Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
File:                     RNLnV4qslPQpYKeA05ltqLtGlHc.mft (raw, json)
Hash identifier:          c9XXkjCpv5q6ZZN8MHppXEHELpyb9OrwEfZXWJSJtEY=
Subject key identifier:   C1:0C:A8:B6:33:8C:F7:BE:CB:B5:3D:74:E0:A4:EF:C2:67:74:D8:35
Authority key identifier: 44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77
Certificate issuer:       /CN=44d2e7578aac94f42960a780d3996da8bb469477
Certificate serial:       01974D0DFAF6D9FA094223CFFC5DF25E2270
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
Manifest number:          0C65
Signing time:             Sun 08 Jun 2025 01:00:51 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:51 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:51 +0000
Files and hashes:         1: Mls2HM8_FY_IKXa_7YokWR8k2as.roa (hash: CiqhaGVIRMfnCHendb0wwlGmTiUs+e665f1gVqsw+T0=)
                          2: RNLnV4qslPQpYKeA05ltqLtGlHc.crl (hash: IxMtvLvTPZeXyhQF/Hz0aFbkz6GK4qcgW1LuUbsL09o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0d:fa:f6:d9:fa:09:42:23:cf:fc:5d:f2:5e:22:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d2e7578aac94f42960a780d3996da8bb469477
        Validity
            Not Before: Jun  8 01:00:51 2025 GMT
            Not After : Jun  9 01:00:51 2025 GMT
        Subject: CN=c10ca8b6338cf7becbb53d74e0a4efc26774d835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:82:f3:0f:92:8b:41:1c:e7:ba:0f:c4:da:d1:
                    85:0a:e1:26:07:e3:d9:6f:05:51:a3:22:b5:05:6c:
                    cd:15:62:f5:5f:4a:99:6c:d7:02:9f:c2:42:1d:a1:
                    55:7a:85:72:2d:63:19:2e:26:0e:b1:6f:cb:e0:74:
                    dd:32:86:62:c3:96:a5:7d:44:17:95:e5:00:2d:a0:
                    e8:a4:a6:9a:e1:85:45:92:c4:c9:32:65:5d:c9:2e:
                    c6:dc:61:01:c1:43:de:e6:7c:11:d6:dc:ab:aa:f7:
                    4f:27:fe:77:48:b2:bf:f4:23:4f:82:72:bd:a3:6d:
                    3f:7b:9c:12:92:9f:c9:c7:c3:dc:0f:72:54:65:b8:
                    72:0d:0a:ac:89:4e:bc:3a:92:c1:85:1c:2f:3f:cb:
                    9b:c8:45:3f:5a:09:ef:a7:a7:dc:93:58:7b:e8:3f:
                    e9:a9:50:e2:e1:71:1c:4c:e3:bf:41:0f:7b:8c:e5:
                    35:28:0c:e7:95:71:b4:f0:32:b5:c3:8e:ba:94:e8:
                    39:bc:87:60:fd:34:e9:d0:14:c0:ec:11:32:1b:6d:
                    58:23:07:63:98:15:b3:bb:71:70:af:04:9d:ab:c0:
                    bf:cc:7f:cc:1e:74:e5:aa:b8:a1:00:17:01:48:31:
                    70:36:71:93:84:d5:3f:e7:87:b0:5a:f6:35:46:fb:
                    94:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0C:A8:B6:33:8C:F7:BE:CB:B5:3D:74:E0:A4:EF:C2:67:74:D8:35
            X509v3 Authority Key Identifier:
                keyid:44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:9b:aa:56:38:7a:33:52:7a:21:bf:cf:9f:b0:d4:b8:ec:22:
         b3:7b:c6:b0:cb:50:5b:1d:cf:d6:b4:db:91:4e:c8:db:37:e6:
         13:b5:a2:53:2f:e0:81:37:e1:97:0b:d4:24:07:84:98:e0:1b:
         ba:c9:9a:f8:86:4e:fa:1d:f4:a8:3b:49:97:ec:03:34:81:64:
         9c:f2:89:3a:d7:9c:ea:f1:04:0c:f9:5a:32:46:7a:32:94:76:
         db:34:b1:36:b6:77:35:3a:17:87:d3:0a:01:c7:f1:e5:44:72:
         9e:c3:8a:4c:62:72:cc:5a:30:d8:0c:14:79:92:e9:b5:a7:54:
         fe:19:be:41:a2:31:94:9f:8e:7f:b9:f3:97:89:b9:40:be:90:
         e0:47:d1:3f:f4:7c:b0:13:24:18:d7:a0:7d:78:90:a6:61:7e:
         4e:67:51:2a:b9:cf:15:84:56:7b:a7:33:4f:65:3c:d7:57:49:
         bd:0f:01:e3:3a:20:8e:62:d2:84:1a:1f:a0:ed:94:b3:bc:66:
         d2:8f:bb:3b:03:83:10:7f:10:35:08:5e:02:50:66:53:a2:db:
         ca:63:39:d4:98:cb:97:21:82:dc:33:39:49:0d:1f:4f:f8:cf:
         12:51:23:6f:2b:51:4a:8e:c7:e8:0a:2b:66:bf:36:13:b4:17:
         4e:e7:d5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:55:29 2025 by rpki-client