Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
File:                     C155jbbo9XxfSkRRUJAd7oqW1eU.mft (raw, json)
Hash identifier:          xZvnTjL2ehM57jdqaBkAlw2iBRf0zBBnUXUIzf0Ksuk=
Subject key identifier:   17:E3:D2:6B:99:AB:3F:A1:2D:C3:B7:AB:7F:F2:13:16:6E:54:2D:45
Authority key identifier: 0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
Certificate issuer:       /CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Certificate serial:       01974CD7385B770E221DBA1B046450732EC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
Manifest number:          0B6C
Signing time:             Sun 08 Jun 2025 00:01:02 +0000
Manifest this update:     Sun 08 Jun 2025 00:01:02 +0000
Manifest next update:     Mon 09 Jun 2025 00:01:02 +0000
Files and hashes:         1: C155jbbo9XxfSkRRUJAd7oqW1eU.crl (hash: fs0XV4Nlp6XrhoJBLcZlQ16kv4apPrdKhPwYaV76pZY=)
                          2: c7WoeWfnIdPF1gkZ7r90pN58Y2c.roa (hash: wpEquj9Ig8LsCQE7Y+MbSVtYeoDlqqJ8cepm+207hA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d7:38:5b:77:0e:22:1d:ba:1b:04:64:50:73:2e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
        Validity
            Not Before: Jun  8 00:01:02 2025 GMT
            Not After : Jun  9 00:01:02 2025 GMT
        Subject: CN=17e3d26b99ab3fa12dc3b7ab7ff213166e542d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4d:8b:84:5d:54:74:4a:ed:ce:2e:f4:1d:29:
                    26:c3:1b:fb:26:23:8b:ca:60:d8:14:5a:c8:e7:ef:
                    2c:44:f4:a6:a6:5f:ea:c3:96:28:2c:73:61:26:33:
                    22:8b:14:28:76:3f:08:ee:e4:78:0f:97:1d:f9:57:
                    a2:cc:02:61:54:25:ad:62:0d:7e:ab:54:db:ad:a8:
                    71:e4:61:3c:a9:e5:7b:8a:85:16:67:51:73:0f:e8:
                    e1:8e:14:11:61:43:1d:59:33:dd:79:61:9a:62:83:
                    73:4d:1c:53:92:ce:75:70:31:5a:96:f5:89:77:54:
                    40:43:1b:89:85:b3:b5:7d:d0:38:70:c6:cb:fd:ea:
                    f1:d9:94:91:2c:88:2a:e9:ca:15:2e:d5:08:b8:7f:
                    27:89:79:d7:54:f0:4e:28:72:2d:e6:9a:2d:7d:e6:
                    31:76:49:08:a0:f1:f6:a9:c6:ba:83:0e:b3:5f:a5:
                    f6:2f:4c:21:a7:aa:f5:8e:8a:67:af:88:74:13:5b:
                    a4:46:cd:1f:79:00:43:b5:4d:47:76:a8:b6:25:3c:
                    7c:2a:b0:5b:d5:48:d5:f8:8c:ad:d7:5a:71:4a:86:
                    21:eb:90:bf:25:9c:77:08:c1:95:a4:1d:ce:b5:97:
                    a9:75:c3:1c:ee:fe:c9:93:36:1e:07:04:9f:20:61:
                    15:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E3:D2:6B:99:AB:3F:A1:2D:C3:B7:AB:7F:F2:13:16:6E:54:2D:45
            X509v3 Authority Key Identifier:
                keyid:0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:54:9d:a9:c8:ba:a8:27:6a:bc:1e:79:95:02:79:3d:6a:49:
         8b:22:34:3a:4d:89:42:ae:97:72:e1:8a:89:17:aa:b9:74:fa:
         6d:5a:4b:8c:be:2b:67:3e:98:79:c7:32:22:a8:f1:19:80:93:
         3f:87:3f:c2:3e:41:49:2e:5e:be:b2:9e:da:16:22:12:ff:db:
         10:ed:a7:66:0d:2b:78:11:5b:f3:74:98:8c:3b:e5:e7:e9:e7:
         6e:56:2e:21:2f:0b:16:d5:00:5f:e1:74:c2:16:40:a3:fc:85:
         27:4c:a6:76:96:82:b9:48:39:f6:ca:a5:20:ac:f5:96:a4:28:
         65:82:f2:1b:46:e2:6b:45:b3:d0:7c:03:61:08:43:aa:2d:2f:
         5d:b6:c6:37:e9:82:94:69:22:da:a6:19:bc:6d:e0:71:9e:51:
         bf:4a:8b:b9:a5:16:50:70:43:65:2c:10:18:9d:e8:67:5e:d1:
         37:0b:9b:33:ad:ce:e0:71:ca:a8:dd:f4:65:f7:58:56:af:85:
         f6:a0:c5:a1:4c:12:fe:3d:b9:03:7d:06:78:c4:8a:f6:b5:ee:
         e4:49:a9:e4:95:d6:80:10:1b:15:91:81:3e:50:ba:b3:2b:93:
         eb:2f:5a:16:fe:c2:30:cd:f8:bf:bf:31:78:43:48:2f:43:5e:
         95:b4:52:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:11:11 2025 by rpki-client