Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
File:                     1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft (raw, json)
Hash identifier:          wOVJ0zul3wsONje6DhmXi9Q0kU06ttdwr9nAPF4v0Lg=
Subject key identifier:   5E:9D:D8:D3:A6:7C:C4:C0:6C:4E:0D:6D:F2:F8:7B:C0:6A:36:F6:E0
Authority key identifier: D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
Certificate issuer:       /CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Certificate serial:       01977007EACE9D5D3AB0AC54786ABC83C0DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
Manifest number:          12CB
Signing time:             Sat 14 Jun 2025 20:00:56 +0000
Manifest this update:     Sat 14 Jun 2025 20:00:56 +0000
Manifest next update:     Sun 15 Jun 2025 20:00:56 +0000
Files and hashes:         1: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl (hash: ivupMzCmXXdvJ5Zh5bSkYLr4UrnIfQ8f9X70P0ZJkac=)
                          2: oilk7jUBzGUsKxQiO3ENxMgz50c.roa (hash: uezrIJE13+ePzqQZQpEOEl7mUMI9j3C9B4RgtY410tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:07:ea:ce:9d:5d:3a:b0:ac:54:78:6a:bc:83:c0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
        Validity
            Not Before: Jun 14 20:00:56 2025 GMT
            Not After : Jun 15 20:00:56 2025 GMT
        Subject: CN=5e9dd8d3a67cc4c06c4e0d6df2f87bc06a36f6e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:27:91:29:fe:0e:48:c7:28:6c:dc:bb:c2:88:
                    cd:07:59:aa:ef:3a:f2:84:27:ee:0d:41:45:c2:cc:
                    85:9e:b3:93:90:ed:d4:c3:6d:80:8d:b8:02:62:e5:
                    c1:9d:c3:c9:20:91:7b:40:ef:b2:ec:32:c6:5d:73:
                    f9:14:89:82:cf:02:3e:b0:6b:10:88:4c:39:7a:e7:
                    53:f9:72:b2:fc:c9:20:bd:f5:5e:77:44:8f:ca:76:
                    46:9f:f0:3c:83:03:01:26:36:ba:b6:86:f8:82:eb:
                    2d:e6:a3:c6:04:05:6a:15:5a:20:8a:c3:0d:e0:93:
                    4f:0e:5c:d3:02:ef:18:bf:12:f5:06:26:89:75:4f:
                    6a:20:bb:32:60:14:4c:80:2f:93:77:1d:a2:ea:07:
                    13:65:cd:25:50:47:34:cd:30:ee:bd:e0:e7:84:6e:
                    da:31:40:89:8b:a1:22:17:ef:5a:bd:09:22:00:77:
                    6c:20:63:29:40:12:36:9a:54:33:7b:42:bc:50:83:
                    38:2e:06:66:39:88:57:fa:25:30:72:8f:05:da:14:
                    05:b7:4e:84:dc:11:99:88:d9:f9:62:fe:eb:98:31:
                    83:68:ce:0c:78:eb:cf:95:d9:ca:20:65:4b:17:2f:
                    22:f0:3b:1a:ce:d5:08:05:42:fd:5b:82:d7:89:35:
                    e2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9D:D8:D3:A6:7C:C4:C0:6C:4E:0D:6D:F2:F8:7B:C0:6A:36:F6:E0
            X509v3 Authority Key Identifier:
                keyid:D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:0c:a7:c2:a0:71:5e:a3:76:0a:3d:91:9b:42:c4:ef:c9:e8:
         a3:f9:16:e4:85:f2:c2:61:ea:e0:8b:32:b1:65:cf:4b:cf:7b:
         a1:3a:c6:f4:2c:3d:ed:c0:2c:ee:1e:a2:43:bb:09:7d:05:5f:
         4d:51:50:5a:51:98:16:ef:50:f1:59:a5:de:f5:4f:b4:65:b4:
         76:45:f6:ad:ab:d5:a0:dd:fb:8f:2d:52:57:25:0f:3b:85:ab:
         64:bb:e4:6d:8e:70:b1:d5:8e:94:92:80:f5:e1:4e:a1:33:56:
         90:9d:ea:27:df:61:05:d0:13:bc:7c:7a:86:fb:d1:3a:33:69:
         c0:ed:7f:a4:83:56:df:fc:29:b3:20:98:bf:50:6f:e2:8f:b9:
         c9:b0:c6:ea:85:c5:d9:74:5a:09:68:23:98:c0:79:83:ac:18:
         c4:a5:55:06:70:5b:2b:4f:1b:b8:56:c0:08:4e:56:8d:e6:1e:
         3c:fd:ea:a5:8c:2c:b8:b1:73:94:45:83:80:26:07:14:3a:92:
         8b:da:9f:15:55:fb:8c:f5:86:ee:aa:e5:95:c4:d9:cc:20:4a:
         f2:c2:29:68:c4:71:64:de:ff:f0:c0:2a:67:3d:5a:ae:db:50:
         9c:93:01:bf:92:0c:2d:f2:23:da:5f:4e:08:84:d4:35:21:41:
         27:ef:87:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:14:57 2025 by rpki-client