Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft
File:                     1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft (raw, json)
Hash identifier:          /e2DIU7j3U+OtWvmAoojSB3Rz11mu6YDEZ+PnelSXWI=
Subject key identifier:   55:8B:CF:E5:D4:92:3F:2E:B0:77:AD:40:3F:8B:CB:37:74:8F:6D:BA
Authority key identifier: D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3
Certificate issuer:       /CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3
Certificate serial:       01976BBD9027EFCE6842BE044048DD7341D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft
Manifest number:          12D0
Signing time:             Sat 14 Jun 2025 00:01:14 +0000
Manifest this update:     Sat 14 Jun 2025 00:01:14 +0000
Manifest next update:     Sun 15 Jun 2025 00:01:14 +0000
Files and hashes:         1: 1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl (hash: QbMd9of+n2oURRYIViFZnWTQu/3Bej4I7gZY53AjmSA=)
                          2: OialHmpN2PfgJDs6a7B2v4zJHRs.roa (hash: Xr6Ys8oUxUhvsBwxBXXCldMQezaqpARcpSeHUjpkSck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:90:27:ef:ce:68:42:be:04:40:48:dd:73:41:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3
        Validity
            Not Before: Jun 14 00:01:14 2025 GMT
            Not After : Jun 15 00:01:14 2025 GMT
        Subject: CN=558bcfe5d4923f2eb077ad403f8bcb37748f6dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:93:ac:9b:ef:9e:53:f7:e3:be:56:17:bc:f4:
                    fb:2a:3c:b9:a7:a3:88:d3:4b:a0:c5:05:ec:37:d0:
                    f1:5b:97:70:9f:8c:31:14:bb:d2:27:02:e4:67:7e:
                    c4:12:5a:a8:07:66:ea:3a:58:a9:0f:de:44:1b:97:
                    29:f3:05:6c:33:20:a4:a0:b1:9f:6c:19:12:2c:81:
                    bd:6d:43:ee:c8:6f:96:e0:88:0b:3d:ff:24:04:d5:
                    ad:3b:98:e0:b2:b9:ca:85:51:45:b2:66:f0:c7:4c:
                    c1:70:22:67:38:74:61:df:1e:7d:70:88:8d:9d:40:
                    1a:52:b0:78:7d:17:ea:54:17:8f:3b:c1:33:27:7d:
                    3c:96:70:b4:75:db:f4:6b:3b:7b:a9:86:7e:f8:bf:
                    2b:e5:51:aa:2d:ae:d5:ef:53:77:4c:ba:0e:65:b5:
                    9a:70:91:69:be:4f:18:93:4a:07:77:05:20:73:b1:
                    ed:c4:e6:fc:6f:c6:8f:11:3b:b3:68:6e:f9:f7:f4:
                    62:3a:7c:d1:26:69:90:cc:cb:50:a6:01:23:71:2d:
                    08:be:cc:5e:53:57:a4:e2:76:94:2e:dd:5b:27:40:
                    de:dd:63:54:82:51:4f:07:0b:0e:1e:d0:57:73:52:
                    e3:ea:fa:e7:13:e0:ea:07:54:89:4a:6f:fa:1e:8c:
                    17:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8B:CF:E5:D4:92:3F:2E:B0:77:AD:40:3F:8B:CB:37:74:8F:6D:BA
            X509v3 Authority Key Identifier:
                keyid:D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b4:bc:ac:c0:d2:cc:6d:17:ee:42:da:4a:6a:9b:68:eb:ce:
         e0:5d:f4:2e:68:6d:17:0d:05:fd:63:7f:02:c5:b0:40:c6:83:
         73:2e:3a:36:35:75:37:72:7b:31:65:db:6e:1b:19:6f:3c:6a:
         74:f5:ee:91:54:39:4b:99:69:23:12:e5:75:f5:7a:cd:bb:ff:
         d4:da:7c:ed:5f:8c:8c:ef:df:fe:4f:05:ce:de:09:2a:93:cb:
         bc:88:72:28:63:8e:4f:b5:40:db:b5:90:f8:d5:81:31:2b:78:
         e2:b7:8a:91:bf:1f:e6:c1:09:43:fc:a4:9b:70:ff:5a:fe:bd:
         cd:76:1b:8e:0c:62:ed:c4:64:f7:bf:34:70:8f:1a:52:f4:33:
         7e:78:f5:23:3b:0c:fd:38:d3:7f:64:bf:25:67:50:c4:1b:78:
         90:22:98:d0:d1:b3:43:3b:be:71:6f:bc:aa:33:d7:93:4c:5d:
         c9:3d:9a:09:3f:99:42:d8:0d:1d:35:24:4d:73:4d:58:6d:a7:
         9b:04:83:87:64:a5:6a:2c:30:3e:09:04:19:2c:e0:66:92:26:
         1f:66:a4:3f:7f:21:57:ad:eb:23:b4:be:84:b9:b4:f5:2e:1d:
         4b:57:96:63:ec:fe:ca:85:22:a0:95:22:48:50:2c:09:89:97:
         1f:3d:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:15:42 2025 by rpki-client