Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
File:                     CuQnEByy4r1WUITeZHH260jST5Y.mft (raw, json)
Hash identifier:          rZw8rCxayoMzzCmuWgyE0ll4fW0NwY/xOpU6S64aidI=
Subject key identifier:   DB:A1:4B:F8:C7:83:D8:72:D6:1D:73:F0:43:3F:24:3E:B5:02:25:92
Authority key identifier: 0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
Certificate issuer:       /CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Certificate serial:       01974930F5A83DDAFF93E867F25B786B5B01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
Manifest number:          0B1A
Signing time:             Sat 07 Jun 2025 07:00:34 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:34 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:34 +0000
Files and hashes:         1: CuQnEByy4r1WUITeZHH260jST5Y.crl (hash: lmdP3imMbggrg+ypxSaXIFiq1MF42nUXFgGLfwIcQhY=)
                          2: LfJ8ODju367d2avuOQm5piH-KjI.roa (hash: o3ZK8YLnbi2AKR9dzokceRf3/tnSGkPPHYTuBxrwd0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:30:f5:a8:3d:da:ff:93:e8:67:f2:5b:78:6b:5b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
        Validity
            Not Before: Jun  7 07:00:34 2025 GMT
            Not After : Jun  8 07:00:34 2025 GMT
        Subject: CN=dba14bf8c783d872d61d73f0433f243eb5022592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:02:6a:03:29:0a:29:ff:4c:e7:28:b3:bb:0c:
                    27:f8:17:1f:d4:c2:73:48:97:bd:d3:de:53:ca:5e:
                    b7:58:6c:11:28:f8:a1:b5:24:2e:8b:ae:77:28:b0:
                    30:70:80:3a:98:7f:52:96:e0:47:82:1f:32:44:57:
                    0c:5c:c7:95:37:50:b0:c7:f1:09:b5:17:f4:62:36:
                    d2:7a:95:9f:8c:e0:1d:1d:3b:53:06:6b:7b:75:64:
                    43:15:0b:c1:03:0f:0c:8d:aa:b9:f7:f7:13:0c:45:
                    61:a1:6b:be:b9:8a:69:72:52:0d:59:76:60:97:8e:
                    6e:ca:46:bf:45:ee:e0:b7:a8:e5:50:b1:fa:06:c2:
                    71:9f:f3:cc:b1:ab:38:3e:84:c7:89:83:93:80:22:
                    85:b0:9f:9d:08:39:76:c7:0f:d0:c4:b3:2c:41:61:
                    70:51:06:67:6e:ac:d6:61:91:fc:83:e6:da:c6:0b:
                    2d:44:de:c9:00:d9:78:9a:d2:41:a4:5d:eb:94:98:
                    41:32:87:4b:45:f9:44:f7:57:fb:77:fc:84:95:c8:
                    45:8e:4d:df:c8:63:9a:25:4e:7f:c8:95:87:ee:e4:
                    69:16:c8:2c:21:3b:a4:dd:8e:0b:1a:ea:bd:6a:ca:
                    4a:5e:c7:f5:e3:c4:d0:ba:6b:3a:36:b1:9a:3f:56:
                    8b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A1:4B:F8:C7:83:D8:72:D6:1D:73:F0:43:3F:24:3E:B5:02:25:92
            X509v3 Authority Key Identifier:
                keyid:0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:a5:25:35:e9:cf:f2:79:11:be:cc:08:93:6c:4f:16:c3:9e:
         13:9c:21:d2:14:65:f6:e3:af:95:dc:43:be:34:58:67:40:18:
         e9:f7:5e:67:df:38:ed:07:cf:59:7d:19:a6:f2:7a:f8:09:83:
         6b:64:d8:d1:bd:0d:75:e2:5d:e4:2f:a9:e9:e0:cf:ba:9a:78:
         fe:98:69:69:2c:14:71:a2:a3:b5:e4:1d:a8:22:1b:b8:ad:3f:
         81:d0:8d:a4:7e:3c:35:d2:96:71:e4:88:03:3c:01:bc:8a:7f:
         45:8b:5c:68:fa:25:86:cc:03:e9:17:ab:05:e6:0b:d4:e9:ce:
         d0:94:16:e1:94:d9:f6:45:0e:a6:df:52:19:1e:3a:cf:85:09:
         ec:fb:e5:c4:1c:25:d4:df:a6:87:09:72:f6:33:38:c5:50:06:
         4e:82:8c:3e:ea:bc:9e:02:9f:72:1e:4b:fa:1b:9b:ca:fd:3e:
         63:00:a8:35:61:be:96:c2:97:89:8d:84:a5:7b:71:9c:a5:3b:
         fc:56:2b:77:f6:f6:bf:fc:5c:34:30:6a:54:f8:96:de:21:ff:
         bf:53:a1:32:88:7d:84:e1:85:5a:d4:70:8e:0f:bb:9c:6e:38:
         11:92:eb:17:2e:12:3e:a9:10:87:f8:0d:f1:12:6a:02:50:ad:
         fc:b8:86:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:11:42 2025 by rpki-client