Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
File:                     0mHPvAfsMGN33LFql6EWDHptgsw.mft (raw, json)
Hash identifier:          0dAy/rVywjBK+UXbpJEzlPIfqEyD/R1ZcjS8NRRoZbA=
Subject key identifier:   81:68:65:43:B3:CB:4C:BC:58:F6:12:FF:FC:CB:FB:58:C2:CE:A7:51
Authority key identifier: D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
Certificate issuer:       /CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Certificate serial:       0197477974EEEC95D42A93CAE620C26CF373
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
Manifest number:          01BC
Signing time:             Fri 06 Jun 2025 23:00:31 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:31 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:31 +0000
Files and hashes:         1: 0mHPvAfsMGN33LFql6EWDHptgsw.crl (hash: 11O9QQajpAjl3uo05a+y/tgqToaMA2rtptmjf7CQSdM=)
                          2: 1-242YNLxFtHiZKrZjOTCTUI_hX4.roa (hash: Zl/0hNDNG1rQGa8HsGyytZ4/ZO9Krs9kfipHSTu8iZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:74:ee:ec:95:d4:2a:93:ca:e6:20:c2:6c:f3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
        Validity
            Not Before: Jun  6 23:00:31 2025 GMT
            Not After : Jun  7 23:00:31 2025 GMT
        Subject: CN=81686543b3cb4cbc58f612fffccbfb58c2cea751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e7:6e:75:88:66:0a:b4:a3:a4:48:d6:0e:c6:
                    f1:00:39:8a:3a:cd:45:38:b7:b7:f1:40:17:1e:43:
                    dc:4c:5f:1b:58:0b:de:5a:77:14:26:37:f6:a5:cf:
                    86:05:a9:89:9c:02:e0:bd:50:a1:e5:c0:d9:98:7a:
                    ff:51:e2:9b:0b:e4:1c:aa:71:92:27:75:a0:62:f9:
                    4e:9f:1a:1c:66:38:89:1b:35:9b:50:42:ca:63:36:
                    bc:3d:78:cf:55:87:5a:00:72:af:1f:fd:8e:0b:53:
                    25:5b:6a:f6:b1:8e:bf:ed:b1:61:be:02:67:ea:7d:
                    e7:51:f7:37:b7:27:95:63:cc:1d:86:c1:a8:c5:39:
                    67:ee:e0:dc:a9:df:c7:33:cb:f3:ef:33:ac:51:ba:
                    e9:e2:7d:bb:da:ca:69:55:f4:2b:09:59:18:7d:3b:
                    c9:26:09:5c:b4:0c:66:f0:38:35:7a:02:ba:d9:ce:
                    b2:83:42:c7:be:f3:99:29:8e:39:3e:9c:61:94:0f:
                    2f:1a:71:b0:35:e2:4d:d3:ba:ba:4f:6b:c3:67:e2:
                    62:ce:fd:7e:35:86:e1:ae:6f:d5:04:e3:16:ee:b2:
                    37:53:83:5d:d2:91:b9:4e:83:4e:1b:d6:e1:d0:a7:
                    44:81:f0:24:a2:2e:ae:2c:89:6d:66:32:ce:c1:f1:
                    0d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:68:65:43:B3:CB:4C:BC:58:F6:12:FF:FC:CB:FB:58:C2:CE:A7:51
            X509v3 Authority Key Identifier:
                keyid:D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:aa:52:8f:c1:d6:9f:65:a0:83:50:4a:b0:2e:04:76:9a:0f:
         b4:8b:64:73:0d:11:43:04:c1:a3:2a:a2:70:8a:0e:99:f5:bc:
         19:fe:aa:7a:ea:2c:48:43:4d:fc:75:28:78:1e:82:f8:83:b2:
         fc:29:e9:26:c1:0b:b3:fa:80:aa:68:3d:43:f9:51:9b:f4:46:
         c1:d2:a1:f3:b8:65:76:64:c1:95:e4:77:b6:c9:df:c0:5f:3d:
         5b:a0:f9:f2:45:f5:f2:d5:d0:7a:e6:ab:b3:34:44:18:26:1c:
         d6:c6:df:74:4b:0d:93:a8:08:d2:21:86:1e:99:17:83:ec:e8:
         12:3a:11:10:94:ff:fc:22:11:77:2a:7c:0a:0f:31:e5:82:d4:
         4d:19:e6:25:83:b1:e9:91:d1:71:fd:fe:6b:03:93:60:15:73:
         c8:0a:14:8c:98:ed:6d:62:78:ca:62:ba:16:7c:24:93:8c:57:
         1e:39:a1:0e:2a:fe:b1:9b:7f:98:d1:19:2a:89:8a:6f:92:55:
         95:09:99:5a:37:69:a4:9b:dc:b0:c9:f1:7d:52:e2:b0:90:48:
         17:39:b5:86:6c:d3:06:28:c8:84:d3:03:02:20:26:ac:81:a9:
         bf:f7:c3:bc:b0:12:25:7a:70:37:be:4f:1d:91:a1:05:78:0a:
         6a:02:39:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:49:26 2025 by rpki-client