Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
File:                     rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft (raw, json)
Hash identifier:          gu25jRNyhcA/1R0BR30+Gb+pSKFEYzqKrHCo57fQOTI=
Subject key identifier:   6E:0D:45:FC:11:A5:35:80:55:AE:9B:1A:4E:87:8B:E6:73:E3:6B:2C
Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
Certificate issuer:       /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Certificate serial:       0197B6A119F6DDDCE6EF0C514AF08260926A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
Manifest number:          0575
Signing time:             Sat 28 Jun 2025 13:01:40 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:40 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:40 +0000
Files and hashes:         1: FsvHHK3N340PdZxTOfknSUlyE_g.roa (hash: klYlyFGTA9+a9+gPyW/NlmMuXbJ8Eoai3ZAQsGVy0yo=)
                          2: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl (hash: Ushi+HlhWw/Z8hMfV+5nY30msTLq6Iew7+6eaQH7pNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:19:f6:dd:dc:e6:ef:0c:51:4a:f0:82:60:92:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
        Validity
            Not Before: Jun 28 13:01:40 2025 GMT
            Not After : Jun 29 13:01:40 2025 GMT
        Subject: CN=6e0d45fc11a5358055ae9b1a4e878be673e36b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:64:87:81:10:c3:ff:e1:ae:de:04:01:99:06:
                    15:ea:81:3d:c1:b0:b6:9c:c9:fe:59:93:5a:94:12:
                    e7:5e:e6:2a:fd:82:24:3f:79:5b:56:d9:bc:34:6f:
                    85:68:95:46:c6:76:a6:59:f6:49:26:36:dd:7d:63:
                    23:14:b0:b2:cc:bb:20:ee:95:63:4c:d2:39:48:03:
                    f0:b1:6a:de:ec:5b:4b:17:be:47:e5:f3:ab:89:7f:
                    91:18:c5:bf:5a:af:96:4d:94:d6:6c:8f:01:70:e9:
                    06:3d:33:be:7b:18:3a:0c:7e:fe:e9:93:a1:eb:45:
                    46:7b:c6:46:e3:b8:8b:91:9b:3d:f7:78:05:09:6c:
                    29:50:0a:0a:66:e8:a5:0e:53:a9:fe:5e:bc:75:31:
                    9d:e3:a9:7e:05:f0:de:73:e8:77:28:9e:23:63:8d:
                    ec:17:71:af:86:6e:b3:ae:27:e9:aa:77:52:77:8c:
                    62:03:b9:06:e0:5f:70:65:cb:46:5a:ed:d9:25:13:
                    73:24:c5:4b:89:de:b2:da:5a:89:21:60:70:d4:9f:
                    3b:dd:44:c0:85:f8:ac:0d:f2:ef:7c:a5:b8:41:29:
                    6a:ac:0c:fc:52:c6:d2:ad:15:a3:c6:29:e8:2f:22:
                    68:c5:c4:2f:73:83:4a:dd:2a:f1:df:65:1e:d7:cd:
                    7f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0D:45:FC:11:A5:35:80:55:AE:9B:1A:4E:87:8B:E6:73:E3:6B:2C
            X509v3 Authority Key Identifier:
                keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:76:b6:fe:6d:e8:47:a3:40:6b:16:ef:d8:d6:80:de:d7:e8:
         92:6b:3a:28:8c:c7:ec:d0:4d:0e:f9:05:28:b9:63:cf:7f:9d:
         dd:8a:c6:2a:19:0a:d6:69:46:60:6d:aa:50:4c:cc:95:4e:56:
         4d:d6:36:c6:ff:68:56:16:a1:30:e3:9a:a3:bb:1b:cd:5c:81:
         91:d1:e5:6e:a5:3e:3f:80:90:64:b4:5b:67:b1:f3:2d:e7:81:
         31:1d:78:74:7b:e8:6d:6e:09:9d:6f:52:c2:83:6b:07:c6:f5:
         6a:09:d5:a1:fa:b6:a1:25:9f:e9:29:6d:4e:96:c6:05:2e:b7:
         39:94:69:1a:f1:5f:d0:e6:5f:f2:25:87:d4:c3:56:e2:24:f3:
         57:7a:c2:3e:7a:8b:c5:b5:c4:44:3d:9b:82:eb:67:a2:1f:46:
         b6:04:39:5b:e7:ba:83:e7:ad:58:d2:24:da:79:fe:04:d7:62:
         99:6b:b6:28:45:0e:c4:d2:a8:e7:34:97:7d:df:54:c9:ba:1b:
         dd:bc:0f:ef:c2:cc:5c:89:71:95:d9:8d:2f:b6:4f:5b:e0:78:
         2c:50:81:8c:aa:db:77:79:f8:ed:8d:47:91:43:d1:93:10:fd:
         cd:94:1f:60:4d:b6:37:f6:c6:a5:fe:d6:c1:25:bb:64:3a:ec:
         5c:17:33:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:09 2025 by rpki-client