Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
File:                     1bgBgLQNWFtzZlh9-13nvzB3hD4.mft (raw, json)
Hash identifier:          nTkin9dmyNVWgYByxcChw7BveubE0JtKaBXaKjl46/4=
Subject key identifier:   88:62:61:35:A7:C3:FA:10:92:41:15:09:18:2E:AA:C8:47:6B:B4:1E
Authority key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
Certificate issuer:       /CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Certificate serial:       01975A92767D4678220A28FFDD066188750B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
Manifest number:          0B60
Signing time:             Tue 10 Jun 2025 16:00:37 +0000
Manifest this update:     Tue 10 Jun 2025 16:00:37 +0000
Manifest next update:     Wed 11 Jun 2025 16:00:37 +0000
Files and hashes:         1: 1bgBgLQNWFtzZlh9-13nvzB3hD4.crl (hash: cddwOpsH18KadkX7Tks8Ha1O5uKUSJmJVrci9AAI5mk=)
                          2: pIHIruBkWSXEhwElM3sSrgjzMr0.roa (hash: fGR515hTUFGy9ET2ASre0fRJ4owzzw/uRYZkelb0/PE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5a:92:76:7d:46:78:22:0a:28:ff:dd:06:61:88:75:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b80180b40d585b7366587dfb5de7bf3077843e
        Validity
            Not Before: Jun 10 16:00:37 2025 GMT
            Not After : Jun 11 16:00:37 2025 GMT
        Subject: CN=88626135a7c3fa1092411509182eaac8476bb41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fe:1d:77:37:e1:32:6e:26:eb:0c:15:df:b5:
                    21:ea:7b:da:a1:e8:8f:4c:a5:59:05:6e:76:18:17:
                    c2:f5:cd:48:8f:25:b7:c0:f6:92:bc:de:18:17:3e:
                    81:9a:b9:f6:30:c2:25:f0:f1:1d:00:df:71:a7:00:
                    1f:0a:19:bb:39:ae:de:0f:25:5d:53:53:4b:f5:93:
                    e8:0a:f3:90:e5:3d:43:2e:47:93:49:92:22:78:fc:
                    61:b7:f1:ed:08:a3:c4:05:94:12:f8:2f:58:5c:dc:
                    13:0c:e9:07:78:41:65:ac:9f:14:94:9e:fc:09:71:
                    b4:a3:26:c9:e1:22:19:7e:6e:38:00:f1:9b:67:f0:
                    54:aa:88:bf:92:05:99:9e:b1:ce:d4:f7:ba:2a:8f:
                    36:d4:17:42:30:43:5c:f2:cf:b5:be:7f:90:02:10:
                    f0:d7:e0:67:83:28:e2:26:87:4f:28:58:a0:3a:aa:
                    d9:ab:99:3e:0d:43:ec:47:bd:de:d3:29:d0:e6:3d:
                    cd:79:4a:48:7a:6b:65:62:36:17:c0:b0:58:9a:42:
                    f8:34:9f:3e:4b:91:a6:51:a0:95:0d:1f:fc:83:dd:
                    51:94:8e:8a:10:c1:62:20:1f:60:7f:25:ff:93:ee:
                    37:90:ab:4f:0e:b6:22:79:af:8c:f3:aa:30:b3:48:
                    12:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:62:61:35:A7:C3:FA:10:92:41:15:09:18:2E:AA:C8:47:6B:B4:1E
            X509v3 Authority Key Identifier:
                keyid:D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c7:a6:9e:1f:1f:97:fa:77:eb:ad:63:02:b8:8e:fe:23:d0:
         73:bb:98:09:94:26:ba:b2:c9:d0:18:6e:96:95:e3:41:2f:1c:
         72:94:a6:e2:2f:7a:9e:1b:59:5f:e5:ed:51:49:2a:ca:ad:71:
         08:43:4e:6f:62:9e:6a:69:e3:ea:fe:85:89:e3:c3:47:bc:41:
         81:35:d3:0d:15:ba:ad:f2:8d:59:6a:af:fb:2c:04:4e:27:4e:
         34:d9:f3:c6:53:c5:a5:8a:9c:e2:c7:34:b1:b9:65:ee:cb:1c:
         a8:de:eb:31:a7:9b:26:47:23:82:cb:f5:2e:4e:b5:59:6b:de:
         f7:bf:a1:0b:77:55:77:f3:0e:ec:96:b9:f5:13:7f:3d:a1:b8:
         2e:39:b4:fb:00:28:40:db:83:28:d4:da:1e:ce:4c:c9:15:b3:
         2e:5b:32:e8:6a:82:16:89:91:67:d2:eb:1a:9b:e4:ce:02:c5:
         29:76:f1:70:69:64:34:d9:5a:30:41:f0:e1:62:ea:78:60:2e:
         64:71:31:90:be:18:99:02:45:36:5b:73:34:e1:f1:e2:a2:ad:
         b0:3b:25:d8:d4:4b:de:0b:99:2d:7e:63:87:0b:4d:56:61:1e:
         73:d5:01:fc:71:af:85:c4:96:5a:dd:d9:3d:0a:54:83:a0:cb:
         47:61:e3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 18:20:28 2025 by rpki-client