Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
File:                     _Nbe4Pi6PCIpPWLscB7yULzI0uc.mft (raw, json)
Hash identifier:          /Uvf1g1cqyjRQlD78Oj9hO9KFgI400mNdbmnclGHtps=
Subject key identifier:   6B:6C:93:33:F7:1C:A2:C5:04:27:04:9E:8C:A3:F7:B1:6A:79:87:3F
Authority key identifier: FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
Certificate issuer:       /CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Certificate serial:       019745F9338B7258D0D60742E0BE4136818C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
Manifest number:          0555
Signing time:             Fri 06 Jun 2025 16:00:48 +0000
Manifest this update:     Fri 06 Jun 2025 16:00:48 +0000
Manifest next update:     Sat 07 Jun 2025 16:00:48 +0000
Files and hashes:         1: _Nbe4Pi6PCIpPWLscB7yULzI0uc.crl (hash: nNYO5l94dTJjsC+nxjLlrFxspdJRX/py92Zvo51mpYc=)
                          2: uDZZBTPRRP5MQogb2OjdT8pUiBA.roa (hash: T9yL9Bw5mv08XIGrA3/0U3W6rC1uZNivZ+GrYQ4KE/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:f9:33:8b:72:58:d0:d6:07:42:e0:be:41:36:81:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
        Validity
            Not Before: Jun  6 16:00:48 2025 GMT
            Not After : Jun  7 16:00:48 2025 GMT
        Subject: CN=6b6c9333f71ca2c50427049e8ca3f7b16a79873f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:eb:08:67:da:e1:c2:ee:53:59:4b:5f:b8:
                    b3:44:6a:ab:cc:0e:00:30:26:ed:4e:47:1a:07:70:
                    62:03:7d:9b:ca:40:9d:27:db:01:59:21:3c:db:9e:
                    db:1c:c3:c0:f7:74:49:4e:39:0c:bc:4c:dc:e0:5a:
                    10:ee:52:7f:79:fe:87:4e:2b:b6:50:43:79:fa:9c:
                    30:3e:35:e7:0b:c8:7f:fb:a2:ee:c6:d4:92:4c:20:
                    b6:ad:b5:43:da:1b:b3:fc:e2:97:48:33:47:d3:a2:
                    00:c6:e1:6b:ac:8d:57:d7:2a:5d:a8:3c:7a:80:74:
                    f6:a6:d8:66:b8:64:52:9a:e5:2f:d6:67:56:33:b6:
                    78:44:86:d3:ba:02:a4:6c:93:8e:77:ce:ce:0e:ae:
                    0c:93:fc:4e:e1:9d:ba:0b:90:6a:e3:34:f4:eb:28:
                    dd:db:c5:01:6d:08:86:70:27:66:5d:d6:e5:4c:aa:
                    a3:6e:6b:72:b7:e6:66:03:a7:90:83:4a:9d:cd:6b:
                    13:cb:64:5b:52:61:5b:3c:30:53:96:cd:d8:48:2c:
                    ab:30:5e:05:fd:0d:98:a1:1d:f1:a5:a5:9b:ab:00:
                    55:f9:8c:62:03:5e:12:3d:cf:35:a3:13:46:77:f7:
                    96:2b:e4:dc:af:7d:b0:d3:41:6e:5e:b8:d2:22:ff:
                    45:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6C:93:33:F7:1C:A2:C5:04:27:04:9E:8C:A3:F7:B1:6A:79:87:3F
            X509v3 Authority Key Identifier:
                keyid:FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:37:55:fb:7a:c0:73:5b:46:29:f2:41:43:47:6e:4b:ec:fe:
         b8:26:6a:a1:db:5e:6a:c1:d2:89:84:66:f2:c5:6d:df:bf:64:
         22:76:a4:31:4e:06:0a:ae:8c:d1:e9:06:dd:49:97:c6:f3:09:
         ca:59:06:b8:57:3e:20:d6:60:71:c9:a6:89:3a:aa:da:94:8e:
         be:b5:c2:93:12:3f:0d:07:ac:0f:9e:a0:d6:30:5e:70:01:8f:
         60:7a:b0:03:a4:56:c5:5f:08:f3:88:6a:b0:b8:eb:f0:1b:22:
         40:f0:95:0c:5e:4e:37:74:32:ac:bf:83:b2:4b:5c:27:2b:07:
         60:93:3f:08:1c:b5:71:8d:ce:d1:b5:5c:34:b5:b5:99:ad:f7:
         f0:41:e1:bb:6a:b5:b0:f5:26:b2:da:81:9e:ac:dd:d2:6f:4b:
         6f:6e:28:68:f4:9e:87:61:e9:6b:a4:4f:a3:ed:ed:5e:03:ab:
         15:53:96:2f:fa:b0:a8:8b:d2:4f:4c:e2:3b:74:4f:56:39:43:
         4b:46:1f:73:8d:cb:15:31:7e:fe:fe:66:3f:de:c6:0a:45:13:
         bf:08:b8:bb:84:63:67:e6:1c:30:17:99:3d:25:5e:22:9a:08:
         e0:a4:41:1b:47:31:93:b2:24:f1:b8:c1:c8:f3:d5:92:a5:b4:
         84:c0:d4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:12 2025 by rpki-client