Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
File:                     Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft (raw, json)
Hash identifier:          BijW5HFPI5hQV2MG5e0PfTbdEPJcuhkzFuuYTPBjNdQ=
Subject key identifier:   6C:6F:0F:89:5D:80:90:F3:52:37:B5:A0:17:60:EA:78:DD:04:6B:E9
Authority key identifier: 45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3
Certificate issuer:       /CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3
Certificate serial:       019747E7BC6D392B6C28F84B9F17A2A7158A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
Manifest number:          0FFF
Signing time:             Sat 07 Jun 2025 01:00:58 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:58 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:58 +0000
Files and hashes:         1: Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl (hash: F85ntqKKWsjQE3lHMD+X7f1UZ/r3tDQvlkqW54YTLRg=)
                          2: o6lJ-qfhS9C09IpxbbRvCOiFoHM.roa (hash: s9YF0YMackzUIop5+kUK7Z2zh1o4IPsYyQyvrXKhSCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:bc:6d:39:2b:6c:28:f8:4b:9f:17:a2:a7:15:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3
        Validity
            Not Before: Jun  7 01:00:58 2025 GMT
            Not After : Jun  8 01:00:58 2025 GMT
        Subject: CN=6c6f0f895d8090f35237b5a01760ea78dd046be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:54:24:7d:52:50:60:b7:61:00:5a:f4:a6:
                    ef:dc:e6:ed:1f:0d:99:b4:00:30:72:2d:28:4e:b0:
                    a6:fc:7d:b4:48:0c:e4:9c:16:39:92:75:9a:2c:91:
                    40:97:67:05:07:a9:96:4a:e7:c8:e6:ed:e9:98:24:
                    1c:eb:ca:76:8c:70:a6:4a:cb:3a:d4:a4:76:38:c1:
                    f6:29:e5:d2:1c:ca:d7:3e:cc:bc:7a:d7:87:a2:d3:
                    cc:15:e6:5c:ba:2c:9c:b1:43:00:8e:b2:60:31:76:
                    73:cb:10:04:9e:b4:d0:cf:4e:f4:e4:bd:d6:9a:cc:
                    bb:ba:77:81:35:6e:8f:cc:c6:bf:94:25:5d:57:87:
                    ba:33:3e:b8:bc:33:b8:17:c3:2f:d8:80:59:0c:b2:
                    98:ef:be:2a:84:e7:7d:29:1e:0f:0a:72:b8:ed:d1:
                    7c:c1:1a:57:61:68:5e:0d:52:42:8d:02:42:92:8c:
                    80:8b:8b:a4:dd:bb:eb:18:68:8c:cb:cf:07:9c:12:
                    05:de:78:56:e3:47:76:c4:65:a5:dd:08:0a:cc:65:
                    1c:a4:a0:42:0b:53:20:d9:e9:1c:c0:07:88:ef:f8:
                    6c:a2:44:62:f9:41:de:d3:ad:a1:16:7f:5b:90:24:
                    64:de:a3:58:2e:4b:fe:0c:be:03:b9:55:58:15:63:
                    f5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6F:0F:89:5D:80:90:F3:52:37:B5:A0:17:60:EA:78:DD:04:6B:E9
            X509v3 Authority Key Identifier:
                keyid:45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:4c:ef:e8:11:54:ef:63:68:62:67:14:65:c1:dd:d8:85:c9:
         a9:7e:b5:88:97:e0:f4:78:c0:fb:b2:c2:bd:34:a7:b3:88:01:
         77:96:e5:87:ee:b1:b9:6a:61:b4:78:86:34:ad:44:e0:1a:b9:
         60:42:df:07:1e:e7:fb:3c:2d:b5:a3:84:f2:69:8f:2e:83:01:
         04:84:19:a9:f4:35:a0:40:6c:57:a7:65:75:cf:79:c3:a7:07:
         87:8a:f6:75:32:c7:1d:e1:4a:c6:ed:2a:6d:b1:e3:e7:0e:15:
         d8:6b:c9:4d:56:f7:9a:3e:36:43:d6:cb:c9:a1:94:23:0f:1d:
         6d:ee:0f:6f:92:72:ee:26:1e:2a:58:a4:f1:cc:df:2e:27:99:
         04:f9:3b:cf:d4:49:58:9a:13:8a:24:7c:9b:e4:7b:b5:ee:41:
         c5:2c:29:e3:7d:96:22:bb:68:af:cb:86:ef:c7:34:11:7f:3a:
         12:cc:ca:07:42:19:3a:f5:7d:a2:62:f0:86:4b:a8:c7:d6:cf:
         80:96:00:24:44:04:b1:04:c4:48:38:12:63:7b:06:64:4c:00:
         d0:80:e8:45:74:eb:7a:70:d6:36:9e:dc:3f:d5:2d:97:e6:7c:
         1f:1e:04:1b:b1:ee:d3:17:a8:36:9a:94:40:33:d0:32:7f:49:
         ed:c0:d2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:34:39 2025 by rpki-client