Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
File:                     k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft (raw, json)
Hash identifier:          IUx3axwHJlsBQ71tF12IIUjWwLl4oWhdfXw0XdLTu/U=
Subject key identifier:   D1:E4:88:C2:27:55:F5:CB:90:CF:57:4C:83:16:D1:33:95:B7:85:74
Authority key identifier: 93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
Certificate issuer:       /CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Certificate serial:       019747E7E5CB5321173B7447DCE8EC642ED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
Manifest number:          04B3
Signing time:             Sat 07 Jun 2025 01:01:09 +0000
Manifest this update:     Sat 07 Jun 2025 01:01:09 +0000
Manifest next update:     Sun 08 Jun 2025 01:01:09 +0000
Files and hashes:         1: eXKi70pVOkSciah0yxPymcceP7o.roa (hash: /QwJ8MrFkVplCOmNYJ6qPcPj5JI/tOF/FJ4aI1f1YYQ=)
                          2: k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl (hash: R2LUfHgtUDCltvPdVoh3p0LrzdZuA9WWEknHGsEyOMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:e5:cb:53:21:17:3b:74:47:dc:e8:ec:64:2e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
        Validity
            Not Before: Jun  7 01:01:09 2025 GMT
            Not After : Jun  8 01:01:09 2025 GMT
        Subject: CN=d1e488c22755f5cb90cf574c8316d13395b78574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d0:07:ce:55:e4:e6:e9:39:f0:14:f8:69:5a:
                    e7:ce:a2:a0:03:07:ea:1f:36:df:8d:fe:43:71:67:
                    8e:9d:dc:02:50:61:c6:cf:73:cf:99:c2:b7:5c:de:
                    96:5c:76:a9:4e:6d:33:61:f5:ad:2b:4e:8e:64:38:
                    5d:9e:c9:f6:e5:a6:a5:e8:9f:74:8c:a2:92:6d:ca:
                    56:6f:1a:55:37:95:3b:11:d4:16:35:e8:b9:82:fa:
                    ec:61:e2:20:52:54:a7:e1:fd:29:22:a3:c2:6a:59:
                    92:19:3c:9e:73:1c:6c:54:60:f6:9e:23:7b:c3:a6:
                    84:c5:e5:e4:54:39:35:20:e7:07:58:b8:63:e8:a5:
                    13:33:e9:37:73:c6:70:08:89:56:d0:cb:cd:60:dc:
                    76:34:08:1c:2c:37:a6:56:e0:99:4c:a1:55:4e:ce:
                    b6:09:60:03:8b:e4:86:02:92:34:ca:73:fc:63:0e:
                    ab:f2:30:12:93:77:0f:f3:f8:4c:3d:f6:40:50:1f:
                    96:ec:18:00:d8:4a:6d:ba:79:ed:23:18:c7:92:91:
                    92:83:2d:6d:0e:cf:6d:80:7d:3c:f7:97:7e:cc:b5:
                    91:41:cc:f1:1f:87:f6:69:cf:18:59:60:1a:81:1c:
                    20:cf:34:05:7a:f4:1f:9b:68:51:fa:65:a1:1f:dc:
                    f8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E4:88:C2:27:55:F5:CB:90:CF:57:4C:83:16:D1:33:95:B7:85:74
            X509v3 Authority Key Identifier:
                keyid:93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:4e:da:f6:ff:63:9c:d2:15:45:9e:f2:55:8f:a9:05:d8:39:
         2c:62:56:62:35:94:dc:e9:20:13:66:21:e3:6a:2c:68:91:bc:
         0d:59:f5:01:49:01:04:00:56:90:00:53:2d:05:a9:89:51:53:
         0a:fa:ca:a4:cc:53:01:31:7b:c9:c4:87:61:7d:2e:b1:af:bd:
         d3:16:27:ba:f1:73:6a:7e:c2:70:1e:65:5c:9c:27:e5:91:4e:
         a8:22:69:c3:11:60:c1:1a:54:73:54:3c:62:68:e3:60:36:66:
         ca:2b:aa:f1:8d:15:51:b7:c8:03:bb:32:bc:66:1f:05:97:1f:
         4c:76:d2:56:e9:ea:65:75:13:51:12:3c:92:c1:fa:b8:58:7d:
         a2:bb:67:28:05:3b:75:de:ac:35:2f:73:ab:28:39:c8:78:05:
         b9:c6:f3:53:cf:b7:0e:09:29:b3:b1:3d:ef:3e:85:ae:46:d0:
         3a:5e:74:b7:9c:39:b4:d7:a8:66:c4:16:a9:47:4e:38:a9:d8:
         01:09:d8:fe:39:02:60:21:31:a0:8b:7a:7c:4a:64:40:5d:7f:
         5d:2d:90:7f:49:a5:ce:af:71:0b:44:45:db:d3:e5:d8:cf:e4:
         3a:5d:c6:b7:ad:8d:f8:07:ac:1b:24:4f:cb:79:a7:64:a5:39:
         14:c1:b1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:18:22 2025 by rpki-client