Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
File:                     1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft (raw, json)
Hash identifier:          Ihhi51pUIJOk0kAvY1HTwhiOiAiOLiBGg8bKzxcJTrU=
Subject key identifier:   05:B5:12:1C:FA:00:34:64:EF:93:8D:1A:FE:8C:0B:F6:AC:B4:92:D2
Authority key identifier: F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
Certificate issuer:       /CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Certificate serial:       01976C98A89A52FCA7AF1FB09401518C30E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
Manifest number:          12C4
Signing time:             Sat 14 Jun 2025 04:00:33 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:33 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:33 +0000
Files and hashes:         1: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl (hash: IQQS0XLsy8181pQDUsOqPVWu87opYl5sPrzlCyzOBfY=)
                          2: 2Z4uWBrUsnH37u-4XuHfV5Ci7Ek.roa (hash: AkCUWRms5SxBxIsWLsuMaXD0PJyWJJHr8rOMRKJRlkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:a8:9a:52:fc:a7:af:1f:b0:94:01:51:8c:30:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
        Validity
            Not Before: Jun 14 04:00:33 2025 GMT
            Not After : Jun 15 04:00:33 2025 GMT
        Subject: CN=05b5121cfa003464ef938d1afe8c0bf6acb492d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9d:f0:ce:51:83:d7:cb:85:79:6a:55:f8:48:
                    da:de:0c:fa:50:2a:7b:5c:05:00:5c:6e:96:ee:3b:
                    be:78:42:4d:b5:3f:5d:75:c3:db:ad:a9:24:d4:3d:
                    b8:4e:fe:a7:ba:9b:fa:ad:ee:ea:53:d1:a1:dd:26:
                    10:d8:89:b5:5c:26:48:0e:a0:8e:1d:15:99:73:31:
                    ec:1b:38:ef:14:a8:36:50:d1:7f:00:8b:08:0f:bb:
                    06:6b:48:dc:2e:1b:40:f5:eb:fb:41:8f:5a:25:81:
                    4b:3d:5e:da:5b:57:8a:79:0e:93:bd:40:2b:b0:50:
                    78:29:4e:f2:e4:0b:0f:d7:7d:f0:d1:09:c5:20:44:
                    cc:0a:6c:89:d1:1d:0d:43:4e:44:1e:f6:39:31:78:
                    0e:ac:df:04:29:7c:ca:c5:35:e3:a7:39:a5:d0:89:
                    21:95:24:99:cd:22:00:18:00:f9:45:cb:97:d6:de:
                    b8:84:29:76:ff:fd:54:a8:72:93:25:72:e6:62:9e:
                    8e:19:04:16:18:28:62:78:46:55:3a:33:68:28:f6:
                    11:79:23:d0:10:b9:c3:71:a5:ea:ef:01:42:d3:ce:
                    49:2e:0d:e7:94:b5:27:01:ed:4a:20:df:74:11:fd:
                    b9:b7:f7:d9:6f:5f:e6:f9:66:16:94:63:0d:15:05:
                    c7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B5:12:1C:FA:00:34:64:EF:93:8D:1A:FE:8C:0B:F6:AC:B4:92:D2
            X509v3 Authority Key Identifier:
                keyid:F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:84:b7:23:0f:37:10:a1:63:24:8d:8a:63:1a:81:81:c8:58:
         cd:35:73:24:a6:93:fb:53:4a:66:65:d4:9b:7e:0e:41:7d:c1:
         61:86:a5:ee:54:ac:25:0d:f0:47:bc:11:02:35:81:d2:6d:98:
         3e:e7:c3:a4:26:f3:f3:37:58:57:b6:ec:4f:7e:3f:1d:13:e6:
         2e:3a:19:8d:e8:10:c5:18:f5:3c:da:43:0f:7f:48:3a:c6:51:
         61:3c:23:89:07:74:98:c4:fa:86:c0:9a:b8:d0:c8:f5:0c:35:
         59:b3:f4:18:dc:84:84:28:fb:05:a8:ee:25:2e:d5:d7:d2:fd:
         fc:b3:97:4c:66:b2:cb:83:74:99:82:f7:4a:1a:af:34:7a:a4:
         d3:f8:3a:1b:6c:87:5c:76:8c:7c:77:e7:c6:fd:ba:9a:9d:6f:
         33:d4:a4:d3:4f:eb:72:04:b8:30:fd:cf:5b:66:31:48:35:dc:
         fe:9f:3e:9e:3d:53:f8:ba:64:03:c0:ec:a2:50:c7:fd:76:50:
         a0:d9:9c:c6:3d:7a:9d:ed:34:16:a6:6f:ab:80:75:4b:53:98:
         ec:93:f0:07:0c:28:87:f3:e9:1a:e8:31:04:8d:73:75:65:40:
         48:d2:99:9a:f9:1b:2d:03:20:e5:a2:4b:41:b8:5a:ac:a1:04:
         46:1b:e9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:46:50 2025 by rpki-client