Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
File:                     cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft (raw, json)
Hash identifier:          O+GfMNVpoJTUSgg2kzTKD8uYC+pf4YpMxFWmHklnzMU=
Subject key identifier:   00:F6:FC:F0:FA:52:2A:BA:EE:65:6B:AE:59:BA:C8:04:5F:D3:4F:6D
Authority key identifier: 72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48
Certificate issuer:       /CN=72e13915fa1bc579f5856f58ecb24786379a5d48
Certificate serial:       019753473A171B6E41C5AE994D6ABF88F130
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
Manifest number:          3A
Signing time:             Mon 09 Jun 2025 06:01:06 +0000
Manifest this update:     Mon 09 Jun 2025 06:01:06 +0000
Manifest next update:     Tue 10 Jun 2025 06:01:06 +0000
Files and hashes:         1: cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl (hash: rx4ahSIACvw+Uzr9FC4ShGF+Uty3PEWCfJM0YP7KdsQ=)
                          2: xhxuKJYrPBlCKVgSSZLbkArXr9M.roa (hash: eBW3Gn9+jBJu0tA7uYFfIKZTT8p/0XeRa4Z67cWs8N8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:47:3a:17:1b:6e:41:c5:ae:99:4d:6a:bf:88:f1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e13915fa1bc579f5856f58ecb24786379a5d48
        Validity
            Not Before: Jun  9 06:01:06 2025 GMT
            Not After : Jun 10 06:01:06 2025 GMT
        Subject: CN=00f6fcf0fa522abaee656bae59bac8045fd34f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0c:f0:ef:c4:6a:44:a8:74:d3:d9:09:2e:af:
                    6c:ba:d8:69:81:4e:1f:cb:59:78:c0:61:77:e7:f5:
                    1c:48:b1:c2:c6:03:90:19:06:e0:8e:58:de:10:0a:
                    a0:21:01:9e:66:2f:4a:65:aa:c8:da:e9:22:5e:75:
                    c1:92:6f:a5:d7:d3:ea:8d:17:9f:58:64:b4:16:8b:
                    d8:df:54:26:d3:89:e4:38:4d:00:99:7a:eb:7a:5a:
                    80:c9:2d:a3:b7:6a:2c:09:95:d6:cb:4b:f2:92:75:
                    1a:06:0f:b9:80:a1:56:fe:d4:b4:d0:1b:65:0b:b5:
                    ff:af:9d:f2:62:67:2b:d7:39:52:2f:67:73:4a:7d:
                    37:d6:79:e5:de:7f:90:bc:eb:de:16:32:9f:a7:12:
                    b9:1c:2b:c5:fb:53:8a:65:b3:c9:d9:2f:8a:03:db:
                    f8:f9:39:63:41:3d:17:01:44:f8:0c:8b:86:80:25:
                    04:e6:16:23:a3:3a:af:18:78:80:ca:21:81:4c:41:
                    26:25:d3:d1:7f:b3:e3:a3:04:c0:80:e9:24:29:13:
                    04:a4:51:50:83:c7:10:d6:53:14:3e:0f:10:4d:c8:
                    e3:27:4d:31:cd:e4:6c:93:c7:95:ee:11:77:e9:a4:
                    d2:37:fb:60:2b:e4:63:86:14:d0:5e:8a:17:c9:c6:
                    48:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F6:FC:F0:FA:52:2A:BA:EE:65:6B:AE:59:BA:C8:04:5F:D3:4F:6D
            X509v3 Authority Key Identifier:
                keyid:72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:34:1f:b1:26:61:24:15:70:31:83:e0:f6:1d:f4:5e:03:23:
         fb:95:dd:f6:dc:f8:bb:c3:e8:a8:50:78:81:61:2e:71:d6:ac:
         8c:ee:b2:75:73:19:e2:ca:e8:ac:0f:ca:47:84:06:8f:cd:27:
         0c:2c:61:02:40:e0:e1:08:bf:9e:47:cb:cd:bf:7a:3b:1b:4a:
         3b:7c:c4:34:c2:06:a7:6e:a2:20:58:dd:2f:1e:b5:7c:7a:df:
         f3:7d:09:1f:bb:ad:04:34:f9:41:90:d7:cc:61:13:9d:35:81:
         93:38:7f:b5:08:cf:c9:3d:2b:0e:80:e4:db:fd:d9:f7:37:14:
         8f:e5:0d:83:cf:68:19:24:e3:d5:20:a6:61:e3:2e:6c:71:39:
         1b:08:f5:55:68:99:fe:72:ba:d4:dc:8c:c1:24:4f:a0:f5:9a:
         c1:3d:12:0b:88:8b:ab:c9:66:91:5d:64:1e:43:ee:db:56:01:
         1a:d4:5d:45:d2:95:4e:14:b1:11:8e:15:5e:e0:4e:a1:64:f2:
         25:2e:b0:a3:af:11:d5:f9:09:b0:7d:6b:00:47:f7:ff:9b:2b:
         8f:52:ff:ea:d5:60:7d:92:80:ac:97:81:7c:97:52:bd:38:e5:
         b6:ef:39:62:d0:b8:e9:64:54:9d:33:26:62:90:2e:17:4a:58:
         43:f4:51:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:54:26 2025 by rpki-client