Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
File:                     kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft (raw, json)
Hash identifier:          eBrmjb5twL+0owLFrTkAjbKnm9Q/5LVK+t2fwEa57aI=
Subject key identifier:   D1:04:6B:39:5D:4C:98:EE:ED:26:94:DB:26:1D:60:02:47:BB:29:13
Authority key identifier: 91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
Certificate issuer:       /CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Certificate serial:       01974D7BAD4E374404FCAFC051F81024D18D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
Manifest number:          1101
Signing time:             Sun 08 Jun 2025 03:00:40 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:40 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:40 +0000
Files and hashes:         1: 7onO-XhdJCc_IRQIQVCJn8u-1wE.roa (hash: sTU2wUb7RHNn6n+c6UyiV4vOHD7amsQkLEZ6q5B98dM=)
                          2: kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl (hash: 7YNqSiteuHiV1Qqlgg4Np6nxBg9zTZ9h2EUaKIARRv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:ad:4e:37:44:04:fc:af:c0:51:f8:10:24:d1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
        Validity
            Not Before: Jun  8 03:00:40 2025 GMT
            Not After : Jun  9 03:00:40 2025 GMT
        Subject: CN=d1046b395d4c98eeed2694db261d600247bb2913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2c:28:6e:03:a1:59:b6:12:2b:47:3f:bd:50:
                    a9:2d:72:60:2f:2c:8d:01:33:08:1b:5a:65:33:7d:
                    35:5d:a2:05:15:28:6e:77:d7:16:d7:6f:4b:5f:e4:
                    9f:4f:62:ef:45:83:4c:71:01:30:2a:e6:b2:f4:2c:
                    ae:9c:d3:d6:fc:c8:83:97:21:6e:5b:f0:eb:cf:56:
                    34:40:1d:0c:6b:ea:83:a1:2d:60:d4:32:97:9e:8e:
                    86:bb:74:6c:5d:e3:ec:3a:47:d7:c0:49:03:a8:74:
                    a5:78:13:10:2b:0d:73:5e:f7:19:78:f3:b3:7a:85:
                    e6:87:7d:97:43:16:83:53:cd:25:31:07:fa:cf:b8:
                    78:0f:cc:97:77:51:3c:04:3d:5a:b5:e6:0a:f6:9d:
                    d0:17:30:89:c2:00:6c:18:a7:7b:1a:8c:7b:5d:87:
                    a2:75:9c:73:f1:22:94:c6:32:32:e3:f5:eb:66:1d:
                    05:7c:a5:79:93:6c:26:72:d0:67:d7:ba:af:30:0e:
                    19:79:14:dc:15:4d:c3:0b:9a:c0:67:05:67:39:c7:
                    68:e1:55:b8:c1:33:cb:73:a3:54:4f:20:2c:69:25:
                    50:30:c8:13:ae:7a:49:9d:5e:77:9d:48:ce:54:85:
                    9f:43:45:4d:e9:9b:03:56:2a:2b:85:3f:bc:60:12:
                    49:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:04:6B:39:5D:4C:98:EE:ED:26:94:DB:26:1D:60:02:47:BB:29:13
            X509v3 Authority Key Identifier:
                keyid:91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:77:ef:0f:08:26:5b:3a:6a:3b:8b:ae:ad:3a:16:e2:e7:31:
         d7:6c:c2:72:50:f3:f2:c7:6a:f0:80:88:cc:eb:f0:f2:e7:6c:
         91:e1:51:70:28:d1:e3:4a:3d:06:39:ce:44:20:cd:48:01:22:
         21:dd:a2:1b:18:56:ec:57:0e:86:5b:8d:8e:97:43:e9:6d:1e:
         42:b1:e1:ad:b9:49:d7:6c:a9:d9:2c:ec:6b:0c:1a:1c:2d:16:
         8c:b5:d3:3a:9d:04:ef:e6:7f:c5:28:d2:5a:aa:ed:ef:7b:59:
         06:28:11:a1:e4:54:44:1e:dd:0d:e6:55:6f:42:ea:fd:62:3e:
         77:df:4d:ed:32:79:0d:72:45:83:58:33:e1:76:c3:73:4e:b6:
         2c:cb:b0:8f:ef:a4:a5:4c:d2:0f:85:71:41:1d:48:ce:98:4b:
         c1:d2:5b:6d:44:08:2b:ef:e2:e6:d5:32:af:8c:fb:00:38:46:
         5f:7a:09:08:27:26:57:5f:5f:ca:d5:eb:a5:1d:57:f6:80:76:
         ad:b1:c3:3f:06:cb:d3:6a:53:d8:f4:46:0b:32:65:8b:29:5a:
         b5:b0:38:8a:6c:55:19:a1:85:1a:8c:45:28:b7:aa:b3:4f:68:
         6a:69:cc:bc:76:c2:08:2d:14:9e:4b:85:0d:d3:54:7f:dc:5e:
         84:ff:2b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:37:17 2025 by rpki-client