Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
File:                     484GnfxbYIh21kJKMueDqYqS7_I.mft (raw, json)
Hash identifier:          6a9V5NHTTmr5p1+Enr1O4XBv3HGP4GbqusbF0ITAjKo=
Subject key identifier:   E4:56:E6:8B:77:42:CF:D1:2C:AA:17:CD:67:6F:7C:F5:F1:DE:A5:8D
Authority key identifier: E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
Certificate issuer:       /CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Certificate serial:       019762BA2E9E330049821F4DD13D5DE5E2E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
Manifest number:          0C1C
Signing time:             Thu 12 Jun 2025 06:00:58 +0000
Manifest this update:     Thu 12 Jun 2025 06:00:58 +0000
Manifest next update:     Fri 13 Jun 2025 06:00:58 +0000
Files and hashes:         1: 484GnfxbYIh21kJKMueDqYqS7_I.crl (hash: 5JR0ncjPu0w85+4t94VzO7R6HziyiyDzPPHbaD9cRKk=)
                          2: qcoI9QRYFLMa_u8cjDZFd9W6S20.roa (hash: G2neLmn+8/k9VBrxT3PrvfgosA6NhKRornhd6evsbec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:ba:2e:9e:33:00:49:82:1f:4d:d1:3d:5d:e5:e2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
        Validity
            Not Before: Jun 12 06:00:58 2025 GMT
            Not After : Jun 13 06:00:58 2025 GMT
        Subject: CN=e456e68b7742cfd12caa17cd676f7cf5f1dea58d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5a:a2:f3:a4:1d:42:4e:21:e3:d1:df:cd:6e:
                    2d:a5:a4:19:56:2a:d3:f3:db:f9:7c:8f:ee:ca:b6:
                    32:e0:bd:25:45:b0:2d:92:61:c8:5d:39:cc:38:79:
                    1e:dd:62:51:63:39:2c:bc:2e:ce:99:34:1f:c9:b1:
                    28:33:43:42:45:ab:5b:32:25:74:a2:0b:16:3b:45:
                    ce:9c:d6:68:7b:b0:cd:f3:91:6d:df:2a:fd:7f:0c:
                    ca:e3:cb:ba:ef:74:08:00:57:dd:d5:7d:01:95:4b:
                    ac:00:31:7b:71:65:96:95:33:f8:44:85:e1:32:c6:
                    ba:2c:82:79:d1:03:00:e9:f3:3e:c4:0c:88:9f:ab:
                    3c:40:5c:e6:71:26:9c:c5:8f:86:1b:f0:f3:4f:34:
                    af:0e:70:0e:7a:e4:a2:cb:8c:b9:cf:8b:43:f9:cb:
                    ad:ae:a9:ef:38:f6:df:57:de:86:64:35:c8:11:35:
                    39:29:3a:5c:7b:4a:ad:1c:23:3e:5f:ce:1b:40:22:
                    db:36:fe:a6:f2:1e:71:74:09:6c:1c:ad:b9:1a:11:
                    6a:84:be:a4:c3:64:db:d2:31:21:43:eb:ca:12:d8:
                    a7:f8:34:30:c1:36:ea:33:28:77:f3:ac:54:1a:4a:
                    8f:6e:62:b4:cd:3d:85:ba:94:81:2d:2c:0f:64:1e:
                    b5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:56:E6:8B:77:42:CF:D1:2C:AA:17:CD:67:6F:7C:F5:F1:DE:A5:8D
            X509v3 Authority Key Identifier:
                keyid:E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:7b:74:c7:e7:ff:f8:ce:b6:9c:50:86:03:19:73:e5:73:ad:
         2a:2a:ff:6d:13:c1:f1:f1:12:4e:cd:7f:fb:8b:82:f1:be:ca:
         93:c0:1c:9a:d7:0d:43:b6:90:66:a9:b3:af:ee:de:3d:ee:b8:
         b3:f1:fc:13:fe:48:5f:26:53:54:f8:2a:76:b1:c5:b9:1b:04:
         a9:d6:8c:66:4c:9b:77:6b:28:d1:d6:3e:2b:0c:5d:81:b2:0b:
         ba:2f:d6:1c:3e:40:9a:e7:71:f8:be:fb:00:80:49:dc:db:4e:
         cc:16:40:ed:cc:71:02:01:0a:4e:65:97:c7:33:00:e8:de:7a:
         fc:69:0b:b5:f3:d8:3c:8b:42:82:88:24:da:55:3b:e0:0b:cc:
         ea:a7:03:fe:6d:4f:c8:49:50:c2:f5:2d:2f:ae:20:0d:81:77:
         83:95:47:63:0b:d3:c4:0c:15:42:83:18:a5:33:9d:1f:e0:d6:
         f4:07:06:ba:25:a1:1c:61:59:66:c4:a2:ea:45:23:5d:1f:dc:
         b4:eb:f0:33:2b:ee:8c:4b:fa:a2:ef:69:2e:4e:f6:e2:19:04:
         34:0e:f4:46:0e:4e:d5:12:26:7c:47:8a:0c:98:5d:c6:73:3b:
         c0:f3:12:aa:f3:09:6d:c8:16:b2:79:c7:83:63:1c:ef:ca:60:
         97:85:7a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:32:40 2025 by rpki-client