Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
File:                     CBG8UM_tnQLlgZaiyByYjjC6EmA.mft (raw, json)
Hash identifier:          kCPzJLDxVV2hBrL14/WOjGQeH0TUa4cFKk4t19JabNM=
Subject key identifier:   9D:47:8C:4F:1E:C7:FA:DD:C7:9A:EF:E4:01:BA:F1:8F:5D:2E:6D:FF
Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
Certificate issuer:       /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Certificate serial:       0197605DB31A53B90BF017ABADF44753CD50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
Manifest number:          1589
Signing time:             Wed 11 Jun 2025 19:00:42 +0000
Manifest this update:     Wed 11 Jun 2025 19:00:42 +0000
Manifest next update:     Thu 12 Jun 2025 19:00:42 +0000
Files and hashes:         1: CBG8UM_tnQLlgZaiyByYjjC6EmA.crl (hash: 9NgmaeSTyMjdQiLhYFza3xA0dMIeIUurxz2aLgxHfco=)
                          2: mWwPnP2S4g9JhxWYKKryZjEy1Ao.roa (hash: HyXUe+PYjqIKyOZOZZRdFXR1ckNBvzFOngXjiDgbrBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:5d:b3:1a:53:b9:0b:f0:17:ab:ad:f4:47:53:cd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
        Validity
            Not Before: Jun 11 19:00:42 2025 GMT
            Not After : Jun 12 19:00:42 2025 GMT
        Subject: CN=9d478c4f1ec7faddc79aefe401baf18f5d2e6dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ad:08:c2:95:cc:45:45:ac:a6:85:14:27:b1:
                    29:70:b5:4f:80:db:3b:d6:12:12:98:a7:cd:65:50:
                    91:15:89:8b:71:2a:93:ee:10:75:f7:98:61:88:bc:
                    1d:96:b3:ba:b6:66:a9:46:63:36:0b:49:41:80:3c:
                    e7:aa:aa:14:e1:06:d7:11:4b:73:0e:58:5b:f0:14:
                    aa:43:d1:b2:ca:1b:56:10:e9:94:6a:c2:76:e6:fb:
                    dc:74:3d:61:c2:d3:6e:11:bf:12:58:d2:35:4a:88:
                    0f:c4:7e:4d:15:52:0a:20:54:a7:fe:30:6c:89:5d:
                    75:87:eb:18:a9:b5:36:f7:aa:59:b6:3c:7a:d1:75:
                    f1:5e:2a:55:ff:b3:dd:1a:2f:1a:f1:4c:ba:5c:21:
                    a3:04:38:bd:fb:37:0f:d7:cd:26:46:02:8a:c5:fc:
                    c0:1f:1a:b7:d5:f9:53:cd:60:4f:cc:a6:23:f2:6d:
                    1d:c1:26:01:71:9d:b0:61:ea:8c:a8:2a:55:5f:03:
                    6d:de:c2:50:38:05:14:e5:e9:be:07:07:d5:be:0a:
                    d6:ff:0f:76:9f:0f:15:fd:b2:3f:01:74:95:b9:2c:
                    9f:c0:a6:22:8f:5f:c3:5c:4a:f1:ad:9a:48:5a:1d:
                    80:5d:b0:8d:33:bd:ac:28:c6:b0:98:e0:33:40:1e:
                    e5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:47:8C:4F:1E:C7:FA:DD:C7:9A:EF:E4:01:BA:F1:8F:5D:2E:6D:FF
            X509v3 Authority Key Identifier:
                keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:3d:37:35:a7:a1:e7:dd:0e:e1:d7:20:e8:b4:f3:48:e9:77:
         2e:59:5d:ba:4b:b7:0f:be:66:d1:a3:dc:d6:de:e4:3b:53:cc:
         1f:ac:2d:6f:3a:be:2b:66:6e:ed:57:53:06:24:27:d0:5f:fc:
         6a:2e:c0:84:fa:43:16:08:e1:a6:af:b1:3b:f1:f9:81:1c:a8:
         c0:1b:c6:69:a4:60:56:ee:0f:47:58:74:66:84:3f:ca:7f:9a:
         73:b7:be:d0:da:a8:60:87:7f:1f:df:42:ce:78:fb:6f:50:c5:
         8c:01:9b:01:b0:32:a3:8b:9b:2f:d2:14:3e:68:24:5c:89:cb:
         89:96:fa:4f:f0:72:b2:27:b4:00:87:87:c6:c2:57:54:bc:b9:
         74:f5:09:16:6c:2a:d7:e2:ce:3e:43:71:19:e8:f2:3f:57:ea:
         96:8e:be:50:9c:09:4b:97:96:6b:47:3b:da:aa:ae:fb:0b:67:
         eb:28:15:38:15:9d:05:49:06:f8:a0:28:ff:a5:53:95:20:95:
         04:39:ed:42:93:a6:4f:8f:2c:b9:a4:27:31:9c:a9:55:e3:e9:
         4c:b1:c3:b3:c9:ed:77:13:24:d3:fa:90:15:2d:ae:8e:ad:fb:
         3f:16:8e:7c:ab:4f:c2:79:ac:c4:68:44:7b:4d:99:7c:06:33:
         df:53:47:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 01:35:18 2025 by rpki-client