Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
File:                     CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft (raw, json)
Hash identifier:          igumw/QBbuXnhCxnO6GV3jkBneHMGwO/m3NlS+8kpiE=
Subject key identifier:   FE:8E:AB:24:07:EA:CE:CA:4D:27:FD:76:E9:2F:73:D7:E0:EA:B7:3C
Authority key identifier: 09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
Certificate issuer:       /CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Certificate serial:       019748FA92A8B1EC3E4259EB2A59310B91C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
Manifest number:          0556
Signing time:             Sat 07 Jun 2025 06:01:10 +0000
Manifest this update:     Sat 07 Jun 2025 06:01:10 +0000
Manifest next update:     Sun 08 Jun 2025 06:01:10 +0000
Files and hashes:         1: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl (hash: f/a+S1CG2AhLRR7c21EP1A+XyNArSgqNX8fzikBF/PE=)
                          2: D4WSO03jiEw1kzb7ndTCvZppED8.roa (hash: 91K1tOs91bcoBI4JkBxfYAcoNFaPEkkdbj6eyaYsnvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:92:a8:b1:ec:3e:42:59:eb:2a:59:31:0b:91:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
        Validity
            Not Before: Jun  7 06:01:10 2025 GMT
            Not After : Jun  8 06:01:10 2025 GMT
        Subject: CN=fe8eab2407eaceca4d27fd76e92f73d7e0eab73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:df:ba:1c:c5:eb:8a:91:fd:1d:d8:db:60:4d:
                    61:a6:97:64:ad:5b:d2:b8:99:e0:b6:40:db:d7:2d:
                    ee:5b:c7:80:36:ef:6e:61:4b:e1:1b:59:56:2d:6d:
                    19:50:d8:29:fc:c7:d1:a4:70:f4:49:4b:ee:86:06:
                    c9:fa:38:a1:f0:ef:23:38:7a:d5:0a:c2:11:20:a6:
                    2e:bf:41:27:a2:0d:44:d3:82:c5:f0:97:87:f8:b2:
                    54:9b:60:3d:2d:3a:fe:80:20:10:2b:be:d8:82:75:
                    61:0b:0f:61:2d:c1:e2:1d:7f:0e:7b:40:ac:9d:ef:
                    a4:89:90:b3:b1:2e:60:fb:7a:5e:f3:2d:72:f1:69:
                    9c:65:28:aa:8e:57:dd:6a:92:64:69:3e:5f:61:f4:
                    27:81:11:2a:ac:4c:bf:cb:1e:c1:b0:55:85:29:a9:
                    38:8d:30:a3:47:bc:f1:8f:81:6a:9e:97:52:e3:07:
                    52:8b:3c:4c:c2:3b:42:0b:ca:cc:fc:f7:39:22:66:
                    ed:c6:01:7e:53:87:e6:72:8e:f1:ad:04:79:5e:1a:
                    0e:c5:d5:8e:81:c1:0d:98:bb:0d:74:ab:b5:2d:0c:
                    e6:4c:1a:0a:1e:49:c3:5a:c2:9c:87:3b:8d:74:97:
                    4f:87:9a:9c:9b:5e:cd:12:e4:30:3a:39:9e:58:3d:
                    25:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8E:AB:24:07:EA:CE:CA:4D:27:FD:76:E9:2F:73:D7:E0:EA:B7:3C
            X509v3 Authority Key Identifier:
                keyid:09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:eb:53:60:c0:92:97:a4:66:a6:60:89:85:e9:89:40:33:cb:
         0c:5c:a6:aa:ab:b1:aa:7a:dc:69:89:09:92:e2:67:5b:6a:12:
         b3:00:f4:b6:24:9b:c7:37:35:46:a0:46:44:31:6f:6e:e6:ff:
         80:03:ef:07:1b:a0:28:fc:2c:db:77:53:e2:9e:cf:6b:3e:9e:
         ab:09:6b:6f:87:12:74:c6:1b:4c:e9:6a:e2:90:0f:dd:40:25:
         b0:2b:26:fc:20:99:13:65:7d:25:57:0d:4b:bb:60:69:71:76:
         6d:e8:5d:a0:23:9a:ec:4b:62:fd:c1:c8:54:6e:58:f4:20:e4:
         bf:63:a8:0e:42:84:32:5c:50:0f:d0:73:99:02:70:20:54:c5:
         d3:75:e6:c3:12:0e:5b:4a:4d:a8:49:b2:07:02:ac:d5:72:f8:
         6c:c1:6d:98:4f:09:27:e2:54:e0:4e:6c:10:c5:4e:1e:f4:85:
         d2:be:e9:7d:9d:8e:f3:c1:f5:42:3f:df:ff:7d:2d:8a:7e:62:
         65:6a:93:6a:c6:a3:91:db:f1:9d:3e:fd:52:5b:9a:08:45:01:
         f0:38:94:14:18:2f:51:ac:4b:c2:d8:20:10:9f:a2:6c:f1:48:
         99:6c:76:d0:e6:5a:e3:be:48:be:76:49:c6:d7:28:af:92:43:
         45:8e:12:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:49:27 2025 by rpki-client