Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
File:                     BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft (raw, json)
Hash identifier:          GWAWUTWcrBGl2YuEo6FwcHyFpqzYnM5i9Oo6kTBKOr8=
Subject key identifier:   2C:C2:9D:FF:99:C7:1D:AA:EB:43:78:80:3B:02:57:36:20:2A:AB:7E
Authority key identifier: 06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
Certificate issuer:       /CN=06a757442e47f82608bef423dac344c25358dbf9
Certificate serial:       0197477968A26CD0CDD4F178C9E2E2B3478D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
Manifest number:          0AD5
Signing time:             Fri 06 Jun 2025 23:00:28 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:28 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:28 +0000
Files and hashes:         1: BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl (hash: 4KZ2eJ6XS6LGfKO/UmHBoqmZvLGeuRH0WmX/UCNC2ww=)
                          2: cnQVrWDhW0BxCfHysaIfdn7x84A.roa (hash: QGeaUhczDONIP6VJTksO3RkYcdOxpExDTeoK1S4rtLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:68:a2:6c:d0:cd:d4:f1:78:c9:e2:e2:b3:47:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06a757442e47f82608bef423dac344c25358dbf9
        Validity
            Not Before: Jun  6 23:00:28 2025 GMT
            Not After : Jun  7 23:00:28 2025 GMT
        Subject: CN=2cc29dff99c71daaeb4378803b025736202aab7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b7:9d:3f:92:9d:7e:cc:49:2f:44:34:53:92:
                    e4:8e:f9:a5:99:aa:b5:b6:0f:81:4c:7a:ad:58:68:
                    c4:3b:04:df:a0:a2:48:d3:a4:16:6c:87:8b:85:13:
                    7e:04:f8:79:aa:79:ef:05:b6:84:14:f7:8e:d7:7c:
                    c7:30:ab:d6:1b:17:68:26:88:10:13:78:48:38:43:
                    9e:04:06:95:64:bb:7b:22:8c:dd:83:85:f0:5c:b8:
                    64:87:a1:88:fb:1e:ec:ea:96:36:4d:1d:8c:bf:bf:
                    3c:e3:13:4f:3c:11:da:8b:5c:7c:cc:e6:34:63:33:
                    29:7e:d9:66:8e:50:ac:2d:1f:c5:61:30:c0:34:7f:
                    ce:46:b2:48:28:90:a2:82:52:72:f5:30:ce:df:17:
                    51:73:74:2a:c8:66:93:3d:4d:50:f3:3d:fe:d1:85:
                    0f:e2:2e:e2:60:ed:a9:78:45:2f:6d:04:20:a7:cd:
                    b3:75:85:d1:ff:84:99:63:24:b6:43:47:b3:b6:bc:
                    46:37:8e:65:f0:74:28:6f:13:53:ef:ab:b0:b1:9b:
                    41:6d:ba:0f:d6:eb:b1:ff:ad:a1:06:0c:56:45:a3:
                    cc:66:92:fe:6d:4d:47:bd:ec:ba:f4:07:87:7a:c8:
                    5c:47:e6:8f:cb:78:7a:ab:6f:0c:70:0c:26:94:f7:
                    9a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C2:9D:FF:99:C7:1D:AA:EB:43:78:80:3B:02:57:36:20:2A:AB:7E
            X509v3 Authority Key Identifier:
                keyid:06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:05:01:56:e3:e6:2b:4b:c5:3c:61:f9:fe:45:15:a7:57:99:
         f9:6c:2b:b7:d7:69:63:e4:8f:29:c3:8d:41:00:8e:1d:62:48:
         0b:15:1f:e8:49:12:b1:70:a1:28:b5:60:56:8e:5c:ed:ff:28:
         48:0e:f7:f5:c4:13:88:21:0a:35:5a:d5:5a:d6:00:a7:88:05:
         fa:dd:8c:83:89:f5:9b:be:a8:fa:89:4a:13:ea:1d:43:88:63:
         bf:9f:11:d7:b8:38:75:a7:a2:8e:0e:27:1b:f1:f4:2d:95:ee:
         02:bf:b6:a5:3d:f8:fc:47:f0:60:34:4d:f9:16:a1:f5:6f:c5:
         76:0f:19:d7:a4:10:2b:3d:4a:1b:d8:07:82:c4:96:18:e2:7a:
         50:63:4a:93:fa:81:9f:1c:03:da:30:3c:6d:7a:69:95:b9:e0:
         03:f1:af:ca:2e:63:74:cb:03:9a:df:2f:1f:db:e9:ed:f2:16:
         a1:ad:b6:ba:52:63:46:90:c6:53:e2:f4:30:35:8e:35:7f:7b:
         69:0b:41:be:fe:1a:2d:d2:28:96:dd:45:61:42:0f:04:a8:05:
         95:3a:47:3b:45:d5:1e:0c:cc:dc:c6:65:f6:ae:22:49:46:66:
         ab:51:3a:3e:33:61:e9:b5:2a:7c:d8:56:94:f9:e7:3b:4a:be:
         f2:d5:4a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:52 2025 by rpki-client