Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File:                     bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier:          ul7WlkIUU9mSfnjR/+7uc2SozkECa2/9Uu6jHpEP5cs=
Subject key identifier:   2C:00:A8:7F:0F:EB:B6:E8:3F:80:F7:EB:F8:CC:A9:54:CB:FF:E7:F1
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer:       /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial:       01974779FB1B265362EFD6B7CD2AE8993BEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number:          1360
Signing time:             Fri 06 Jun 2025 23:01:05 +0000
Manifest this update:     Fri 06 Jun 2025 23:01:05 +0000
Manifest next update:     Sat 07 Jun 2025 23:01:05 +0000
Files and hashes:         1: 4fkynkxl95431dIe-ABsA7v5RCg.roa (hash: EGfFvZoQzCGUyDaxbnd+O3QTAMwiWmSgrk3gdk+vKlc=)
                          2: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: wSjx4aE/5zhYO8vdE2wraIz3WtXrbAprezPy5WpxP8k=)
                          3: lgA3OzlgN5mO-phBlXIn8VKgG_E.roa (hash: FrDJm2Vh5IZpvHu6Ip1jtuiPOr7jqRjxluv8XgGr48o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:fb:1b:26:53:62:ef:d6:b7:cd:2a:e8:99:3b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
        Validity
            Not Before: Jun  6 23:01:05 2025 GMT
            Not After : Jun  7 23:01:05 2025 GMT
        Subject: CN=2c00a87f0febb6e83f80f7ebf8cca954cbffe7f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:61:88:0a:af:32:03:50:9c:2f:35:ee:e0:
                    0e:20:ac:86:31:a8:bd:08:26:22:60:41:09:05:55:
                    2b:d9:49:c6:1b:af:b3:d3:69:93:a8:ed:d2:b0:b9:
                    49:6f:ee:54:c1:2d:5f:42:98:63:aa:ec:44:8b:b4:
                    53:ef:c0:39:de:db:ab:86:a9:66:39:12:0c:ee:df:
                    5f:eb:60:d6:b1:d1:34:80:f1:84:c4:23:b9:df:a5:
                    ff:2a:8c:1e:83:3f:fd:2d:f5:90:b8:cc:61:8f:e1:
                    d3:45:b2:8c:6a:15:46:51:25:1f:7f:ca:ff:8d:18:
                    a0:b3:9c:f9:60:3b:7b:9f:d4:bc:6c:aa:16:ba:82:
                    c9:5e:ed:da:09:77:4b:e9:1d:d9:ea:c4:ba:03:4a:
                    d6:76:be:ca:61:da:a4:d3:bb:93:f6:7b:cc:74:ef:
                    50:f9:b6:c4:7d:8e:b0:86:56:55:2a:1b:66:41:22:
                    a0:97:e8:c9:a7:38:a2:b9:9e:82:14:16:38:3b:f8:
                    5f:47:b2:e1:5c:b9:0b:73:d9:6f:88:cc:eb:a0:31:
                    a0:08:7d:61:c7:4a:d2:47:7e:f7:d9:ab:34:7f:73:
                    75:68:07:6f:af:cc:a7:e2:55:4b:c4:df:60:78:01:
                    f5:b0:4a:dd:b7:ad:76:8d:27:82:33:d7:d7:74:11:
                    9a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:00:A8:7F:0F:EB:B6:E8:3F:80:F7:EB:F8:CC:A9:54:CB:FF:E7:F1
            X509v3 Authority Key Identifier:
                keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5c:87:a4:b6:00:65:e2:29:65:d8:3b:b0:72:ef:e4:cc:0c:
         2e:7f:2b:88:5c:be:41:d6:0b:9c:cc:77:cb:fc:77:a5:e8:97:
         bb:e5:f7:28:bb:fb:a7:17:9b:3b:48:a0:05:70:ce:89:94:06:
         02:34:cb:67:a4:f6:8a:3a:ae:7b:a9:16:b0:c1:a9:cb:61:a6:
         65:29:e6:42:43:5a:5e:83:1f:3c:91:47:65:ad:56:c1:89:50:
         f1:f8:61:6c:3a:45:f2:13:4b:31:c6:2c:43:da:e7:6f:56:ad:
         67:2f:04:e0:dd:4b:bc:82:89:e6:8e:c0:48:83:59:f0:83:e0:
         a5:e5:79:f5:9f:13:11:48:54:9c:90:f4:55:13:e7:71:fb:02:
         d2:27:6e:e0:a5:78:69:42:bf:52:43:6d:54:ec:7f:75:cf:61:
         c4:0c:35:a9:55:b6:55:a5:64:02:08:da:d5:50:b4:06:4e:c2:
         43:44:4d:38:0f:49:30:a6:bd:a8:6f:74:a9:ca:59:0f:53:8e:
         bd:0f:12:b6:1d:b4:54:a9:75:6a:f6:ab:dd:61:d9:13:f5:69:
         d2:11:10:c6:b8:d2:9e:9e:e8:f1:20:99:04:70:2d:b4:f5:a6:
         cb:04:31:b2:df:38:fa:3d:12:b3:42:fb:88:2c:05:1a:e2:35:
         06:43:11:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:00:55 2025 by rpki-client