd:
         71:43:27:5a:40:30:98:d2:08:89:c1:c5:6b:5a:d5:06:a6:c5:
         58:74:2f:7a:a9:6b:62:46:ca:9f:ae:65:d9:1b:30:6b:91:00:
         13:4d:65:59:a7:8a:6d:e2:fa:cd:b0:df:37:1f:f3:78:53:02:
         53:55:e2:e4:52:61:a1:e0:b0:d6:0b:98:79:52:5a:c8:65:20:
         13:9d:c8:49:20:77:af:6c:b5:36:39:1e:e3:68:fa:4a:c0:2e:
         5d:73:04:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:15:06 2025 by rpki-client