Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
File:                     v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft (raw, json)
Hash identifier:          w2VUe0bMSr2CZSnNHH4c5cbB2z+PAlqrKAdAfhP368A=
Subject key identifier:   AF:DE:DB:22:21:8D:D5:A1:E6:ED:CD:65:20:B4:A7:83:69:24:B7:A2
Authority key identifier: BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11
Certificate issuer:       /CN=bfac12dab75d9c09f3120179373e995ae3917911
Certificate serial:       019747E7C0C6650C9D0A7D116DCEB473A8D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
Manifest number:          0163
Signing time:             Sat 07 Jun 2025 01:00:59 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:59 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:59 +0000
Files and hashes:         1: jzM77P9xsYn5MAVakoO0HLR2EkI.roa (hash: h0SxsVCXMkdE1oBd8hWK7t+rP5KlnAbkMvVnkeRV7Cs=)
                          2: v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl (hash: IrKkQMt0qfi3dFV70Sch/G67oPr3SMEWB4+zwsk2eEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:c0:c6:65:0c:9d:0a:7d:11:6d:ce:b4:73:a8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfac12dab75d9c09f3120179373e995ae3917911
        Validity
            Not Before: Jun  7 01:00:59 2025 GMT
            Not After : Jun  8 01:00:59 2025 GMT
        Subject: CN=afdedb22218dd5a1e6edcd6520b4a7836924b7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e7:31:2e:3a:13:7a:74:3a:70:06:8d:8a:b2:
                    57:6d:b3:7a:5d:1f:7e:02:4c:08:8c:6a:05:d7:80:
                    d1:61:b2:5e:5c:c3:dc:1e:9c:a8:4b:7b:6d:e8:ee:
                    b6:53:8a:0b:01:d5:16:19:b5:0f:51:53:f0:ce:aa:
                    c5:c5:7b:bb:6d:e4:c5:6a:30:3d:2f:e6:dc:ef:c2:
                    38:7b:fa:57:93:27:d6:fe:50:36:67:33:3e:93:1c:
                    c2:2b:01:97:b4:07:bb:eb:09:e1:f8:06:cf:d7:71:
                    24:c8:40:92:ca:8c:40:eb:d5:6a:4e:28:f9:10:53:
                    e0:19:00:c6:5b:95:0d:a5:bf:8f:dc:36:05:e7:ea:
                    a3:9a:ca:c2:e2:bc:26:98:ba:41:c5:ba:68:d1:46:
                    5e:09:dc:a8:34:64:f7:b0:08:9d:9d:f4:61:d8:df:
                    6f:68:30:c7:bc:a1:bd:0b:6d:f3:1e:af:4d:7c:e2:
                    a6:cf:9d:fc:5b:7f:2b:3b:11:5b:bf:16:52:72:62:
                    1e:6e:93:26:42:e4:34:09:21:53:4c:6c:5a:bf:21:
                    40:8e:04:47:e4:cf:67:ff:a4:a1:0d:d7:e9:f3:00:
                    ce:b9:f4:57:31:34:35:7c:8e:cc:d7:20:58:05:1a:
                    56:93:e0:af:8f:a0:13:40:76:2d:9e:e6:b0:f4:a9:
                    b4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DE:DB:22:21:8D:D5:A1:E6:ED:CD:65:20:B4:A7:83:69:24:B7:A2
            X509v3 Authority Key Identifier:
                keyid:BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:3c:64:30:d8:4b:e0:fd:89:bf:40:86:f9:db:64:82:18:d8:
         74:30:e2:0e:01:55:ea:08:cf:d0:33:db:37:20:9b:a8:cb:35:
         ba:fb:d7:2c:84:52:59:c3:07:36:2a:0b:e6:27:be:55:57:c7:
         b3:7d:b0:05:11:8d:32:3e:79:ce:39:59:eb:bb:63:16:8c:d1:
         c4:57:c1:76:1a:2b:95:80:fd:c0:86:e3:3a:db:cc:08:b7:41:
         d6:4d:d0:e0:46:6d:0d:07:49:99:7d:64:4d:b4:95:fd:63:4d:
         c1:72:e0:fd:a2:71:9b:23:74:08:eb:fc:17:27:c4:96:49:8b:
         d3:55:97:8b:8f:a8:01:9d:88:41:84:ac:82:98:40:bb:b3:c9:
         5c:75:ce:f0:ff:93:1d:90:30:ce:4f:16:1d:a3:a6:3e:90:67:
         3e:fc:dc:ad:42:82:8b:2c:e4:3a:82:c4:2a:c6:04:ef:f6:17:
         40:fe:50:77:e3:3f:c6:94:f1:45:cc:24:75:f7:d5:59:04:88:
         f0:4d:7c:d0:55:29:5f:44:5d:e7:f6:e3:15:83:ea:74:24:f6:
         f5:c8:2c:79:76:14:a0:e2:8c:a2:eb:84:d7:62:3a:5a:80:8e:
         7c:9d:c3:da:5a:32:5a:8a:48:7e:f7:e1:b0:da:f5:14:6c:96:
         67:a6:b5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:19:16 2025 by rpki-client