Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
File:                     C86QcAXcPrBHC8PbRpCNoQkXuEo.mft (raw, json)
Hash identifier:          5881xT9JGzhnposD3bbfAog7bYMBXvMeulf8Wecfw0c=
Subject key identifier:   1D:29:AF:29:5B:6B:D6:59:53:00:E6:65:86:A5:B1:9A:08:53:18:E0
Authority key identifier: 0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
Certificate issuer:       /CN=0bce907005dc3eb0470bc3db46908da10917b84a
Certificate serial:       0197500EF62DD9F3DE06B520A0360990B6C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
Manifest number:          0F2F
Signing time:             Sun 08 Jun 2025 15:00:47 +0000
Manifest this update:     Sun 08 Jun 2025 15:00:47 +0000
Manifest next update:     Mon 09 Jun 2025 15:00:47 +0000
Files and hashes:         1: C86QcAXcPrBHC8PbRpCNoQkXuEo.crl (hash: wF9oL3MVwHVUsJFN/epkhQuy1mcoqxzeLz+LhR1+/JM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 15:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:0e:f6:2d:d9:f3:de:06:b5:20:a0:36:09:90:b6:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bce907005dc3eb0470bc3db46908da10917b84a
        Validity
            Not Before: Jun  8 15:00:47 2025 GMT
            Not After : Jun  9 15:00:47 2025 GMT
        Subject: CN=1d29af295b6bd6595300e66586a5b19a085318e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:78:f0:20:07:fd:ec:59:de:b0:a6:c6:89:
                    1d:9a:34:8d:5e:20:66:04:17:64:ec:f9:b3:7d:2d:
                    39:48:0d:65:eb:7e:58:6b:08:d6:05:e1:8d:e6:f8:
                    db:68:19:59:50:79:8a:35:d3:6d:1c:b8:95:fb:b7:
                    27:f0:9b:61:cd:58:15:f4:b4:f3:b5:20:f0:57:09:
                    f2:05:8c:83:bf:65:ca:3b:01:43:4c:69:77:19:2b:
                    4c:f7:73:2d:02:5e:e8:bc:21:79:2a:97:98:6e:56:
                    62:94:63:9f:ac:a0:6d:0b:0b:05:b9:4b:0e:c9:47:
                    e3:54:9b:c6:5d:54:29:68:12:9e:e0:39:52:00:9f:
                    89:6b:8e:36:96:43:25:7f:aa:28:59:38:9f:cf:60:
                    da:99:f7:5f:4d:ea:70:09:48:b1:92:bb:bf:7d:f2:
                    04:2d:89:e0:58:3c:0e:58:b9:31:c5:bc:c2:d3:af:
                    84:f6:5d:66:72:dc:40:0e:c5:11:f6:8c:83:06:15:
                    24:f5:13:e2:ce:b4:bd:de:07:78:14:f5:55:77:78:
                    6c:4b:b8:69:cf:78:19:69:c6:93:9c:c8:96:cd:bb:
                    68:31:90:30:bd:0b:e5:47:84:fb:c7:ee:18:02:4c:
                    56:93:59:e4:ed:e1:dd:e2:93:d3:0e:34:42:6a:52:
                    92:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:29:AF:29:5B:6B:D6:59:53:00:E6:65:86:A5:B1:9A:08:53:18:E0
            X509v3 Authority Key Identifier:
                keyid:0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:18:af:e4:0d:0f:88:68:8c:34:7b:c9:d3:9f:88:75:86:62:
         95:cf:15:51:d7:04:9a:61:7c:ba:a6:8b:58:39:0f:48:bb:0f:
         04:c2:3d:4e:df:dd:c6:d3:ae:6f:73:03:81:68:ee:ee:a2:e0:
         ab:15:c0:0c:1a:af:7e:0a:f0:74:27:6b:75:b2:36:48:9e:1f:
         ea:86:61:15:c4:0b:ef:8a:7c:f1:97:45:3d:27:a5:c8:86:d5:
         8d:7b:98:cf:39:a4:a0:0a:4f:3f:4d:c4:0f:07:ff:d6:b4:11:
         91:32:de:75:8e:b6:38:16:04:41:9f:7d:dc:54:53:b0:0c:c2:
         16:4f:e3:f4:b3:ee:4f:9e:95:9a:86:30:79:35:d4:d3:7f:e7:
         5e:22:5a:bc:53:77:7b:34:a4:22:b8:d6:16:0f:e2:4f:82:16:
         f9:c7:68:02:8f:1f:67:d5:fc:90:ed:5d:81:0b:13:8a:f5:97:
         21:06:6e:7b:b0:a2:fc:73:b9:a6:ce:a9:f3:23:c3:b1:8b:05:
         22:36:aa:a4:07:f9:b9:83:b3:25:8e:5b:55:27:88:2b:8e:7f:
         c5:83:5c:a4:cc:f7:9f:d9:c8:b5:46:fe:68:00:93:4b:be:23:
         5c:93:a3:33:5c:9a:2c:51:12:74:66:ff:15:1c:a8:78:54:e6:
         53:da:57:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:30:34 2025 by rpki-client