Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
File:                     TdI0IiZKecAxVILtTyfHUTU_Jrs.mft (raw, json)
Hash identifier:          +DiYMoSfCg0f73Qp1GxjsheE2jmqIYQxiSKHQwIpwl8=
Subject key identifier:   5D:B5:FE:2E:4E:C1:E4:8D:BE:94:85:2A:67:3D:87:D3:8E:32:90:01
Authority key identifier: 4D:D2:34:22:26:4A:79:C0:31:54:82:ED:4F:27:C7:51:35:3F:26:BB
Certificate issuer:       /CN=4dd23422264a79c0315482ed4f27c751353f26bb
Certificate serial:       01974A0C6FBC167D10148CCAF9733FAD76DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
Manifest number:          06C9
Signing time:             Sat 07 Jun 2025 11:00:18 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:18 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:18 +0000
Files and hashes:         1: TdI0IiZKecAxVILtTyfHUTU_Jrs.crl (hash: YdNpBAk+tLp4HWnrUu6bC0xJJMdeLAXenZwcTmZmT1E=)
                          2: bJM_lGyoCdHM4Ew-bll92CWr05o.roa (hash: /LNeEVaQM+dKQQyk+FaHOgVJEKHJjoz/8u1g5mTs7vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:6f:bc:16:7d:10:14:8c:ca:f9:73:3f:ad:76:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd23422264a79c0315482ed4f27c751353f26bb
        Validity
            Not Before: Jun  7 11:00:18 2025 GMT
            Not After : Jun  8 11:00:18 2025 GMT
        Subject: CN=5db5fe2e4ec1e48dbe94852a673d87d38e329001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cc:99:45:ee:e3:6e:b5:c9:5a:c4:02:5e:9a:
                    0a:fd:18:cf:59:7f:b4:03:51:b8:ee:a1:de:f6:8e:
                    02:ef:3f:10:76:bd:d2:7f:87:bc:bb:11:19:14:ad:
                    9b:63:e1:54:40:ce:5e:9b:a5:31:a4:d3:52:66:e1:
                    55:ae:27:3e:b5:fd:15:c4:cf:fb:7d:58:1d:e5:df:
                    98:c0:a5:8d:24:71:d4:82:dd:3f:59:f3:8e:07:86:
                    e5:84:9f:75:83:ad:70:cf:81:24:90:ab:28:9a:7a:
                    79:a1:14:e7:00:42:5c:9d:84:ab:b7:98:7e:52:40:
                    24:93:d6:1c:79:2c:2b:5b:54:0e:00:b3:0f:ab:bd:
                    86:d6:53:2b:73:eb:9e:7e:2f:45:81:11:f0:2e:d5:
                    42:3c:8c:13:c7:23:f2:4c:6d:c6:1c:da:30:20:bc:
                    ef:29:74:b3:73:2c:63:67:27:5c:cb:f0:18:c6:e6:
                    9a:35:77:59:35:28:8a:eb:10:b6:84:d8:9c:14:bf:
                    e0:f3:9b:d3:3d:eb:e0:c9:c6:d6:8c:48:7e:f2:a0:
                    cc:20:35:ff:76:6e:7d:a6:b6:53:61:93:54:4f:90:
                    8a:ca:8c:54:50:42:5c:24:8b:84:b9:21:ed:3a:b9:
                    22:42:27:f7:df:e0:82:53:2f:dd:91:13:75:f9:e5:
                    fc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B5:FE:2E:4E:C1:E4:8D:BE:94:85:2A:67:3D:87:D3:8E:32:90:01
            X509v3 Authority Key Identifier:
                keyid:4D:D2:34:22:26:4A:79:C0:31:54:82:ED:4F:27:C7:51:35:3F:26:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:8d:60:9f:76:3e:83:d7:96:ae:b4:57:01:68:0e:87:c6:e6:
         4b:da:02:96:65:e0:3a:22:ae:f5:dc:db:55:b8:27:ba:3c:6c:
         80:3d:10:b8:fb:99:68:cb:d4:03:89:42:52:29:8f:c7:b3:3f:
         3c:df:1d:f6:8c:49:4e:63:4b:95:ad:0d:8d:c2:4d:7b:54:e0:
         68:7f:66:8d:e7:f0:87:fd:dc:eb:f9:55:6d:b1:a0:6f:5c:42:
         98:7b:ab:15:37:47:3e:55:1c:d1:1e:3b:12:f1:10:67:d6:15:
         d5:13:e0:ee:a3:c8:53:5a:21:1d:f1:f2:d9:76:f4:86:88:71:
         47:ee:38:a6:09:1f:44:2f:da:fc:3a:94:3e:2d:79:17:dd:40:
         a4:e2:d3:c2:fa:d0:c9:52:d6:7f:95:ca:90:7c:2e:60:7d:6d:
         28:2a:76:8f:bb:1e:47:aa:9a:ab:56:c9:85:5f:17:05:64:8a:
         a1:59:1c:18:0c:01:ce:68:bf:4d:5c:c3:58:0e:dd:bf:bf:7d:
         9b:9c:fc:5d:d0:d5:f7:00:ea:a3:fc:c9:e1:95:69:eb:c9:59:
         65:d5:d5:e4:5f:47:3b:56:e2:6f:c1:86:98:dd:e6:a1:4a:05:
         11:78:c2:02:ad:de:1f:fc:e1:30:a4:90:89:cd:b4:0f:7c:f0:
         4e:2f:e1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:42:10 2025 by rpki-client