Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
File:                     d1F6r0j2aaC-yOxqyGgrTBJObTA.mft (raw, json)
Hash identifier:          Ln8yd/yYbRYzwngq1ySBou8el+76sK5nHDui34gqLik=
Subject key identifier:   FF:BF:4A:BA:46:43:43:9F:A1:F1:65:A1:6E:3D:BC:BA:6C:B1:77:73
Authority key identifier: 77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30
Certificate issuer:       /CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
Certificate serial:       0197470C4410EF90176DA3C3C10F8F26194C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
Manifest number:          02F4
Signing time:             Fri 06 Jun 2025 21:01:15 +0000
Manifest this update:     Fri 06 Jun 2025 21:01:15 +0000
Manifest next update:     Sat 07 Jun 2025 21:01:15 +0000
Files and hashes:         1: d1F6r0j2aaC-yOxqyGgrTBJObTA.crl (hash: 3XXWvhxjc76W0bTDwrvABf4zFI8WGZR7dgiusGVrbbk=)
                          2: lJ6hu6V7P05pf4Ct-PkwsRbTn-Y.roa (hash: yD7rptfWCX+Sfjy7H+I4AQ8wgaNpJdZq+9g0IP00GOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0c:44:10:ef:90:17:6d:a3:c3:c1:0f:8f:26:19:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
        Validity
            Not Before: Jun  6 21:01:15 2025 GMT
            Not After : Jun  7 21:01:15 2025 GMT
        Subject: CN=ffbf4aba4643439fa1f165a16e3dbcba6cb17773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:5e:6a:39:1a:01:73:b9:af:a4:1c:a0:b6:
                    a2:cd:03:cb:66:54:7f:68:35:df:ce:a6:97:b5:6f:
                    76:69:7e:0c:24:71:2f:a8:ff:f2:6d:b4:78:2a:33:
                    b1:f9:da:2f:f2:ff:70:34:8e:99:cb:6a:b7:ca:91:
                    a4:68:d9:ee:8b:e3:ae:5b:0f:9f:26:81:f6:f9:02:
                    40:b4:97:a6:e2:d3:2d:cc:47:c8:11:05:85:a4:61:
                    4e:c6:e1:d2:5b:7a:4d:f3:5a:9a:31:61:1c:eb:b7:
                    2d:3f:ad:7b:06:c2:41:d2:5d:26:91:41:ae:b2:22:
                    47:7e:c4:0c:55:5f:45:bd:dd:6a:37:47:75:f9:46:
                    7f:0b:a2:85:43:98:57:27:12:65:1b:01:1e:62:cb:
                    51:36:b4:41:0d:12:29:a6:cb:ee:30:7a:92:c4:9e:
                    4c:87:e9:8e:fe:97:4f:fc:f9:aa:70:d0:3a:74:4f:
                    7b:16:9b:45:e6:dc:8f:b5:61:45:04:fe:29:de:61:
                    32:e5:76:ed:99:87:0f:3b:01:6e:1d:cd:ef:9c:0f:
                    b5:ed:cc:71:40:18:6a:37:c6:32:9d:cd:e4:a0:59:
                    39:c9:18:18:91:0b:5b:f6:c3:e0:8e:c3:bc:4d:f8:
                    cc:35:10:ce:a7:29:e4:63:c1:ca:47:49:5d:78:c3:
                    f1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BF:4A:BA:46:43:43:9F:A1:F1:65:A1:6E:3D:BC:BA:6C:B1:77:73
            X509v3 Authority Key Identifier:
                keyid:77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:df:c9:6f:ee:ef:7c:d8:e4:56:6a:7b:20:16:26:c0:02:56:
         3c:4a:47:b1:87:00:69:46:16:ee:6d:39:1a:34:0f:1b:7b:84:
         15:2b:1f:05:ef:4b:25:30:02:0e:ef:bf:9a:67:bc:b6:86:2e:
         1d:e3:33:02:30:4b:eb:e4:66:2d:36:ea:61:3f:4e:b5:52:39:
         dc:20:fc:e7:c1:9a:62:7c:01:6c:83:61:71:dc:b4:02:7e:8d:
         ae:0d:50:6f:3e:b9:02:4f:50:6d:fe:cd:8e:53:47:e8:d5:ca:
         48:b4:fd:f1:62:ac:c0:21:83:8a:4c:87:b4:ab:c9:c5:fb:16:
         a6:8e:db:b3:7a:c0:d9:f3:67:d2:49:1e:14:e5:3b:19:2b:37:
         ae:4e:ab:8b:dd:06:83:f8:6a:2d:80:2d:cd:01:db:23:d6:ae:
         40:6f:84:80:41:7d:2a:d2:ae:88:8d:3a:08:a3:0a:57:a7:be:
         f4:29:3a:a0:7f:dc:43:e2:2e:9b:8b:4a:b0:d3:93:27:c9:eb:
         81:85:8c:92:34:c9:a7:a5:d7:fe:50:13:ce:29:e8:e1:95:c8:
         20:c7:3f:af:85:a4:43:10:3c:29:88:50:3f:ce:4f:13:61:09:
         7e:c8:31:da:ad:19:2a:e4:3a:56:75:e4:28:9e:c0:f3:b1:6f:
         0e:c8:1f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:48:55 2025 by rpki-client