Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
File:                     cAAC6c0sdKDvi1G0DUTRQaky0oM.mft (raw, json)
Hash identifier:          5H8/aiqDT5nuz7il0Qj+SqOxsma6aTpGb0cu21urWaw=
Subject key identifier:   C6:4E:10:EC:05:2B:9F:2A:FB:5F:74:BA:3E:F5:1E:F0:F7:E7:94:A9
Authority key identifier: 70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83
Certificate issuer:       /CN=700002e9cd2c74a0ef8b51b40d44d141a932d283
Certificate serial:       019752A210404EFFA651B168757F90EA8DFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
Manifest number:          0D1C
Signing time:             Mon 09 Jun 2025 03:00:42 +0000
Manifest this update:     Mon 09 Jun 2025 03:00:42 +0000
Manifest next update:     Tue 10 Jun 2025 03:00:42 +0000
Files and hashes:         1: 7oIzidmPV5DMaJu71KEE7TN3jrE.roa (hash: kCtY+zZ5Nv1Tl34nUDS681Pc5/oW0aaVlayqB3KyvjU=)
                          2: cAAC6c0sdKDvi1G0DUTRQaky0oM.crl (hash: mgDIa/nPi7xvgS+t3hyrt40FUdp9vT4AEWElI/+TGxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:a2:10:40:4e:ff:a6:51:b1:68:75:7f:90:ea:8d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700002e9cd2c74a0ef8b51b40d44d141a932d283
        Validity
            Not Before: Jun  9 03:00:42 2025 GMT
            Not After : Jun 10 03:00:42 2025 GMT
        Subject: CN=c64e10ec052b9f2afb5f74ba3ef51ef0f7e794a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:c9:c4:41:bc:9e:2b:93:7d:f4:dd:e0:4e:
                    a1:44:4f:9f:47:2e:c0:bc:fe:3d:6c:2b:9a:2a:4e:
                    c1:68:af:77:07:d8:a7:a6:6f:37:3b:02:9c:9c:cc:
                    08:b1:62:e9:21:b9:bf:f0:1a:85:c9:42:77:c4:07:
                    6e:0c:5a:88:5e:5c:62:3d:c9:cc:dd:f7:d5:3c:2e:
                    15:1b:82:0d:0e:3b:6d:2f:22:29:7d:44:53:34:b5:
                    c7:8c:51:84:67:0f:c0:50:c6:8f:ea:ba:6d:89:fe:
                    02:b7:9f:59:c4:78:14:2a:1d:70:61:20:33:c7:29:
                    84:4a:f7:16:93:c7:cd:ad:82:e0:7a:b1:c9:2b:d7:
                    61:f6:e0:d5:ee:dd:22:a8:e0:a4:a5:75:92:97:6e:
                    ec:f4:01:ae:07:41:26:46:d8:32:65:cf:4a:f1:94:
                    71:bf:e5:18:2f:93:e5:92:07:6b:72:87:7c:d9:8a:
                    a3:be:12:a0:63:88:ca:2d:7a:43:29:9a:17:54:d5:
                    c8:81:65:27:d7:f2:77:91:1a:bc:31:70:01:3d:d6:
                    c6:76:36:72:9b:8a:91:53:bc:00:cb:0d:05:15:1b:
                    14:ab:42:38:47:24:4f:46:bb:a8:7a:02:9c:60:d0:
                    bb:cc:a1:25:e5:9d:19:40:2c:5b:8a:eb:dd:98:11:
                    78:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4E:10:EC:05:2B:9F:2A:FB:5F:74:BA:3E:F5:1E:F0:F7:E7:94:A9
            X509v3 Authority Key Identifier:
                keyid:70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:3c:6b:ee:e5:0b:6c:d5:4e:b6:1c:0f:8a:d4:12:ad:2c:82:
         83:05:4c:60:85:6f:e0:4e:73:08:8d:f8:2f:fb:6a:a6:1f:41:
         9e:af:c1:79:3c:e3:87:4e:5d:df:83:c0:42:11:7b:62:82:30:
         46:85:44:9a:ba:6e:0d:7e:67:74:bf:61:db:c6:3f:af:16:2d:
         76:9c:a9:e2:ef:32:d5:a8:fa:38:b2:15:b0:d9:37:94:5d:ef:
         7e:59:3a:21:3a:8e:9a:f8:3b:48:dd:42:b7:1c:d5:4f:f5:26:
         b4:6c:bf:ad:66:2a:e1:44:26:3c:8e:11:5c:d0:41:b2:fd:71:
         f3:19:2f:7b:a1:1f:ba:3b:6b:00:6b:70:85:9e:18:78:79:72:
         c0:08:31:c4:25:b0:a8:af:5e:ad:6e:d5:bb:fc:37:96:7a:4f:
         94:38:58:88:c4:4b:31:ab:4e:6f:e8:4a:aa:4a:a4:97:cc:ce:
         e2:77:b7:5e:ec:30:0d:ff:4e:05:45:bc:9f:94:dd:28:b6:ee:
         3e:09:4c:1d:46:f4:ae:d3:6b:bf:6f:30:1f:7d:2e:a2:1a:56:
         9b:a7:be:0a:c8:64:7e:50:b4:18:da:5d:49:85:2f:0f:64:10:
         ea:29:eb:88:3d:a0:56:a6:aa:c3:e8:9d:85:b3:7b:f8:96:70:
         60:dc:c9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:49:42 2025 by rpki-client