Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File:                     0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier:          gp+B6unDOz9BejRPAD5vxBERN3uio3v3pOutUqLaMUY=
Subject key identifier:   4B:2B:3F:8D:6D:0D:B1:C6:42:C7:15:31:EC:54:9C:86:BA:3A:95:6F
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer:       /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial:       0197643A755DE71F8241DCA28E32A05E1847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number:          12C1
Signing time:             Thu 12 Jun 2025 13:00:42 +0000
Manifest this update:     Thu 12 Jun 2025 13:00:42 +0000
Manifest next update:     Fri 13 Jun 2025 13:00:42 +0000
Files and hashes:         1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: /Mg/O+qk7OlSr2l4ThsRVAb3JR960F/NvrZbE3GAwKU=)
                          2: mVZaVH1Pcezupl88BB4A9aDh2ik.roa (hash: x9LGsO42G/kG8E6OK/kSND1fo/r1Rn2Jod3oqumsnE8=)
                          3: pXbNNPwN94jiY7_-VrGgRRgnbvM.roa (hash: iGkJvRDhgHWubYW0daL/Fj7V8HneaI44eRUKNiVEAEM=)
                          4: rVK1f_dmH8IkDbuaYgLPIHaLhTw.roa (hash: ZQMoKPh7bf4f+FY2EcEyUK7kit9BSmoiMPRby8M1WLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:3a:75:5d:e7:1f:82:41:dc:a2:8e:32:a0:5e:18:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
        Validity
            Not Before: Jun 12 13:00:42 2025 GMT
            Not After : Jun 13 13:00:42 2025 GMT
        Subject: CN=4b2b3f8d6d0db1c642c71531ec549c86ba3a956f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fa:be:92:88:14:de:19:d8:1c:51:6e:dc:39:
                    be:a4:ca:17:53:0e:c6:f0:7d:d7:f3:da:05:a1:31:
                    95:5a:ff:75:66:d7:83:1b:d7:cf:4b:da:14:72:d0:
                    c0:2c:43:e0:2d:58:f5:a2:c5:ae:5e:d7:e7:f1:8f:
                    ae:da:67:b5:fe:3a:a8:11:72:db:db:a9:96:e8:7f:
                    05:d9:23:44:06:0d:64:46:e5:4e:b6:e5:c8:c7:8b:
                    5a:ac:9b:ea:58:93:c9:5e:5c:fc:6d:ad:d0:25:5e:
                    47:6d:f8:d7:04:2c:85:ee:a8:62:cb:bd:03:fe:eb:
                    32:a3:df:7d:b5:69:f1:18:52:8f:23:10:e2:cd:c5:
                    4f:ed:2e:96:ea:2c:34:22:af:a9:d9:99:60:26:66:
                    a5:9a:71:f1:ec:60:45:f8:de:37:92:f8:09:da:11:
                    98:cd:5b:87:1a:24:1e:ce:3b:29:4e:fc:3f:27:a6:
                    c1:37:37:6f:ae:39:9c:3a:47:8c:c5:fa:b2:d7:31:
                    30:0f:e8:55:57:54:02:b1:8d:7a:63:a9:1e:4f:41:
                    5f:ba:6c:58:73:e3:f1:6d:40:64:80:fc:04:58:bf:
                    45:db:d7:36:5d:a2:04:aa:6b:e9:92:7e:d6:cd:64:
                    1f:4f:aa:55:ed:8c:91:c6:8c:97:94:2e:19:8b:c3:
                    0d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2B:3F:8D:6D:0D:B1:C6:42:C7:15:31:EC:54:9C:86:BA:3A:95:6F
            X509v3 Authority Key Identifier:
                keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b3:f1:91:6c:9b:cc:fa:ff:07:fb:83:64:30:2c:40:a6:3b:
         0b:74:bd:8c:34:c0:2e:cf:9a:2a:1e:38:2e:eb:73:ac:32:7a:
         c1:46:40:77:a4:73:3a:78:86:37:46:88:76:18:e3:a1:47:71:
         f2:69:47:3d:55:9c:e1:a8:12:1a:ed:3b:7e:15:bf:b1:cc:13:
         e5:d1:e2:a5:f6:dd:49:6a:27:57:6c:8d:63:81:77:15:eb:a8:
         fc:44:50:35:b0:f3:5b:33:e8:f2:dd:3f:45:55:e7:20:e3:b4:
         f0:ff:c9:94:f8:44:5c:38:18:05:f6:67:8c:ca:1e:29:fe:06:
         65:85:35:a8:35:e1:a0:6c:0f:31:3b:64:18:b6:22:4f:43:ac:
         b6:32:3c:8f:28:6e:7d:12:52:07:5d:b8:2d:29:c2:39:9b:6c:
         a6:38:0c:ff:dd:71:48:43:7a:00:24:6a:f5:c7:54:cf:63:eb:
         26:a4:60:ec:ab:d4:58:57:5e:a6:7f:c1:50:c3:39:09:75:58:
         0c:38:2e:c1:d4:c0:52:d3:e4:49:21:e9:5b:12:5f:2e:ef:76:
         3f:f0:1b:47:9b:f5:f0:cd:2c:68:eb:0c:40:59:14:e9:af:68:
         b7:ef:74:45:60:a8:72:41:80:87:49:a1:84:5a:bd:44:6a:b2:
         f8:ec:71:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:43:34 2025 by rpki-client