Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
File:                     1Cq3jtp78B2VtZd07TRry_lqJoQ.mft (raw, json)
Hash identifier:          ZFh3q1aRcZLQFBQgiVmC8WUL9EVZrnqF/gK655eRvDU=
Subject key identifier:   09:B4:D6:7C:96:43:53:71:67:C7:86:E1:25:52:87:A6:4C:55:42:04
Authority key identifier: D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
Certificate issuer:       /CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Certificate serial:       01975611955DD21661677215E02A6E77D6F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
Manifest number:          05D1
Signing time:             Mon 09 Jun 2025 19:01:22 +0000
Manifest this update:     Mon 09 Jun 2025 19:01:22 +0000
Manifest next update:     Tue 10 Jun 2025 19:01:22 +0000
Files and hashes:         1: 1Cq3jtp78B2VtZd07TRry_lqJoQ.crl (hash: J/T/Np1YpxFbAX/md1FLlRMemBniCfAOZw/jFZ1IAVE=)
                          2: veEHXuiIgvjqTG6WTLvj8TN1Y9c.roa (hash: zCX9I5DqbiV1NyDUSWL69SaWgCwLBmNnvgRIApALMN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 19:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:56:11:95:5d:d2:16:61:67:72:15:e0:2a:6e:77:d6:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
        Validity
            Not Before: Jun  9 19:01:22 2025 GMT
            Not After : Jun 10 19:01:22 2025 GMT
        Subject: CN=09b4d67c9643537167c786e1255287a64c554204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:62:6f:c7:ef:55:40:7f:91:2b:3e:1a:39:f3:
                    bc:20:a7:77:4c:ed:45:22:ea:74:72:e3:0b:3e:47:
                    e1:b8:ca:14:50:fe:3b:58:f3:85:e4:b4:1b:28:f0:
                    ce:c6:48:ca:85:85:4c:cc:be:a3:cb:9a:63:7e:69:
                    f8:3d:0c:94:18:e1:59:8d:f9:13:eb:4b:2d:c2:1c:
                    7b:71:f4:e2:83:d3:15:31:df:b0:58:90:4d:0e:75:
                    a5:ac:8b:b3:42:6e:80:2c:ff:f8:b5:70:a7:09:7e:
                    0a:43:ba:a9:74:a9:91:00:3e:78:74:51:72:af:46:
                    fe:67:68:c7:53:2f:77:42:53:a0:11:48:c0:28:9f:
                    09:41:72:95:9c:7c:e0:f6:13:c4:07:60:aa:4f:99:
                    a0:e1:65:20:b5:ca:2d:9d:3a:27:63:3e:f7:73:b7:
                    d2:df:12:31:c4:04:5c:44:74:bf:1e:a3:01:af:dc:
                    99:33:0e:80:05:d6:40:ab:4d:62:7c:03:73:ee:01:
                    5c:11:3b:b6:35:0e:38:0e:f0:1c:6d:67:a7:c3:21:
                    50:14:d0:42:f0:a2:ea:53:29:02:50:8d:aa:94:a2:
                    bf:9b:1c:f5:8a:4f:83:84:18:75:30:a4:90:1b:15:
                    4c:78:cd:f4:d1:3b:f9:4b:e2:bf:fd:4f:2b:9c:c6:
                    4c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B4:D6:7C:96:43:53:71:67:C7:86:E1:25:52:87:A6:4C:55:42:04
            X509v3 Authority Key Identifier:
                keyid:D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:bf:b8:e9:a9:68:e8:ce:a9:11:2c:31:78:d9:7a:d7:e8:8e:
         17:60:eb:90:50:bb:b1:00:0e:2e:57:b1:44:aa:d3:32:7f:6a:
         2f:d0:06:38:40:f1:07:ae:99:a5:6e:f0:96:3d:39:bd:ca:5f:
         85:c3:c3:fb:a5:e7:bb:33:bb:1f:e3:90:13:1f:ef:1c:ed:ea:
         30:f2:ed:98:d7:f9:3b:27:c4:c4:74:f8:92:07:8d:fd:34:fa:
         57:c1:d6:7c:95:51:fa:b0:8b:53:d3:0f:5f:1d:87:c8:ab:31:
         85:20:b9:54:36:52:9e:1a:cc:f3:45:93:a6:9a:c3:e6:d9:85:
         19:c1:24:a3:98:8b:01:dc:42:f1:e9:a7:53:83:33:b9:39:a2:
         8e:e6:b5:00:ea:69:ff:30:b4:44:06:47:aa:d2:fe:d9:67:5e:
         3a:ec:7b:4e:3f:ad:bf:ab:11:f3:5c:88:ed:d3:81:c9:1d:e0:
         b4:e1:43:f5:82:fb:00:ef:ef:3a:2c:5b:00:4d:b1:33:e7:a8:
         91:38:2e:d6:0f:19:0e:bc:76:a0:ce:0f:66:9d:d6:ef:23:db:
         44:ce:94:1b:54:97:d3:3d:88:2a:23:55:ff:b2:fd:a5:c2:31:
         e9:b1:0f:e0:92:12:0d:fa:c5:7a:64:54:c5:15:42:3f:8c:35:
         3d:55:dd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 02:23:35 2025 by rpki-client