Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
File:                     8aBsbBCOlBmyzbIdSLSaa71sFt8.mft (raw, json)
Hash identifier:          7g02St9dQMKSYM/WAqKX8uWdGq4GC/t/p6XnRk+Qm2Q=
Subject key identifier:   19:AD:2A:62:46:DC:04:85:B5:8F:F5:F5:32:F0:C7:40:8D:2D:70:AA
Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
Certificate issuer:       /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Certificate serial:       0197827C733C556264B1A4D8F8986EC5B766
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
Manifest number:          1551
Signing time:             Wed 18 Jun 2025 10:01:23 +0000
Manifest this update:     Wed 18 Jun 2025 10:01:23 +0000
Manifest next update:     Thu 19 Jun 2025 10:01:23 +0000
Files and hashes:         1: 8aBsbBCOlBmyzbIdSLSaa71sFt8.crl (hash: mjpUKx5FU/jvRV6lpqWE0FQcsGT52B0EnBc1E18IM/Q=)
                          2: LYYtWBIrqnMkBqXL_qoGSSiMC0A.roa (hash: GO+MMgl638g9Pe8U4lrnZd+WeVwSJjTIvRPV7rn/M2U=)
                          3: qUqbG1fI6WnBp5sF-Oa70_Lholo.roa (hash: Onc/iKE+MBUdx68cwO8V8LQmCLrY9+uNfRvlbv3SVUg=)
                          4: vNazpVnOuKKsE-A9nDrKkBqBqmw.roa (hash: 6yzwUeXrNsunwiRKny+F9bobTBkszKyU+zUViVo+zKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 10:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:7c:73:3c:55:62:64:b1:a4:d8:f8:98:6e:c5:b7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
        Validity
            Not Before: Jun 18 10:01:23 2025 GMT
            Not After : Jun 19 10:01:23 2025 GMT
        Subject: CN=19ad2a6246dc0485b58ff5f532f0c7408d2d70aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b3:94:3b:ad:c2:c6:52:98:0f:e0:0c:e4:8c:
                    c2:a4:5d:bb:4e:bb:be:ae:c4:d9:8d:79:9d:75:17:
                    51:49:0e:3b:1c:19:fa:1b:56:0f:7a:c6:18:10:8d:
                    13:5a:96:55:1a:3d:56:f4:43:74:5d:b1:38:92:7c:
                    e7:a7:c7:42:4a:f7:86:ff:29:80:95:97:7f:b0:90:
                    85:97:08:a8:01:87:3a:4b:b3:3b:ca:93:83:d5:b3:
                    25:50:94:dc:c8:bc:70:98:69:e9:11:e7:2f:22:ce:
                    e7:46:0a:5e:cc:4f:f4:06:9b:c9:74:cc:12:b4:72:
                    13:e3:af:a3:50:ed:05:ec:32:13:db:50:b6:c1:be:
                    9b:e0:45:b3:f6:2f:cf:ad:14:78:77:0d:fa:5e:e1:
                    52:62:59:ba:da:95:1b:1e:1c:bf:d1:e3:01:f0:cf:
                    d9:61:6f:1e:e8:29:b4:98:c6:31:86:20:96:f1:f2:
                    53:2c:10:27:8c:e1:3b:35:de:c5:e0:80:4d:16:d5:
                    f6:c3:1f:ac:b7:99:ac:d6:84:55:bf:0a:b9:f3:d5:
                    0e:b7:5a:fd:41:8c:dc:7c:18:3e:44:85:65:88:d8:
                    11:76:cb:0d:d0:0f:1f:b3:d0:3d:98:83:58:3f:da:
                    25:ca:cb:11:c2:ae:69:aa:2c:a1:fb:dd:01:87:9d:
                    b4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AD:2A:62:46:DC:04:85:B5:8F:F5:F5:32:F0:C7:40:8D:2D:70:AA
            X509v3 Authority Key Identifier:
                keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e7:11:6b:b1:8c:9a:28:3e:04:6d:af:e1:dc:4d:bf:f8:39:
         27:35:c4:b5:10:b8:a0:76:4a:e7:36:0e:d6:44:68:d6:bd:e0:
         ce:44:81:40:9e:ec:64:70:6c:b1:bd:45:a9:ce:c1:1b:85:b2:
         41:83:f5:19:26:25:cd:63:9d:24:92:83:e8:45:c9:4e:43:b2:
         5e:f3:04:13:96:92:b0:61:0b:44:d2:13:9e:dd:db:6d:37:c7:
         84:31:54:38:d2:17:14:61:50:30:d3:7b:1b:cd:3a:77:1e:99:
         d7:c2:2a:6b:ce:fa:ba:8e:38:82:48:0b:37:86:19:79:46:7f:
         17:1a:5a:2e:42:00:d3:a5:86:67:35:26:8f:04:bc:8c:90:24:
         2e:05:cb:8a:1f:6d:f2:d9:21:0d:45:46:22:19:6a:c0:b2:78:
         49:3b:35:0a:cb:ee:60:1d:c4:bc:b2:bb:6b:83:a1:90:77:91:
         78:cc:8b:de:67:01:3b:d7:7d:c6:4c:72:97:10:60:a0:f7:82:
         38:b6:b9:ce:c9:07:ea:4a:d4:96:0c:84:0f:7e:47:c1:35:52:
         e4:89:cd:a1:76:89:6f:ee:6b:18:91:82:4c:86:ea:d7:da:51:
         74:d0:e9:f8:73:2e:4d:e3:1f:fe:6f:6f:66:e9:f7:47:0b:4f:
         8f:83:14:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:04:10 2025 by rpki-client