Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
File:                     C6BoSDrLyWox4ovNpUu-r-NILRk.mft (raw, json)
Hash identifier:          NZmFXdAMA3CS88tBgFMdChfofBnRwhPIY9ofvduMhY4=
Subject key identifier:   D1:73:49:94:64:D0:30:EF:B8:3F:3A:19:55:2B:A4:DD:88:D5:A8:FA
Authority key identifier: 0B:A0:68:48:3A:CB:C9:6A:31:E2:8B:CD:A5:4B:BE:AF:E3:48:2D:19
Certificate issuer:       /CN=0ba068483acbc96a31e28bcda54bbeafe3482d19
Certificate serial:       01974779DFBA5A429764C416A4D549E1272B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
Manifest number:          157B
Signing time:             Fri 06 Jun 2025 23:00:58 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:58 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:58 +0000
Files and hashes:         1: C6BoSDrLyWox4ovNpUu-r-NILRk.crl (hash: UDVbBSA8CvHPpnTfnzJ5cmO36q9ZQER6ZpMU+IXEsLI=)
                          2: YZzAhQaL88-jCpJ3mBWG-64btDU.roa (hash: RCtjkx1poAnNZoTiswLMPNgLTI2laFXye8HspCS+ElI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 23:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:df:ba:5a:42:97:64:c4:16:a4:d5:49:e1:27:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba068483acbc96a31e28bcda54bbeafe3482d19
        Validity
            Not Before: Jun  6 23:00:58 2025 GMT
            Not After : Jun  7 23:00:58 2025 GMT
        Subject: CN=d173499464d030efb83f3a19552ba4dd88d5a8fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4d:71:74:a7:d0:6b:47:a4:7d:21:db:10:4c:
                    46:d0:4b:e2:be:d2:16:7d:c0:d4:6b:38:47:75:1e:
                    83:b7:3d:a3:8b:86:89:a3:0d:18:4f:72:cf:8f:d5:
                    ed:0f:e4:f0:4f:8c:dc:8e:d5:47:07:59:b8:ca:a7:
                    f9:a4:cb:35:e6:c9:e8:50:36:5c:8e:4b:7c:37:9d:
                    ba:fe:51:ab:32:0f:2b:4d:5d:87:3a:56:02:84:68:
                    b1:38:b6:35:29:a4:b7:c3:44:f5:8c:29:62:f6:2c:
                    c8:d0:93:18:63:47:de:28:8e:31:42:92:f4:27:38:
                    e1:2e:c5:a1:6b:51:e4:cc:aa:96:8e:b3:df:85:c3:
                    70:49:ff:09:65:ce:c1:b2:6b:49:a7:fc:a1:72:c1:
                    05:17:b9:9e:97:06:5f:55:e7:b0:18:61:04:31:43:
                    21:8d:2f:b7:d2:c4:fb:3b:e7:c0:99:59:ba:2d:9e:
                    93:5e:25:c3:a9:5e:74:16:a5:23:8c:df:c3:c9:0a:
                    26:e0:52:b3:10:c3:2b:10:77:e4:11:f7:27:ae:84:
                    ae:b9:94:ac:45:c0:e1:21:78:d4:37:6a:9d:a0:62:
                    c5:2a:b7:57:fa:3c:7e:50:b8:c8:1b:dc:60:52:9c:
                    e3:53:d9:3a:c1:14:58:48:c4:9c:60:91:53:74:f7:
                    f0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:73:49:94:64:D0:30:EF:B8:3F:3A:19:55:2B:A4:DD:88:D5:A8:FA
            X509v3 Authority Key Identifier:
                keyid:0B:A0:68:48:3A:CB:C9:6A:31:E2:8B:CD:A5:4B:BE:AF:E3:48:2D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:bf:8f:0d:40:89:62:a9:37:d0:21:a0:dc:29:8f:71:5e:27:
         1e:57:c5:1a:f0:ba:3b:72:92:34:a2:5d:e1:2b:3d:04:98:5c:
         3d:21:83:54:33:88:fa:c3:03:e0:e1:d9:41:72:b6:a7:cd:42:
         08:f1:8a:c9:35:ad:c6:a1:95:f7:37:e4:c4:33:78:69:61:0e:
         e1:1c:a7:1d:78:39:13:3f:ba:e9:f6:94:c5:8f:20:00:ca:fc:
         68:ec:12:90:a7:7a:e2:41:b5:b5:52:62:42:3a:f8:44:51:19:
         3a:aa:c9:ca:a1:ef:69:83:f9:48:65:04:66:5e:41:6b:e0:eb:
         2c:ea:f5:d2:7a:b7:65:ce:04:fc:ac:51:25:03:65:26:3e:73:
         95:a1:df:78:14:b9:66:42:7d:68:01:11:93:86:ee:0e:ec:ee:
         4c:f1:cf:e5:90:33:ff:dc:3c:97:18:6b:87:7b:37:0e:10:af:
         cd:be:e4:df:85:d9:2c:8f:c5:ea:48:72:55:f1:93:8b:ce:f0:
         2a:da:fd:78:59:a0:60:a3:e2:5c:d8:d9:dd:27:81:92:43:c9:
         cc:1b:d5:0f:89:3b:20:a5:23:07:d9:92:bf:ac:f7:23:e1:38:
         e8:f2:b7:69:cd:69:b2:30:7f:fc:c8:de:d1:e3:81:a6:e2:98:
         0f:e4:d7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:56:55 2025 by rpki-client