Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft
File:                     a4d_CC_1_vSwfPj3wPcTNLyLhII.mft (raw, json)
Hash identifier:          9xEZw8cQc3T1fn04tVrKQmvZ7GzyBLfo78u2kVRppbU=
Subject key identifier:   A5:99:F8:DA:67:77:1B:3D:C7:A3:0C:B0:3D:F9:B5:27:95:B5:79:51
Authority key identifier: 6B:87:7F:08:2F:F5:FE:F4:B0:7C:F8:F7:C0:F7:13:34:BC:8B:84:82
Certificate issuer:       /CN=6b877f082ff5fef4b07cf8f7c0f71334bc8b8482
Certificate serial:       01974AE86B1B144507F0606E636A6A7B157A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft
Manifest number:          0BCD
Signing time:             Sat 07 Jun 2025 15:00:35 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:35 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:35 +0000
Files and hashes:         1: WCDr0C7BpS_ig7DZMYGJWIavE9c.roa (hash: ZsfN2PWj+HvImmXbTTvAz0j0hR2wbZeR5zuw9m+NkaI=)
                          2: a4d_CC_1_vSwfPj3wPcTNLyLhII.crl (hash: 2l3HTzVGnaczGGFP/UvYL6iQKKJn0qpM+9nfUMlVAXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:6b:1b:14:45:07:f0:60:6e:63:6a:6a:7b:15:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b877f082ff5fef4b07cf8f7c0f71334bc8b8482
        Validity
            Not Before: Jun  7 15:00:35 2025 GMT
            Not After : Jun  8 15:00:35 2025 GMT
        Subject: CN=a599f8da67771b3dc7a30cb03df9b52795b57951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:06:66:58:16:b0:21:f2:53:d2:78:ae:45:df:
                    d1:a5:27:7b:7c:53:e9:b3:ea:ff:d9:73:00:12:2d:
                    97:c1:a9:76:12:42:24:1f:b9:74:a5:05:02:a1:e2:
                    1c:4e:a0:fb:2b:cf:2f:58:93:2f:68:1e:6c:da:6d:
                    32:1a:19:08:36:96:85:ad:91:4c:ff:46:98:d6:b1:
                    58:41:83:b8:ee:21:bb:c7:bf:3d:83:9e:ab:d6:be:
                    80:4b:56:8c:5a:eb:17:ce:41:09:aa:95:28:e8:ac:
                    f7:67:7f:87:b7:90:de:0b:f4:71:05:20:12:83:5a:
                    db:3d:92:3d:da:2a:a7:e4:e5:6b:97:7b:d6:e2:9b:
                    bb:b5:f0:17:65:ab:7e:d5:b3:8f:31:82:0f:b3:75:
                    c9:5b:f4:78:72:f2:9b:0b:1e:04:e4:85:34:31:bb:
                    67:a7:0a:72:49:36:c9:47:81:51:ba:b9:4a:b6:e6:
                    ce:b8:1a:f9:ed:17:aa:e8:72:a6:fa:ad:d3:af:18:
                    de:d9:bc:7c:5f:a2:d0:fc:7d:9b:38:51:f7:a2:3e:
                    1a:8f:e1:9f:d3:22:ec:12:bc:b6:99:18:01:8d:73:
                    98:98:53:03:82:d6:cf:e5:f1:77:6d:b1:71:9d:3e:
                    19:88:85:3a:e7:9e:72:d3:8d:69:06:57:d1:7c:27:
                    8a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:99:F8:DA:67:77:1B:3D:C7:A3:0C:B0:3D:F9:B5:27:95:B5:79:51
            X509v3 Authority Key Identifier:
                keyid:6B:87:7F:08:2F:F5:FE:F4:B0:7C:F8:F7:C0:F7:13:34:BC:8B:84:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a2:87:05:f0:f5:cc:61:64:b7:4e:bf:da:fc:11:5c:be:b5:
         1b:21:80:75:df:2d:f3:4d:bd:06:6c:f2:8a:1c:be:9d:9d:d1:
         09:26:8e:12:05:80:e7:d2:7f:15:c7:61:0a:53:ae:1a:c0:9b:
         1d:69:cf:65:c4:63:0c:ca:6f:b6:1c:68:46:e1:78:2f:e6:e4:
         1e:e0:9b:98:69:30:2e:65:ba:3a:31:27:6c:20:a6:d3:05:83:
         9f:62:e2:18:27:08:02:c1:44:77:5d:4c:68:5c:e3:c4:af:6e:
         3b:9e:27:4c:01:65:24:54:3c:d6:cc:75:d4:7b:f6:f4:c3:0d:
         01:e5:e5:eb:55:00:48:7b:9c:e8:20:3b:51:fe:39:5b:e7:61:
         d8:c7:33:1c:40:6d:94:7e:3f:0a:a2:a1:8f:8e:f8:02:33:8d:
         85:fb:b8:69:ca:e0:c6:81:90:d3:05:85:75:73:9c:23:17:65:
         1c:86:05:b7:03:f2:10:df:7c:26:ff:0b:81:25:45:09:cc:91:
         bc:ce:e7:9f:95:f5:3f:9f:86:17:71:7e:05:2e:fb:93:30:b4:
         2b:ea:f6:15:e0:09:07:05:1c:c7:b2:f7:d1:20:45:83:a3:0e:
         9e:15:0b:54:39:fc:2d:17:2e:5f:3b:bb:62:2e:95:2c:97:01:
         6b:70:2f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:13:12 2025 by rpki-client