Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
File:                     1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft (raw, json)
Hash identifier:          t7PS3541vHzEzno3QLQCeDHsknl0/MqFu7AGggK5cVM=
Subject key identifier:   31:BE:2B:77:E9:6B:A6:C6:BE:16:14:35:F9:E3:AE:D2:30:29:3A:DC
Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
Certificate issuer:       /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Certificate serial:       0197887DE3BA89DFACBED76291B713DEE203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
Manifest number:          159F
Signing time:             Thu 19 Jun 2025 14:00:41 +0000
Manifest this update:     Thu 19 Jun 2025 14:00:41 +0000
Manifest next update:     Fri 20 Jun 2025 14:00:41 +0000
Files and hashes:         1: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl (hash: SMXcnuk7rpc4P3dpRklM1rV75uSkweT/2KJnSc4Cdhw=)
                          2: xCeuCdpHeZXyZn91vNpEgouKwNY.roa (hash: YgdYQ7c1msQKXeGAh4ZCZBOnjKpRZTljQq9qhsHOdSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 10:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:88:7d:e3:ba:89:df:ac:be:d7:62:91:b7:13:de:e2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
        Validity
            Not Before: Jun 19 14:00:41 2025 GMT
            Not After : Jun 20 14:00:41 2025 GMT
        Subject: CN=31be2b77e96ba6c6be161435f9e3aed230293adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:66:76:f8:15:38:f2:e1:c8:c7:2c:e5:cb:ae:
                    5e:77:14:71:0d:14:98:44:19:12:73:62:e8:61:09:
                    8e:23:5e:74:8a:ea:9c:23:17:18:aa:39:01:4e:a4:
                    e4:73:13:51:0d:1d:75:e5:8c:06:bd:3b:94:bd:e6:
                    f6:22:57:d7:e7:f8:76:35:dd:8d:df:5b:e3:fd:41:
                    77:07:ed:7f:04:37:0c:19:44:de:25:6b:a0:69:51:
                    ac:8d:62:51:a7:f0:1e:74:61:12:18:86:dc:47:17:
                    d6:c8:d2:2c:25:e3:f3:d3:9a:df:e9:4a:4f:26:83:
                    1f:ca:2c:09:95:ff:d6:38:35:41:3f:76:ba:ff:9c:
                    34:7e:0d:88:12:8a:e1:0f:a8:a9:df:cc:76:cc:80:
                    b2:29:e5:d1:5f:c9:bd:c2:98:69:87:e6:25:2a:2d:
                    fe:8d:31:56:33:ff:fe:b7:1f:1e:90:5d:85:19:4a:
                    2e:c3:c7:8a:82:c5:4f:ea:22:12:63:2a:c4:80:aa:
                    05:62:2d:6a:67:1b:cc:51:34:73:30:64:4d:ca:f8:
                    e4:41:2b:e5:1f:8d:6e:63:1d:bd:0e:cb:83:26:e5:
                    ea:b1:7b:c3:4e:c1:ec:ea:f4:03:52:b1:7f:3a:e8:
                    bf:3f:4a:25:1c:23:ef:8e:a3:94:c3:41:69:e4:54:
                    31:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BE:2B:77:E9:6B:A6:C6:BE:16:14:35:F9:E3:AE:D2:30:29:3A:DC
            X509v3 Authority Key Identifier:
                keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:07:a1:68:5b:12:01:0b:98:af:7f:93:d0:89:0b:9f:4f:88:
         b3:b6:1b:0c:89:98:d2:de:1c:3d:08:9c:b2:6c:82:3e:dd:8a:
         de:63:7f:2c:b8:55:9d:99:cc:67:3d:dd:74:60:b0:25:a0:06:
         aa:55:4d:46:3d:47:e1:86:bc:31:aa:2a:6e:b3:90:3c:13:6d:
         6f:18:25:b8:fd:12:22:55:e9:1a:96:3a:b6:71:81:34:39:f5:
         c6:88:9b:b9:95:72:7b:c1:55:d1:00:ca:38:b1:bb:0d:0e:c6:
         e0:9e:2d:62:4d:5d:76:4f:57:c4:92:33:53:86:a0:f2:8c:4c:
         1a:c8:c0:0d:5d:25:0f:79:ee:8f:6f:ca:b8:2e:af:fb:b4:58:
         6c:00:81:48:da:d6:a0:19:6e:0e:e8:2b:21:f8:eb:49:94:78:
         d0:41:66:20:ac:54:be:bd:67:47:d7:5b:04:69:1f:20:c8:f8:
         3d:b7:b8:e4:bd:52:d6:0c:0e:22:b2:4c:c1:bb:21:80:95:38:
         39:93:a2:c7:f2:bd:3e:4b:18:0f:a3:46:f6:de:1f:e9:f1:13:
         a9:6e:6e:c8:61:89:39:0f:83:44:da:d4:fe:6c:56:61:64:c0:
         0d:35:e4:db:e3:62:90:d6:3f:fd:7e:04:d6:e8:26:f4:34:a5:
         27:b5:20:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:53:12 2025 by rpki-client