Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
File:                     xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft (raw, json)
Hash identifier:          w2wrZLI+kG2f4sLaRY2wDtlmuzqbiYkPdbEd4arGYAQ=
Subject key identifier:   80:DC:E1:D3:9D:DA:EF:81:20:E0:20:C7:D4:E6:8E:7B:B1:68:86:38
Authority key identifier: C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59
Certificate issuer:       /CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
Certificate serial:       019748C33BD4576DCA9A7E96843E0280AF34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
Manifest number:          04B3
Signing time:             Sat 07 Jun 2025 05:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:43 +0000
Files and hashes:         1: IiIPmmM-nxlvi6X_BDwclVK8nN4.roa (hash: 70bCr4c8aponltkSleoGsfNe8bySTBqaNCakdvrbnEM=)
                          2: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl (hash: mxxocTSg8HimuVi9RQEEELxlxfSxbhx9ewyCJzkFDeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:3b:d4:57:6d:ca:9a:7e:96:84:3e:02:80:af:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
        Validity
            Not Before: Jun  7 05:00:43 2025 GMT
            Not After : Jun  8 05:00:43 2025 GMT
        Subject: CN=80dce1d39ddaef8120e020c7d4e68e7bb1688638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:33:31:bd:a2:55:2c:d7:6d:5f:12:03:80:8f:
                    94:46:1c:7a:bf:4e:99:9b:51:62:7e:b4:20:d1:37:
                    0b:d9:6f:a0:84:cf:d9:17:ab:85:cd:87:98:02:cb:
                    83:1c:8e:63:43:2e:69:ee:90:4c:76:61:2b:02:e8:
                    37:d1:93:97:d1:5b:0d:d7:cc:e6:46:d3:97:89:e1:
                    b8:98:1e:4a:7a:71:da:2d:b8:c4:3b:96:d5:1e:0c:
                    7a:00:30:41:d2:c5:aa:01:af:89:08:54:9a:67:63:
                    22:67:3c:89:81:3f:68:54:be:65:c1:6e:39:f0:2a:
                    41:3a:fa:d7:a6:f8:d2:2c:8f:87:cc:5c:cd:a6:75:
                    8f:b1:cf:ad:93:a9:d9:18:66:c7:b5:7d:68:35:34:
                    3e:fc:c7:a2:a2:3b:db:b3:85:5e:76:25:1b:b6:be:
                    e1:d5:25:ba:fa:1a:ba:26:13:ac:a1:e8:02:43:a3:
                    09:23:41:5b:37:a2:1e:89:e7:db:12:32:bb:17:3b:
                    33:09:f3:70:8f:ae:ba:ea:55:77:ab:41:3d:06:58:
                    7e:ad:a3:89:92:f9:86:43:de:8e:c0:f5:98:10:3d:
                    00:74:71:b5:e1:1e:79:75:c4:f7:69:ca:55:bd:e2:
                    16:4a:98:49:5d:61:63:f5:10:38:11:dd:25:26:5c:
                    22:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DC:E1:D3:9D:DA:EF:81:20:E0:20:C7:D4:E6:8E:7B:B1:68:86:38
            X509v3 Authority Key Identifier:
                keyid:C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:44:1c:bf:ce:16:d7:50:2e:cf:54:77:c9:8b:c4:86:97:e4:
         ce:cf:15:5c:dc:a8:61:9c:05:32:4c:66:c4:ef:8e:c7:8c:aa:
         6a:6b:a2:c7:6e:34:05:01:90:d4:cb:58:70:af:b0:40:2c:53:
         aa:a0:13:72:08:4e:5d:33:fd:5c:1c:f6:1b:19:f7:86:25:0d:
         b4:01:0c:3a:03:77:54:c6:9e:79:90:e6:20:a2:8e:f0:24:17:
         83:dc:04:93:94:51:0f:03:93:59:18:ac:b4:1e:40:38:21:b4:
         11:f2:8a:a4:a5:0a:83:fd:c7:37:6a:6e:aa:b0:7b:32:ce:4d:
         ec:de:5d:9b:9c:c3:6e:4c:ba:3f:ec:dd:08:55:a0:1c:44:7c:
         7b:8d:6b:45:bb:ee:cf:46:ba:b5:b0:ed:91:b2:8a:c0:99:a1:
         4e:e9:70:b5:20:a4:8e:37:b5:7f:29:78:d2:66:d7:39:b3:39:
         85:60:07:9b:a5:72:13:e9:85:42:85:1a:03:b6:92:b6:37:3f:
         4b:43:68:c2:10:92:51:48:03:49:6a:29:a5:52:eb:e2:d2:1d:
         a0:4a:85:5d:64:f3:66:29:8a:e7:84:51:02:0b:ae:a2:8e:b4:
         6b:63:ce:03:db:fc:56:05:f3:23:43:0f:b1:85:4e:22:44:19:
         ee:bd:0d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:46:33 2025 by rpki-client