Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
File:                     a4us2V8fS9Z1Un0ybSmZVoYsMho.mft (raw, json)
Hash identifier:          gqRC34EBKOxtKons0VTm9vYSfyNGrRkPCZpjG2sgNdA=
Subject key identifier:   96:C8:1D:AC:3F:E2:B5:E6:83:D6:C2:4E:0D:19:BF:FC:23:EB:0C:F7
Authority key identifier: 6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A
Certificate issuer:       /CN=6b8bacd95f1f4bd675527d326d299956862c321a
Certificate serial:       01974D4492052912BC0D8F084C2831DB737D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
Manifest number:          101F
Signing time:             Sun 08 Jun 2025 02:00:28 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:28 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:28 +0000
Files and hashes:         1: a4us2V8fS9Z1Un0ybSmZVoYsMho.crl (hash: DL+CoAMGPeIRRRKCIPF5I+GaNNsm7imgNois22Soyto=)
                          2: pWHDIdvugLu8Y51LeZtocP5HOcI.roa (hash: fyvGZubWInNshv6PvFcn8DVCaqecv6kcINe/lSRIemw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:92:05:29:12:bc:0d:8f:08:4c:28:31:db:73:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b8bacd95f1f4bd675527d326d299956862c321a
        Validity
            Not Before: Jun  8 02:00:28 2025 GMT
            Not After : Jun  9 02:00:28 2025 GMT
        Subject: CN=96c81dac3fe2b5e683d6c24e0d19bffc23eb0cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9a:8e:5d:c3:82:cc:1b:a2:45:ce:6e:b6:e3:
                    ef:10:59:75:0d:2d:ed:e8:32:dc:2d:be:56:bc:e8:
                    fd:3e:31:a8:8b:ef:4f:1c:62:70:4d:be:59:45:db:
                    ac:87:d6:c9:82:00:61:14:4c:d0:cd:3a:9b:17:71:
                    7b:f0:5e:ce:98:62:2a:49:28:0e:7f:75:12:14:8f:
                    6b:05:75:2d:f3:e8:e7:eb:0d:81:40:d7:28:88:50:
                    5c:25:20:e7:22:d0:71:00:da:10:7a:9f:5b:62:77:
                    2b:bd:b6:3c:9c:9c:51:e7:0a:67:eb:39:61:ee:ef:
                    e6:35:4a:85:8c:51:a7:7b:d6:b1:75:73:73:e4:95:
                    f5:c6:cd:d0:c4:74:3c:9c:16:94:09:26:a1:eb:e9:
                    be:1a:c9:70:c6:24:75:34:f0:6e:fc:b7:f1:7c:9c:
                    c6:c9:c4:1a:7a:0d:b7:bc:63:c9:4b:5b:35:20:e2:
                    01:20:dd:bd:e8:58:3d:95:7c:73:ab:70:76:7b:7e:
                    96:f9:12:35:6b:8a:f9:9f:b0:61:c0:1e:27:51:33:
                    6c:78:3f:a7:8a:4a:0c:58:78:c2:ba:c4:da:c6:f8:
                    dc:3c:49:5f:c8:83:a0:0d:e1:a5:b5:a8:19:d4:6d:
                    93:bf:87:9a:b4:9b:30:3b:9e:de:31:27:d8:31:cf:
                    a4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C8:1D:AC:3F:E2:B5:E6:83:D6:C2:4E:0D:19:BF:FC:23:EB:0C:F7
            X509v3 Authority Key Identifier:
                keyid:6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:9e:bc:ec:ef:45:4d:c5:3f:53:d6:38:9b:af:37:5b:df:c6:
         f6:b6:16:c2:1a:83:31:50:ec:92:29:9d:0d:b2:ca:99:69:a1:
         a3:88:f3:e9:eb:7b:46:fd:04:04:6c:61:8b:6c:41:5b:78:a4:
         a4:71:4c:95:93:c5:52:6c:0f:f5:c3:d6:75:35:2d:70:21:8a:
         35:29:ff:97:9d:f1:93:b0:0b:dc:c7:7e:88:b3:14:f2:59:f2:
         0d:bd:0a:92:53:82:50:91:1d:ee:7c:e2:1d:4a:b2:f9:c9:21:
         70:0f:fd:cd:12:c3:b7:91:61:d0:39:de:0e:05:45:73:e2:56:
         ed:8a:b3:91:3f:2b:6c:45:90:f1:61:69:94:8f:ad:fa:d3:4f:
         a4:92:77:7d:83:b3:e7:b9:6c:8d:83:a1:0f:bb:b2:c6:04:d2:
         09:31:e8:97:6d:8a:19:ac:cd:8e:fc:8b:c5:cd:63:33:06:6d:
         f6:6b:98:f5:ab:d7:f0:37:d6:6c:35:5c:01:e2:e9:31:75:7b:
         29:f6:ba:8e:2c:f7:13:2f:a4:9d:29:0b:84:ad:b5:99:cc:81:
         6f:44:82:c6:b2:63:03:25:19:a0:cc:52:ab:6d:14:46:b2:93:
         55:f0:b8:e1:b6:90:ba:12:99:1c:4c:ee:87:30:b4:d9:c7:b2:
         38:c8:d0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:18:11 2025 by rpki-client