Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
File:                     K-1ik1-0ivbkTLoZQm76tR8cVBA.mft (raw, json)
Hash identifier:          2Ui46ErViwofLbjF/eraV1Ma4rF70PrN0OMqS0D8NfM=
Subject key identifier:   4C:25:1F:9F:C6:19:E3:B2:BE:70:84:68:3F:74:2F:54:19:DD:4D:84
Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
Certificate issuer:       /CN=2bed62935fb48af6e44cba19426efab51f1c5410
Certificate serial:       01976CCF7206860851811AF9468A8BC4265E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
Manifest number:          0C75
Signing time:             Sat 14 Jun 2025 05:00:23 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:23 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:23 +0000
Files and hashes:         1: K-1ik1-0ivbkTLoZQm76tR8cVBA.crl (hash: nRpNJ2Ll8LNufwcT6bMlGu+3fTjcPApNjo+yI98qRb0=)
                          2: jYHRdDHfT6bQOmOGT7Tls1WhRLY.roa (hash: pWv0ClQXtIskoLimOYMYx3t3am8WhnpvjCRS+V8Iqy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:72:06:86:08:51:81:1a:f9:46:8a:8b:c4:26:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410
        Validity
            Not Before: Jun 14 05:00:23 2025 GMT
            Not After : Jun 15 05:00:23 2025 GMT
        Subject: CN=4c251f9fc619e3b2be7084683f742f5419dd4d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f4:5e:1c:b3:1a:c7:2f:32:23:4c:67:f5:54:
                    7c:44:44:05:5a:fb:cb:36:00:86:af:60:02:0f:57:
                    6a:75:9d:39:eb:fb:8c:2a:98:1c:8f:d2:8c:16:f5:
                    e2:f8:ef:7f:0a:49:68:a1:a9:77:23:0e:e1:35:f0:
                    aa:8d:36:fb:aa:12:90:9b:d1:ef:11:47:75:84:f3:
                    9e:fe:52:f2:de:b6:03:07:fe:6c:ae:09:ae:31:82:
                    0c:83:54:36:3f:88:9f:0b:53:94:f9:36:17:62:88:
                    d3:da:4a:c0:c4:d3:3c:62:3b:2a:95:0a:f7:64:d8:
                    80:a7:71:7f:fe:1b:b0:8e:08:6e:df:11:df:08:c0:
                    82:6c:12:b2:96:05:9f:4d:6a:d1:f9:54:04:a6:2e:
                    f5:db:63:df:be:5e:8d:d2:2d:d6:a8:d9:2b:f0:a8:
                    2e:d9:de:07:b6:0a:ef:a8:37:60:7a:e3:03:b9:1d:
                    c8:06:a4:ee:b3:73:28:ed:93:de:03:7d:5b:48:7b:
                    94:c4:d8:69:c7:e8:87:89:69:95:0d:4e:44:7d:3c:
                    6f:35:69:99:96:0e:66:5c:7c:95:9f:d7:28:98:5f:
                    f2:d4:3b:cd:28:0f:d7:16:29:4e:3f:de:91:f8:11:
                    0c:3f:b2:56:a2:f4:a0:fc:dc:7d:13:cb:87:2c:47:
                    20:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:25:1F:9F:C6:19:E3:B2:BE:70:84:68:3F:74:2F:54:19:DD:4D:84
            X509v3 Authority Key Identifier:
                keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:92:60:15:a1:50:8e:6a:9e:55:b4:7d:33:17:0a:09:8c:44:
         ee:c7:14:c5:d3:ad:3d:c1:c8:07:11:28:0a:a4:1b:4b:f4:57:
         c7:83:48:9a:6c:5c:e3:d3:8b:a5:55:e9:5a:bd:1f:4b:45:3e:
         bb:df:74:ff:fb:3d:73:f8:cb:27:03:b8:24:c2:e7:3f:ed:24:
         78:14:00:0d:a7:25:e6:0d:2d:32:dd:7a:21:c5:dd:f6:1e:2e:
         53:ec:f0:66:f8:7e:64:40:99:f7:8c:8b:29:68:15:cc:95:13:
         11:26:a5:e8:43:4a:63:5a:6a:ff:0e:ea:19:98:79:74:62:25:
         d1:48:8c:23:4b:40:88:dc:c3:7f:7d:7e:70:bb:56:ce:27:37:
         e7:e8:c4:50:ac:d9:74:8b:b2:55:f0:1d:8d:a5:b9:0c:8b:2e:
         6b:b4:a1:b6:45:83:d2:f4:93:12:44:7b:8a:23:2c:32:b6:30:
         bb:29:ee:8f:ec:f4:4e:3d:17:b9:90:41:db:d8:12:3f:25:35:
         ce:83:78:63:1d:4e:90:59:34:d8:5d:e3:67:08:fd:4d:2c:5d:
         18:b7:85:f9:58:14:fa:aa:67:f0:09:77:87:cc:8b:d9:b7:9c:
         0b:cb:47:67:6b:eb:b7:87:0f:c3:8d:f8:a1:73:6b:4c:e4:0b:
         81:b5:fc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:44 2025 by rpki-client