Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
File:                     C_4rJzg320FmbWipe8esN9zJbyA.mft (raw, json)
Hash identifier:          UF08M6HP7yUaHUREDvH3BvTHnDMXhEqEEivNhTNKTuA=
Subject key identifier:   B0:9E:00:DC:C1:19:6A:25:34:B4:E8:DD:78:80:F0:58:35:B9:F1:84
Authority key identifier: 0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
Certificate issuer:       /CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Certificate serial:       01974EC5D5306C52D80637B94456EEC51E77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
Manifest number:          034C
Signing time:             Sun 08 Jun 2025 09:01:17 +0000
Manifest this update:     Sun 08 Jun 2025 09:01:17 +0000
Manifest next update:     Mon 09 Jun 2025 09:01:17 +0000
Files and hashes:         1: C_4rJzg320FmbWipe8esN9zJbyA.crl (hash: xhhrLhsV9/5iiCClZQu5U5fyh9qUsirBfVQlCd8IiQY=)
                          2: lBowDCcGSdkP56eGU0lPL4u_SEM.roa (hash: j0fleVV6sjY4GNZzRXgYAIbJa3v2es0FQGzI6ZY2suc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:c5:d5:30:6c:52:d8:06:37:b9:44:56:ee:c5:1e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
        Validity
            Not Before: Jun  8 09:01:17 2025 GMT
            Not After : Jun  9 09:01:17 2025 GMT
        Subject: CN=b09e00dcc1196a2534b4e8dd7880f05835b9f184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:35:e1:b4:95:1b:83:d2:6a:05:e1:92:45:8a:
                    0d:b4:93:6c:a3:c7:fe:a0:b8:87:f2:2a:80:da:61:
                    d6:3d:9c:d7:db:55:33:2a:50:b8:00:af:48:4e:f5:
                    f1:04:8c:37:92:a8:10:ed:82:14:6d:39:31:3c:3e:
                    3c:ab:76:37:d0:c2:c0:44:00:17:7a:49:c7:46:89:
                    68:5f:db:36:1e:41:ec:6b:58:c0:6a:a2:5e:0e:85:
                    6c:ef:3a:18:68:64:e7:e0:06:51:fa:80:21:61:79:
                    e6:9a:9a:45:eb:d0:af:3c:21:54:4a:e4:3c:50:e3:
                    39:c7:4e:54:7f:79:eb:37:ae:e6:3b:36:62:16:cf:
                    9a:b8:67:df:f5:ec:51:70:8c:ab:bb:17:c3:24:01:
                    d9:78:c5:16:80:8d:d3:9a:7d:a4:f6:c9:98:38:79:
                    8e:e7:64:ec:13:39:2c:7b:ae:c6:39:4b:a0:b6:25:
                    fe:52:f9:8b:3d:f8:53:d6:f9:c4:ab:5e:6c:a3:19:
                    a4:22:da:fe:b3:c6:a0:df:42:5a:df:01:ea:20:0a:
                    ae:78:a0:ac:6c:99:9a:c3:1f:81:42:0b:4f:a4:17:
                    d2:cf:71:60:04:85:aa:0c:86:e3:8d:93:f4:08:07:
                    bc:1e:b9:e5:ed:c6:49:46:98:be:3a:53:34:ba:6b:
                    c6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9E:00:DC:C1:19:6A:25:34:B4:E8:DD:78:80:F0:58:35:B9:F1:84
            X509v3 Authority Key Identifier:
                keyid:0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:46:0f:ca:f2:e3:27:6e:af:98:f2:25:a6:4e:de:dd:93:9a:
         b5:5d:51:18:d4:e4:e0:0e:1f:dd:3b:d9:5e:8d:be:1b:57:66:
         4d:70:2a:3c:ff:e2:1d:95:b2:d2:e0:d7:c7:c8:64:12:c7:41:
         29:9a:5f:b9:52:f3:aa:06:0d:68:c9:5c:96:5b:6a:70:15:6b:
         20:78:8c:33:da:5e:20:7e:7f:4c:cf:95:78:a1:77:c9:6a:26:
         ba:40:29:ca:e4:40:d8:3e:92:7d:98:b9:81:c8:6b:62:2c:88:
         1c:6d:25:16:4e:4a:b2:c2:bf:6b:43:d6:f9:a3:94:cc:72:2f:
         02:8a:28:3a:13:0f:2f:b6:6f:be:95:c2:5f:df:de:79:71:f8:
         3a:44:28:61:a3:10:01:ee:aa:a0:9d:87:95:54:7c:ce:27:ad:
         90:21:e1:21:87:c3:d5:10:1f:32:3a:e7:e0:28:93:8b:b5:6c:
         f6:cd:33:9c:12:a0:2e:cd:36:a5:79:78:c1:d1:1c:6f:82:54:
         99:26:3a:75:c4:a4:6b:0d:d7:1f:19:58:91:1d:6d:c2:6b:9e:
         5f:e0:d1:8b:a7:37:31:b5:0a:db:52:6e:4b:1f:84:f3:ae:ca:
         02:77:f6:9d:5a:9a:a9:d8:e5:c9:ab:dc:cf:24:8f:ff:34:aa:
         dd:db:7c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:35:52 2025 by rpki-client