Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
File:                     k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft (raw, json)
Hash identifier:          +6NsH1yjO4lHYCil33cg/h0E5ux1AtWUbwsBHcb0VG4=
Subject key identifier:   7C:09:49:82:92:91:B9:EB:64:CC:82:69:13:28:47:BA:7F:D7:17:59
Authority key identifier: 93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE
Certificate issuer:       /CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde
Certificate serial:       01974A0D0B4EF314E9278E164A73DFA5AD01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
Manifest number:          04D6
Signing time:             Sat 07 Jun 2025 11:00:58 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:58 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:58 +0000
Files and hashes:         1: 28GUm6MyGmDzZNaWznfWcQv0e_Y.roa (hash: C7L+FDUEfqbFey+e0t8jNl/x+IFvC1I+YVSxl7oinY0=)
                          2: k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl (hash: sManHqbwnBTLzeKwkmzB78I3jvkvr8lZ5fdWO6JDH0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0d:0b:4e:f3:14:e9:27:8e:16:4a:73:df:a5:ad:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde
        Validity
            Not Before: Jun  7 11:00:58 2025 GMT
            Not After : Jun  8 11:00:58 2025 GMT
        Subject: CN=7c0949829291b9eb64cc8269132847ba7fd71759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:82:ef:de:94:4d:2f:f1:11:88:8c:91:29:
                    ae:d0:f1:37:2d:f6:ac:5a:5d:e5:82:73:25:05:76:
                    14:49:21:f7:c4:a9:24:c2:38:fd:e2:da:d9:e0:d4:
                    ae:f8:a0:81:d3:cd:95:3a:c4:b7:5c:8a:e2:e8:99:
                    e0:52:4d:a6:92:36:41:04:6b:72:42:c2:30:f2:18:
                    f2:4d:98:ec:34:d9:16:2f:85:6e:b4:ee:16:9e:b7:
                    ca:dc:e6:ee:4b:f4:b2:56:c6:cf:f7:32:8f:15:31:
                    9b:3e:9a:a1:a4:a1:6b:97:64:f1:ea:c7:7d:3d:44:
                    66:30:f8:56:c4:da:e9:94:d4:29:ea:8b:dd:7d:e6:
                    38:9f:27:d1:75:33:15:91:fb:7b:0e:df:7c:37:c4:
                    25:a1:43:ef:8a:d1:e1:54:85:87:b1:5e:d3:3f:8b:
                    e8:7d:4b:74:52:7c:13:79:47:bc:fd:26:d4:89:aa:
                    93:9b:c2:8f:b7:28:5e:30:92:30:2b:fd:1a:32:58:
                    01:74:0c:53:dd:cf:27:b1:d3:09:57:86:7b:4b:30:
                    73:6f:f6:c9:c4:22:07:01:24:c3:62:a2:ff:d7:2b:
                    5b:f6:59:ea:39:d0:31:32:57:56:f4:3b:25:13:aa:
                    02:bc:c2:41:36:99:19:12:6d:bd:3a:fd:b9:51:39:
                    a5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:09:49:82:92:91:B9:EB:64:CC:82:69:13:28:47:BA:7F:D7:17:59
            X509v3 Authority Key Identifier:
                keyid:93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f7:bb:3f:88:50:83:61:5c:4d:5b:0a:66:43:d9:6a:ef:18:
         c9:92:eb:6b:42:8f:df:44:43:ee:ec:fa:a5:b5:29:f6:de:82:
         00:b3:2c:68:23:ab:67:b3:57:f7:b4:be:a8:4d:6c:cf:c8:de:
         b3:ed:bc:f4:8f:7b:80:b8:c1:42:35:58:c8:ec:01:e2:50:bb:
         57:4e:58:e6:4a:9b:e8:cf:54:c7:0e:99:2d:f2:0e:9b:1e:31:
         fa:4c:be:26:77:15:75:4a:56:21:51:7e:df:c6:05:26:8b:9e:
         01:89:16:4f:df:94:f2:b1:64:2d:7e:d4:d4:52:aa:46:58:fa:
         c0:1d:21:37:1d:68:2e:d9:b8:51:ae:93:64:60:36:f4:ca:5c:
         58:b0:0d:61:4f:f1:e2:7f:8f:2c:de:3e:26:f7:b4:27:27:9a:
         8b:63:53:42:f7:69:3c:3b:17:ed:1b:ed:13:52:0d:85:f9:d0:
         37:4c:12:7b:d9:fd:27:5c:83:1a:1f:3d:bb:37:09:4b:2f:9e:
         62:d8:2d:42:b7:a6:32:0e:af:06:df:35:be:62:1c:ef:c3:04:
         7c:72:96:b5:13:cb:cb:46:82:2c:91:db:8f:37:43:50:2c:eb:
         dc:11:ca:44:b2:a8:46:36:56:ba:73:17:63:8b:de:e7:a4:89:
         7c:f5:a6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:35:35 2025 by rpki-client