Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
File:                     TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft (raw, json)
Hash identifier:          i/nso6cok12NSsLrX4qFVgHH2A68tvVFCp3XRiQjrgg=
Subject key identifier:   BF:03:2D:21:5D:C9:5C:41:A0:F7:2A:FE:26:BB:E5:29:B1:B2:27:C2
Authority key identifier: 4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79
Certificate issuer:       /CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
Certificate serial:       0197B88F2401408945D3FA77E7728FF4AB3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
Manifest number:          06FD
Signing time:             Sat 28 Jun 2025 22:01:17 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:17 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:17 +0000
Files and hashes:         1: GQnwoz9GTo0_6aViyidBMz0OXtQ.roa (hash: nHXXJO9fTVBgm0+nbMIO/zyd2MM+aOqt/Y2KW6tLr74=)
                          2: TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl (hash: Fo4TJjkUVgbls0tNxampiWrG2zDNDKW28w6f9CJwSbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 22:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:24:01:40:89:45:d3:fa:77:e7:72:8f:f4:ab:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
        Validity
            Not Before: Jun 28 22:01:17 2025 GMT
            Not After : Jun 29 22:01:17 2025 GMT
        Subject: CN=bf032d215dc95c41a0f72afe26bbe529b1b227c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a2:09:4e:d9:99:fa:12:d4:12:0a:2d:32:6d:
                    9d:0b:cb:b8:bf:4e:b1:a9:e2:56:a7:9e:e4:19:d4:
                    5a:13:70:de:e0:e0:6a:e0:17:0e:14:34:cc:95:13:
                    ca:d2:45:a9:13:29:12:87:8a:ba:37:d1:dc:50:c5:
                    da:fb:64:20:32:e9:1e:d0:1a:ac:30:f0:bf:4e:da:
                    1e:32:99:5a:e9:16:ab:13:83:53:70:5f:02:35:be:
                    ef:84:a4:e7:a3:71:89:58:ab:29:2e:68:25:06:46:
                    7c:20:44:20:43:13:b0:58:13:8a:62:b3:3c:83:ac:
                    41:4d:04:2f:8f:f9:de:1a:87:c2:bc:9b:1a:b4:fb:
                    96:b3:f8:a6:7d:b3:fe:4a:83:6f:7b:20:30:29:20:
                    2e:cf:f0:de:75:b9:77:43:ff:2e:e5:1b:98:e3:5f:
                    fe:15:3a:26:79:b5:90:82:64:37:4e:9d:1f:a8:2e:
                    d5:d1:5c:50:9a:4c:bc:27:6e:d1:b8:0e:4d:a7:de:
                    8c:09:63:48:84:04:c2:4b:f3:e0:3b:31:13:80:1d:
                    71:88:ff:16:98:57:3a:c6:04:3b:ab:87:92:86:c7:
                    8e:3e:cd:45:7e:85:4d:f0:13:cf:82:a9:d1:3c:33:
                    5d:03:4f:47:35:26:2b:d5:18:b1:3e:e9:14:57:64:
                    25:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:03:2D:21:5D:C9:5C:41:A0:F7:2A:FE:26:BB:E5:29:B1:B2:27:C2
            X509v3 Authority Key Identifier:
                keyid:4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:59:84:63:b7:a8:cb:e8:d1:55:a9:09:e1:53:12:dc:52:d3:
         8b:54:fd:88:2d:0c:15:bd:da:af:bb:f3:93:f0:66:59:7b:50:
         fc:ca:8a:b9:21:fa:f0:aa:de:fa:bc:a6:3d:26:03:4d:40:3e:
         6c:86:6a:9c:21:12:95:ab:d3:29:c1:1a:8b:d0:3b:6f:d0:6e:
         95:4b:94:f6:f8:95:74:c6:54:35:4a:f0:b7:a3:8d:e3:59:87:
         d8:d7:0b:2c:01:f9:0c:c7:68:26:62:29:97:71:0b:c2:8f:81:
         c1:65:45:b1:f2:38:26:88:75:39:8b:82:57:04:ad:0f:98:b0:
         8b:dd:10:f2:48:3b:6f:4e:c6:22:09:af:73:77:27:bb:77:88:
         e1:2f:3b:5b:fe:4a:da:c3:d5:b0:52:e9:f6:fa:58:1b:50:b3:
         bb:9a:f1:5f:88:2c:8b:dd:d8:09:6c:3a:bc:b6:1a:06:fa:27:
         33:62:85:94:4b:eb:9d:45:8c:e8:fd:d4:97:b0:82:ab:6f:b4:
         78:d5:8e:52:6b:31:df:fe:89:50:33:bc:05:b6:ca:f8:a4:70:
         08:e9:5f:ba:95:67:38:32:3f:bc:56:5f:55:e8:7b:93:63:ca:
         b1:8f:ba:3e:96:32:0a:54:cf:63:0f:cd:af:fc:a9:a5:40:73:
         24:ab:c4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:05:10 2025 by rpki-client