Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
File:                     ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft (raw, json)
Hash identifier:          Dmnu4e6YhZ6kO4zzeZ86eA1Dn/FBMLFlMq1NJWI4KoU=
Subject key identifier:   E9:B1:DD:1A:58:83:55:9F:0E:28:08:81:93:2F:28:06:2D:67:64:1F
Authority key identifier: 20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73
Certificate issuer:       /CN=20ba71e46c75916b8e5de193cc7f81069df86f73
Certificate serial:       019770084BE88146DBD59F48BD6445A3EF16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
Manifest number:          1291
Signing time:             Sat 14 Jun 2025 20:01:21 +0000
Manifest this update:     Sat 14 Jun 2025 20:01:21 +0000
Manifest next update:     Sun 15 Jun 2025 20:01:21 +0000
Files and hashes:         1: ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl (hash: iWtpkLUW9pYpD7uG35ikhCz0xd5dMtsEJmEcbc3f+Ck=)
                          2: S_d1yxjPDAZnGSrhlxcFQsHo8B8.roa (hash: 1yCKzHKyUcb+bDJzq8H1WVPfPxnz9wCx2KQZUrXnAc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:08:4b:e8:81:46:db:d5:9f:48:bd:64:45:a3:ef:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20ba71e46c75916b8e5de193cc7f81069df86f73
        Validity
            Not Before: Jun 14 20:01:21 2025 GMT
            Not After : Jun 15 20:01:21 2025 GMT
        Subject: CN=e9b1dd1a5883559f0e280881932f28062d67641f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fc:c6:91:6a:33:79:f4:42:0d:c6:0a:b3:5d:
                    63:d2:1d:c9:1b:0f:5f:96:d5:69:16:23:a4:db:7b:
                    69:1e:b8:4b:82:18:fa:d1:01:2a:08:3d:6f:d2:cf:
                    46:d8:ce:ed:85:49:ba:7b:f3:a4:12:e6:f7:9d:04:
                    25:55:9e:83:13:57:28:5f:2e:30:8e:ea:1f:94:c1:
                    7e:87:a8:16:88:71:5a:07:28:d8:a3:84:d6:3b:79:
                    5d:0b:b4:3a:8c:1c:4b:77:80:03:5e:c2:93:29:e6:
                    32:77:2b:d7:11:b7:f9:47:a8:e0:56:75:f1:26:b9:
                    4a:c8:9e:4c:58:8a:68:66:37:35:e0:61:1c:37:08:
                    08:fa:73:7b:2f:bb:1d:67:60:df:9a:c4:b1:56:b4:
                    f9:32:a1:f4:f0:c8:c5:39:f7:25:66:ca:c3:76:ed:
                    8d:fb:c2:8f:e4:ee:57:97:7d:3d:e7:d8:58:e6:5a:
                    8f:2a:01:74:d4:c0:ce:6f:74:87:cc:53:a6:9f:27:
                    2a:b2:ab:f2:93:88:40:08:83:03:7c:da:6d:b4:06:
                    73:d7:dd:05:c1:58:62:82:77:5e:13:c4:ab:fd:07:
                    10:05:8d:67:8c:c3:89:f7:90:c6:e0:ec:ed:a7:e3:
                    c4:03:ca:bc:1a:52:87:e1:80:ba:e4:c3:c9:49:e6:
                    d7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B1:DD:1A:58:83:55:9F:0E:28:08:81:93:2F:28:06:2D:67:64:1F
            X509v3 Authority Key Identifier:
                keyid:20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:22:4c:4b:f0:3c:35:69:16:f0:45:79:72:c5:56:7c:aa:f4:
         50:21:d9:c9:68:bd:d6:96:5c:4b:ad:2f:34:df:7d:26:fb:27:
         7a:cf:b1:a7:d6:ef:70:79:2d:53:11:ba:5e:12:bd:7b:de:e0:
         66:2e:71:8b:fb:67:5d:83:dc:8f:9c:a5:c8:67:65:f2:86:dc:
         9d:57:91:67:2c:9b:ad:08:5a:64:84:ec:b0:d0:04:a9:e6:1e:
         46:a3:81:f0:48:8d:70:0b:ff:ed:1e:4a:e0:54:6b:49:7d:dd:
         47:1b:21:21:cb:d8:41:f8:27:36:3a:32:18:1c:07:4a:96:bf:
         96:c2:08:80:18:fa:a8:f0:1c:57:88:54:ee:bb:b2:b3:b4:e9:
         2f:a4:a4:91:4e:fb:0b:9f:73:1d:e5:1e:6a:bb:6c:14:2a:ca:
         a9:dc:dc:ad:62:72:a5:e4:b2:81:70:70:ca:4b:b3:6b:a0:08:
         f0:9c:b1:7f:78:0b:59:92:15:02:67:08:d2:9d:76:5c:08:cb:
         ab:b1:39:12:4c:63:c0:6e:88:ad:a9:72:53:74:b3:54:cc:40:
         20:64:a5:ab:12:15:55:06:ea:6b:44:ab:03:1a:7e:22:7c:65:
         9e:e2:e8:7f:55:30:2a:f9:38:d9:8b:51:54:0d:be:e8:43:48:
         ac:93:83:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:28:41 2025 by rpki-client