Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
File:                     1Cq3jtp78B2VtZd07TRry_lqJoQ.mft (raw, json)
Hash identifier:          RZ0ldeObyzFEiqVYX5Yk3xyT6Vl+rp0uDhqNWvhFrJk=
Subject key identifier:   4D:ED:71:26:65:33:4E:7E:EF:46:1C:B5:44:67:18:97:0C:EF:62:38
Authority key identifier: D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
Certificate issuer:       /CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Certificate serial:       0197D586AA6A1E811784E354490717CCCED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
Manifest number:          0613
Signing time:             Fri 04 Jul 2025 13:01:01 +0000
Manifest this update:     Fri 04 Jul 2025 13:01:01 +0000
Manifest next update:     Sat 05 Jul 2025 13:01:01 +0000
Files and hashes:         1: 1Cq3jtp78B2VtZd07TRry_lqJoQ.crl (hash: GrbmUDf7lHhToaLz/Mi7u5x9S12UGjxqxHH16SXZqXk=)
                          2: veEHXuiIgvjqTG6WTLvj8TN1Y9c.roa (hash: zCX9I5DqbiV1NyDUSWL69SaWgCwLBmNnvgRIApALMN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 13:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d5:86:aa:6a:1e:81:17:84:e3:54:49:07:17:cc:ce:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
        Validity
            Not Before: Jul  4 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=4ded712665334e7eef461cb5446718970cef6238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:a8:d7:2c:45:c4:53:96:5e:5c:bf:47:93:
                    a3:4c:eb:23:8e:b2:f4:a3:32:66:61:d9:2b:e3:cf:
                    71:45:cb:9d:78:95:71:fa:e3:e5:03:b7:c7:0b:03:
                    5a:c0:87:b3:e1:24:cb:94:de:41:9d:8f:14:dc:d2:
                    ce:56:35:77:9b:08:6b:10:34:d1:46:f8:2a:24:3f:
                    e3:86:fb:51:0c:cb:08:fd:65:29:4a:ed:12:97:15:
                    b4:4c:ea:25:76:5d:e2:64:49:70:3a:34:40:b3:89:
                    af:6e:6c:d5:7c:04:68:56:7e:b9:f0:1a:2a:16:d3:
                    ce:6d:85:40:53:a9:9a:90:d8:90:c1:1d:bc:71:63:
                    2f:97:45:4d:f6:a7:4d:30:ca:8a:07:81:b2:70:ef:
                    99:20:89:ee:ea:d5:ee:54:64:b0:64:4d:3d:79:4d:
                    69:4d:c9:85:7f:56:59:f5:17:51:50:f7:b9:68:46:
                    e6:d3:ec:0b:22:ca:c2:9f:48:c3:4d:64:fc:ff:5a:
                    d2:3f:95:4c:fa:57:9d:19:49:51:8f:9d:c3:75:7b:
                    1d:6e:81:09:0d:87:ce:b4:96:dc:10:78:41:9e:05:
                    68:43:78:2b:79:b2:84:de:de:f4:3c:ad:76:15:5d:
                    49:e3:7a:30:84:57:7a:e4:57:fb:2b:69:46:92:47:
                    06:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:ED:71:26:65:33:4E:7E:EF:46:1C:B5:44:67:18:97:0C:EF:62:38
            X509v3 Authority Key Identifier:
                keyid:D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:14:d7:f7:13:71:02:a7:90:d9:a1:7f:dc:ed:77:fb:a8:7f:
         3e:34:a1:94:24:dd:5c:a6:16:e1:c7:78:c6:76:c5:2a:d5:8b:
         a0:ed:df:f4:2f:29:74:79:15:72:86:fa:61:8b:2e:2d:7a:d6:
         1e:82:e3:88:9d:b1:b0:35:1e:7d:b9:09:b3:2c:a9:f4:7e:d5:
         6f:92:b8:31:2f:13:83:00:95:87:fc:55:e4:9a:eb:5b:c8:b6:
         32:7f:ab:91:8b:5f:af:f1:23:ca:f1:7d:0c:fa:8b:fe:a6:07:
         1a:17:f8:20:c7:0e:1b:28:ea:d8:62:d8:d1:8f:12:b8:9e:36:
         85:c4:fe:2f:14:3a:29:56:6d:e4:91:fc:72:b0:f6:a7:5a:d4:
         77:63:c1:f5:f7:88:97:19:87:7a:d6:56:43:c8:88:ea:ce:67:
         36:d0:be:dd:ed:d2:ca:3a:9d:cf:2b:ce:24:cf:3d:b6:6f:c4:
         d4:55:38:6d:d3:7a:f4:1f:9a:c7:a4:36:07:6b:26:59:45:21:
         90:8b:9c:99:d9:62:08:b3:28:df:b5:6f:4a:b8:f0:a7:58:a3:
         20:96:ba:2f:b1:fa:2a:c3:22:9d:c2:60:fa:61:39:27:ba:2c:
         d0:fd:5b:ed:ce:8b:5d:78:43:d9:8f:b1:50:c9:3b:ad:37:39:
         80:69:0e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:05:33 2025 by rpki-client