Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
File:                     K0q0wVF_cy34suyD3krSNo1Fz98.mft (raw, json)
Hash identifier:          gCDx7b1XvNhsiKiLZWfWYXhRpJde7rQwxMtcYigmmXI=
Subject key identifier:   96:D2:CF:64:2D:85:2F:FC:74:B9:0D:00:EB:67:73:5D:0B:1D:4B:85
Authority key identifier: 2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF
Certificate issuer:       /CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
Certificate serial:       01976F2CA80078964DA6882ECADC81C861E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
Manifest number:          1469
Signing time:             Sat 14 Jun 2025 16:01:26 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:26 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:26 +0000
Files and hashes:         1: K0q0wVF_cy34suyD3krSNo1Fz98.crl (hash: aRWPjGIJfnwXMN6j0pfKKrA127Xe1WKvMnzsmzdLQSc=)
                          2: kUV5gNpaG9Xf3cZ7lRR3FP5Oag4.roa (hash: 2uQS8P+CjJocxImWDpdYZcJPqNgU1mCNOmTtqZK5rjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:a8:00:78:96:4d:a6:88:2e:ca:dc:81:c8:61:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
        Validity
            Not Before: Jun 14 16:01:26 2025 GMT
            Not After : Jun 15 16:01:26 2025 GMT
        Subject: CN=96d2cf642d852ffc74b90d00eb67735d0b1d4b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:c6:05:85:e2:0d:73:4a:84:d5:66:35:78:
                    04:c2:e8:1e:4d:03:d9:86:62:fb:59:04:d7:d5:31:
                    4d:b8:bd:b3:78:97:24:45:0f:c4:ed:d2:0c:56:b7:
                    76:26:14:4a:b4:4c:b2:ed:d8:ab:bb:cc:f5:52:96:
                    cf:48:67:d0:89:c2:91:7f:d9:d3:b5:c6:21:cb:92:
                    9f:dc:1b:19:fa:34:1d:42:b2:12:65:72:32:c1:ee:
                    24:b0:1f:bc:dc:f7:ba:27:3b:cf:59:e0:cc:cf:0f:
                    e8:c7:d6:45:63:c1:5d:22:7e:ae:69:8b:a1:74:de:
                    f7:57:01:bf:b1:1e:6a:0a:0d:7e:80:1a:97:75:fa:
                    ce:9f:e9:32:41:04:45:2b:c5:e1:a7:a3:4a:40:36:
                    e5:35:fa:42:bd:e6:f4:df:53:d0:f8:8d:57:5b:7d:
                    44:5d:73:06:2a:30:69:34:f2:96:87:7d:09:5b:25:
                    c1:ff:b1:bb:3e:75:6e:a3:c8:10:5f:fb:a7:7a:be:
                    2e:ca:32:73:03:f0:9f:ce:64:ce:b4:61:09:9f:e1:
                    1e:b7:dc:3d:b0:f6:c0:bb:aa:0e:f8:cd:81:cd:97:
                    9f:8f:a7:00:2f:9c:a5:83:34:f1:ef:4b:b0:87:fa:
                    73:66:64:42:a4:6e:ad:f9:e5:c8:bb:b7:af:0a:6e:
                    81:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D2:CF:64:2D:85:2F:FC:74:B9:0D:00:EB:67:73:5D:0B:1D:4B:85
            X509v3 Authority Key Identifier:
                keyid:2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:53:cf:1b:1b:84:fa:1e:79:27:fd:73:d3:01:88:7a:20:f0:
         43:8c:fc:7d:c9:a2:0c:98:84:97:49:99:1d:a7:c6:0e:04:02:
         50:59:de:7d:4e:97:05:71:77:8a:96:a0:ae:06:c1:96:14:c4:
         06:b9:b9:23:0e:9c:72:39:5a:00:7a:f3:39:65:4e:32:1e:74:
         f9:f6:99:20:3b:e4:9f:64:68:2b:ff:21:1d:7a:6f:cf:74:41:
         cd:2b:b8:bf:c6:ed:4b:a1:96:df:3b:b0:77:79:6d:75:cc:e8:
         3e:ac:1f:b2:3c:d3:09:a5:45:a8:ca:f9:ef:b3:90:93:53:7d:
         5c:2e:e7:41:20:0a:42:f4:72:b8:10:a7:42:05:9e:4e:dc:09:
         3b:2f:44:2c:8f:60:b5:98:d5:2c:c5:78:06:44:7d:31:09:30:
         9e:f3:bf:9c:08:54:b0:5f:10:10:6f:57:ec:df:c2:60:01:d2:
         8b:37:b7:4b:92:98:82:bf:0c:4e:5d:d5:d4:dc:b3:61:46:e2:
         92:ff:bc:f9:dd:3e:53:c4:64:6f:44:fb:e0:5d:f7:92:21:24:
         dd:5c:80:f9:b3:4d:a3:1c:8b:86:1a:f7:a9:89:5c:04:ef:f7:
         1b:8e:f2:a2:3b:2f:7a:7e:2d:65:0d:83:04:7c:77:42:51:40:
         d9:16:11:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 02:51:15 2025 by rpki-client