Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
File:                     1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft (raw, json)
Hash identifier:          A0mQCQRwWib+wn9I8WZ/iUmvHEKi57Tg4OwZE3IFnL0=
Subject key identifier:   57:BF:75:70:E7:89:26:FC:29:82:F5:7E:B7:39:1A:18:92:D9:C1:20
Authority key identifier: D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
Certificate issuer:       /CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Certificate serial:       0197730999EDDFF54FE86DFCA96BEB72733D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
Manifest number:          06C9
Signing time:             Sun 15 Jun 2025 10:01:38 +0000
Manifest this update:     Sun 15 Jun 2025 10:01:38 +0000
Manifest next update:     Mon 16 Jun 2025 10:01:38 +0000
Files and hashes:         1: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl (hash: dOQi4ylHn7bQa/ulwWBnOyzxNGRTpvEGVPlLJWEHTP0=)
                          2: ngDDmkyYAF9itPtooLnD-4aIxnc.roa (hash: xRemSKj2s+7N5AQoS3YswgNjXP01ldeAV619NqxAwU0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 10:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:09:99:ed:df:f5:4f:e8:6d:fc:a9:6b:eb:72:73:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d64d4b9086158bc296b200a60fc3750e951d22f8
        Validity
            Not Before: Jun 15 10:01:38 2025 GMT
            Not After : Jun 16 10:01:38 2025 GMT
        Subject: CN=57bf7570e78926fc2982f57eb7391a1892d9c120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:93:1a:ed:45:81:72:c4:cc:2a:05:ad:48:1a:
                    f1:a5:b9:18:a2:e3:30:b9:37:ea:82:a0:cf:f8:a6:
                    7f:8d:cc:ce:bd:4c:49:e5:9f:de:d7:fc:0c:d5:7b:
                    69:09:da:92:c3:d1:8d:c7:c0:4b:c7:72:14:86:bc:
                    e6:5f:c1:91:ae:8d:da:1d:ff:5d:5b:e3:92:68:85:
                    14:1a:41:be:c0:80:66:4b:12:0d:33:37:aa:f2:dd:
                    5f:27:66:e2:e2:13:d6:17:f1:ae:c7:7b:ac:16:b6:
                    12:d0:51:08:90:30:01:25:d0:b7:e3:05:5d:ba:10:
                    ea:2c:4c:0a:0a:e6:76:27:d0:fd:d7:52:06:f7:25:
                    87:09:17:15:96:88:9b:43:18:97:33:ec:bb:17:ac:
                    29:c1:5d:19:da:ee:3d:22:26:77:95:4e:7a:de:58:
                    68:40:39:dd:78:d5:a9:f6:9e:38:d0:2c:93:cb:af:
                    b9:2f:e5:f3:f7:20:5b:51:9c:38:78:b5:73:d4:fd:
                    0e:c4:e0:86:31:28:ea:35:4f:21:36:f3:54:35:8b:
                    e7:86:f6:99:c9:36:79:4b:5b:69:3e:ca:23:b7:93:
                    93:b6:59:76:80:76:12:68:23:d6:f3:f9:56:80:c9:
                    24:7c:78:f1:e3:c6:ee:7a:73:53:53:0d:98:28:7b:
                    34:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BF:75:70:E7:89:26:FC:29:82:F5:7E:B7:39:1A:18:92:D9:C1:20
            X509v3 Authority Key Identifier:
                keyid:D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:19:6b:18:c5:e8:a4:5b:45:75:4d:d8:f5:47:9c:3c:43:90:
         e3:83:2e:0c:8d:5e:f1:dc:b3:d5:0d:91:eb:67:de:3f:16:4e:
         5a:13:d1:28:aa:b2:1c:5f:20:ac:a8:f7:28:08:04:aa:6b:a1:
         1f:78:3f:74:30:08:96:4d:79:6e:84:d4:7f:0e:35:1e:66:15:
         e2:10:a0:33:b8:bc:1f:9b:59:51:d0:60:51:cd:b9:fb:55:ff:
         70:3c:4b:48:71:7e:0a:29:fc:5a:fb:4d:a0:c9:fa:84:03:a2:
         3e:8a:9e:e8:d7:f8:6c:ad:02:a6:bf:72:ba:5e:5a:29:3a:67:
         b5:e3:eb:55:52:5d:85:dd:76:7c:fd:86:c7:02:10:0c:32:f9:
         7e:68:7e:94:22:42:c0:ad:d3:58:ca:c6:08:5c:75:6b:cd:8d:
         a6:1f:28:18:19:51:b0:04:7b:7a:7d:c9:bf:ec:39:77:5e:a1:
         6a:1c:a0:da:40:02:d2:7d:97:5c:63:aa:b4:81:06:09:f8:a4:
         5e:a7:33:6a:ae:c7:4c:59:7e:68:fa:a4:49:6a:c1:06:d0:a1:
         64:d0:2e:52:62:48:ab:ad:76:aa:0f:26:d9:ae:50:f2:89:37:
         d9:23:2d:db:98:15:ec:d5:cd:b4:f3:10:a0:b7:fb:b5:10:dd:
         04:76:4c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:04:48 2025 by rpki-client