Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft
File:                     B0Rsf2NCHXPCj4ynf9LUo1chABU.mft (raw, json)
Hash identifier:          jrh1I0yah6JQE1mOb8Bu7zk7qg0DdRmmIsa4/7lpX5U=
Subject key identifier:   C4:7C:5C:94:42:E5:7D:DC:6D:28:8C:40:94:84:16:CD:7F:B8:46:8C
Authority key identifier: 07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15
Certificate issuer:       /CN=07446c7f63421d73c28f8ca77fd2d4a357210015
Certificate serial:       01974742C02D53DD5F3FA405D7882B95C2F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft
Manifest number:          150C
Signing time:             Fri 06 Jun 2025 22:00:46 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:46 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:46 +0000
Files and hashes:         1: B0Rsf2NCHXPCj4ynf9LUo1chABU.crl (hash: j9YCwoQoTMYMWJYTomiS9F1CD9wxui7alEn80VOLTk4=)
                          2: V80Jvy0KLZQjqpeQNIx-dc-Ahgc.roa (hash: 0JhsZS/w87YjLNxBWJNFG7eEJHrJWihhV/iC23LdiYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:c0:2d:53:dd:5f:3f:a4:05:d7:88:2b:95:c2:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07446c7f63421d73c28f8ca77fd2d4a357210015
        Validity
            Not Before: Jun  6 22:00:46 2025 GMT
            Not After : Jun  7 22:00:46 2025 GMT
        Subject: CN=c47c5c9442e57ddc6d288c40948416cd7fb8468c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:94:5b:52:f2:d5:85:54:7b:a1:c2:06:74:7c:
                    57:87:a8:b2:34:9f:ce:c6:26:ea:ac:cc:dd:9e:12:
                    39:e2:92:8d:42:5d:4a:42:7a:51:e9:d0:46:50:82:
                    c6:7c:82:5d:06:5d:09:10:e2:a0:34:13:a4:11:b6:
                    8e:07:13:71:04:64:5f:91:52:b6:62:15:1f:29:5a:
                    60:75:a6:09:54:ae:45:9b:32:44:51:c5:9d:3c:8c:
                    5b:c7:3d:25:a8:89:43:7d:82:70:d0:1f:c0:f4:af:
                    09:4e:47:27:43:38:51:0a:5d:61:d1:75:4c:32:ed:
                    72:75:14:6c:b3:fe:e6:a7:4b:b1:ce:a5:7e:5e:de:
                    d3:71:76:76:f4:38:20:66:a1:ee:1f:1a:32:49:4d:
                    ea:d5:50:11:3d:ef:30:02:7e:e2:d6:c6:9c:40:28:
                    d2:3e:08:df:65:f8:b0:ad:dd:b4:12:f8:e5:f3:55:
                    50:10:88:f4:8b:da:73:98:ef:b4:48:a4:7c:8c:67:
                    45:9f:c0:42:b6:55:4a:48:12:2a:79:33:18:6b:41:
                    8a:87:15:43:35:9e:96:06:58:75:4e:93:b9:5a:12:
                    0c:3f:c5:ec:b1:3a:cc:5c:1f:6f:d2:06:22:75:5c:
                    42:93:76:cd:a0:1f:12:66:d5:ad:4b:af:02:b2:0a:
                    c6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7C:5C:94:42:E5:7D:DC:6D:28:8C:40:94:84:16:CD:7F:B8:46:8C
            X509v3 Authority Key Identifier:
                keyid:07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:0a:20:15:41:90:45:6c:0f:b0:3f:67:42:41:47:4d:b3:20:
         d0:88:9a:f8:e3:76:3f:40:92:25:35:12:25:fe:f9:be:a9:ac:
         d1:b2:5a:50:31:67:ca:84:1d:7d:d7:5e:72:9d:16:67:53:27:
         6f:71:0b:67:46:1e:77:4e:13:7e:db:12:da:bf:e7:b7:9a:39:
         ec:4c:05:cb:eb:af:ca:96:d7:b8:c4:43:db:ce:5a:b5:fa:5c:
         79:cd:5c:ea:68:b5:e7:07:da:3f:6d:c7:da:3a:89:41:b9:9e:
         0f:d1:db:ee:41:37:b9:2e:84:29:df:c5:3a:28:e0:d9:c4:1b:
         00:a4:86:0b:d2:b6:fd:8c:15:de:76:be:74:4c:fc:b7:f7:dc:
         15:8d:d4:64:b3:99:6d:04:8e:1e:93:93:5c:c6:7d:44:9b:12:
         f2:57:10:3f:e5:29:3a:ff:80:62:0c:4f:5c:18:dd:b8:bf:4a:
         7f:a1:28:0f:98:ca:b9:b3:20:98:fb:16:06:e9:20:8b:18:18:
         b1:42:13:47:e6:a1:80:4b:d3:86:f8:2c:fd:56:04:ae:82:71:
         8b:50:6c:f3:51:14:0c:53:77:38:0e:0a:25:bb:cf:f1:ae:d7:
         52:64:b4:1e:80:2b:06:39:f3:57:db:29:01:2f:65:78:38:1d:
         2e:7d:8a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:48 2025 by rpki-client