Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
File:                     v_0PCtnHhAlsWg-56M9cLwRAQTs.mft (raw, json)
Hash identifier:          890R+RjJnS8ZobkjdMSkM64KVOuOVHBkh85H+k+8kQA=
Subject key identifier:   6A:C7:A6:7A:57:84:BB:E2:93:0D:91:FE:1F:ED:06:AF:97:35:27:E8
Authority key identifier: BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
Certificate issuer:       /CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Certificate serial:       019749315264A5D69D3487E01BFCDAC093C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
Manifest number:          0558
Signing time:             Sat 07 Jun 2025 07:00:58 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:58 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:58 +0000
Files and hashes:         1: Z2OOQN_xvDinvSk0PjmWHnzGsnE.roa (hash: +MwSX4X4GjxkZcy+4f+CH7/gMqlsDpwDxxCncAgans4=)
                          2: v_0PCtnHhAlsWg-56M9cLwRAQTs.crl (hash: 127l+JG7ibQsoDSW2URMwi90T8aF9UFNRRl1LDI9XuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:52:64:a5:d6:9d:34:87:e0:1b:fc:da:c0:93:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
        Validity
            Not Before: Jun  7 07:00:58 2025 GMT
            Not After : Jun  8 07:00:58 2025 GMT
        Subject: CN=6ac7a67a5784bbe2930d91fe1fed06af973527e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:13:e4:e0:10:74:e5:fc:0b:41:a8:23:37:c4:
                    36:dc:3a:80:aa:eb:ef:59:39:71:c9:85:94:6b:98:
                    2c:c2:ec:a0:4b:dd:ee:90:ce:1c:9c:75:a9:38:71:
                    2e:88:e5:9c:eb:4b:d1:a3:7f:4f:ed:44:1c:b2:97:
                    ac:15:9e:e7:3b:0a:49:b3:ff:ab:0f:a5:a9:dc:69:
                    22:d9:16:2a:59:4a:95:63:b0:fd:b4:66:e7:10:a8:
                    f1:dd:a1:9c:9d:dc:a1:56:d4:04:50:31:ad:cb:2d:
                    8a:c4:95:57:34:be:21:f2:2e:39:d3:34:18:d6:e0:
                    ea:ff:24:aa:07:28:34:17:0c:52:95:40:45:05:02:
                    39:35:ea:2c:51:a1:bd:cc:eb:ab:d5:15:25:75:81:
                    13:bc:c8:56:43:01:f8:0e:0c:a8:ba:41:75:5d:09:
                    5c:51:8a:da:ce:b7:66:51:78:fc:c2:9a:6b:13:5a:
                    79:d2:81:38:da:ca:94:9d:b3:e4:d8:97:a7:c7:a7:
                    35:a1:f8:18:03:44:4b:25:4a:43:66:e3:56:fd:0a:
                    51:9d:26:61:e1:e1:e5:8d:3f:48:be:01:fc:cf:81:
                    7c:b3:b4:4b:99:93:e6:ee:4c:b3:82:14:bb:a4:b5:
                    7a:fb:bd:14:63:0c:59:f5:88:35:e1:aa:77:61:49:
                    2e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C7:A6:7A:57:84:BB:E2:93:0D:91:FE:1F:ED:06:AF:97:35:27:E8
            X509v3 Authority Key Identifier:
                keyid:BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:17:af:62:a7:38:5d:bc:b2:13:56:a3:f5:b4:2f:5a:97:54:
         e0:db:73:a5:d6:55:68:b7:42:ec:e5:c9:05:e9:2a:84:e3:81:
         61:38:1f:ea:f8:73:09:6b:98:1a:04:4c:e5:21:7f:b9:c0:1f:
         55:be:6e:3f:d9:09:19:ad:9b:cd:0c:d5:c1:d0:c7:9a:4e:22:
         5a:fe:1c:f6:92:3d:ac:09:ca:17:31:43:f7:71:b0:bd:6f:ba:
         67:7c:87:53:57:36:e5:99:97:a0:5a:50:b2:86:a7:64:16:be:
         78:aa:5b:6b:05:76:9b:3f:35:09:37:93:a4:c4:30:b7:53:5e:
         86:bc:ba:fc:f1:1b:60:98:70:3c:ee:b2:44:aa:0b:b4:18:45:
         68:f2:e4:4a:15:37:70:e0:b0:ff:d3:1a:c2:78:52:f5:92:37:
         e2:6e:8e:09:0c:39:d2:ef:4a:6c:0c:10:48:d4:6f:e8:1f:a7:
         61:95:66:72:c9:26:75:17:c0:15:b9:37:5c:1d:2f:bc:55:fe:
         d2:42:82:8e:5f:6a:86:32:99:02:b2:65:c7:c9:96:8e:66:5e:
         f6:70:20:aa:22:51:be:c1:50:65:ff:d8:a2:60:70:b1:77:4e:
         c2:6f:90:32:0a:fa:06:ea:9d:91:6a:47:41:14:bd:1b:84:0a:
         5b:63:d3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:34 2025 by rpki-client